Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/e12d4a44-299a-3aa4-b170-ae5472c19bd7.roa
File:                     e12d4a44-299a-3aa4-b170-ae5472c19bd7.roa (raw, json)
Hash identifier:          v6RFfO9YusFYwPvRQeIzex9nYI96tIBZRYWed3K+pys=
Subject key identifier:   3F:E2:B0:85:83:7F:24:AE:02:5F:54:39:11:36:14:34:19:98:FE:7D
Certificate issuer:       /CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
Certificate serial:       010D0C9F4328584B0A118F0D0193FD5D0B24D900
Authority key identifier: 3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/e12d4a44-299a-3aa4-b170-ae5472c19bd7.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     3258
IP address blocks:        167.253.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:8f:0d:01:93:fd:5d:0b:24:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b98616-e4f8-4c76-8410-cb4b6d93c85f
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=65cfca73-a03f-488c-9a36-d07089aca2cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:18:3d:2f:db:35:25:86:e7:b0:93:2e:8d:95:
                    f5:9b:52:8d:57:fb:83:f1:73:da:45:f9:df:2f:ae:
                    35:15:9a:43:1d:aa:3c:b1:68:6d:a0:5a:ca:75:86:
                    aa:a9:94:42:42:af:35:b4:59:41:b8:39:5f:08:54:
                    7f:9e:af:14:d8:f7:68:a8:cf:b4:ab:ce:a4:cc:e6:
                    e6:49:c4:72:60:af:7b:a1:c2:5f:87:5b:26:c2:71:
                    71:35:89:bf:14:33:51:a0:f5:5b:e6:c9:b3:26:6e:
                    7d:1c:2e:13:9d:5a:71:05:55:bb:dd:39:da:0f:e9:
                    6a:88:79:09:bd:c9:9b:ce:76:3f:84:ce:f2:77:59:
                    8c:25:d8:b9:a5:f8:84:ec:e4:c9:08:cd:d4:b4:71:
                    84:44:61:ed:4b:88:24:00:15:59:a1:40:44:82:56:
                    99:79:96:05:ba:1e:06:86:59:df:aa:8a:c5:49:4a:
                    79:47:d5:4f:b7:81:bc:66:c4:9e:a2:26:19:b5:ea:
                    14:99:20:ac:12:c1:73:88:37:ff:37:18:8d:ba:03:
                    a2:1d:70:fc:c3:3d:28:4a:44:38:e2:10:0f:1b:09:
                    06:f1:e7:4f:33:44:c0:58:5b:27:b5:9f:fb:57:eb:
                    af:c1:e4:97:6e:bf:d0:f3:0b:71:cf:13:22:ba:26:
                    2d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E2:B0:85:83:7F:24:AE:02:5F:54:39:11:36:14:34:19:98:FE:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/e12d4a44-299a-3aa4-b170-ae5472c19bd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.crl

            X509v3 Authority Key Identifier:
                keyid:3B:E1:C1:F5:AC:D6:8E:30:AE:C6:8C:E5:A1:43:13:60:74:9E:D8:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3b98616-e4f8-4c76-8410-cb4b6d93c85f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:75:b9:b5:49:02:a4:70:80:7e:be:b0:d4:23:ab:1e:67:7f:
         85:cb:27:f5:0f:2c:81:39:0d:ba:30:27:c2:b2:2e:0c:e0:b0:
         a6:c0:d8:07:eb:c7:a6:38:4a:20:21:95:66:52:78:26:ab:8c:
         5b:38:43:dd:91:b3:c1:00:64:c3:05:0c:57:be:55:4a:ec:a2:
         67:3a:16:a9:3d:05:45:b0:cf:0e:ba:90:c3:35:7e:5f:ee:3a:
         ff:1b:7f:ae:3b:c3:c4:93:d8:0e:be:c1:57:98:50:5f:69:e5:
         55:d8:88:b1:93:5a:45:2f:bc:af:75:7f:08:91:21:a0:00:9e:
         90:75:70:f5:70:c4:03:6f:91:ba:92:fc:2e:04:32:b9:c1:30:
         3f:a0:56:4f:0b:30:76:37:a8:8d:b7:06:76:e5:75:a1:01:f7:
         dd:32:23:88:55:ae:96:9d:55:49:b1:67:85:44:fb:c7:0a:92:
         0e:7f:0c:0e:95:75:e0:75:5d:f7:93:f6:6b:bb:26:6f:76:88:
         78:56:d3:ce:b5:e3:1e:56:2c:61:d9:93:75:2a:a3:40:8a:2d:
         94:a5:97:7d:3e:55:1c:b2:30:12:e7:f7:2b:b6:44:ff:b4:f9:
         78:09:a5:a2:f3:da:41:c5:77:f2:9e:85:36:c2:e4:02:d7:4e:
         81:de:bb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:40:27 2025 by rpki-client