Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/5c9511ee-140a-3e15-aa57-d189e7ae07d5.roa
File:                     5c9511ee-140a-3e15-aa57-d189e7ae07d5.roa (raw, json)
Hash identifier:          8xIeBuD7paM3wKKjoO+VWLu9wFoYQJixOHmeJjQ92hc=
Subject key identifier:   18:31:91:AE:8C:D5:F6:0F:5B:58:E9:AB:60:1F:CA:3C:C6:36:7B:B3
Certificate issuer:       /CN=baff326b-1f24-468c-b9c6-fa089a461350
Certificate serial:       010D0C9F4328584B41E710ED23FE6CB3E559E4E0
Authority key identifier: 05:2D:96:20:77:4E:FD:BC:47:2C:1C:A1:09:8E:5B:31:5D:1C:FC:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/5c9511ee-140a-3e15-aa57-d189e7ae07d5.roa
Signing time:             Sat 20 Sep 2025 13:00:41 +0000
ROA not before:           Sat 20 Sep 2025 13:00:41 +0000
ROA not after:            Fri 19 Dec 2025 14:00:41 +0000
asID:                     395776
IP address blocks:        107.163.0.0/19 maxlen: 24
                          107.163.32.0/19 maxlen: 24
                          107.163.64.0/19 maxlen: 24
                          192.155.160.0/20 maxlen: 24
                          192.186.0.0/18 maxlen: 24
                          192.250.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:41:e7:10:ed:23:fe:6c:b3:e5:59:e4:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baff326b-1f24-468c-b9c6-fa089a461350
        Validity
            Not Before: Sep 20 13:00:41 2025 GMT
            Not After : Dec 19 14:00:41 2025 GMT
        Subject: CN=02ed9c0c-0191-4777-9d14-e8f01b1e5a9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c8:b3:fa:cb:76:a6:8e:e9:0a:de:4a:2c:4f:
                    dd:d9:0b:70:2c:99:c7:62:10:e7:fa:eb:40:35:d8:
                    68:f1:ab:8f:e2:8d:e2:c4:33:4f:4b:8c:e4:dc:bb:
                    e4:e5:ec:a6:e9:5a:ff:3c:7d:f2:06:ad:8a:83:66:
                    ea:1d:6c:32:c3:75:34:e1:e6:c6:dd:ba:9e:57:87:
                    91:79:a0:8d:16:fe:ee:c3:c5:a3:1a:38:56:eb:fe:
                    64:c6:35:43:ac:01:2c:2b:87:2e:e9:c1:70:5d:7c:
                    5d:fc:a0:89:63:cf:89:69:98:b7:a1:72:f9:03:87:
                    ef:91:43:f3:4a:5c:06:00:06:e0:96:c0:c4:54:ce:
                    7f:52:85:52:66:9c:32:61:69:37:27:d1:5a:3a:c8:
                    f1:dc:3a:b6:fe:e3:62:b7:85:79:d3:8e:b4:57:6f:
                    60:c5:34:3f:0f:bf:3b:2a:e2:8f:2a:45:ca:8d:35:
                    7d:c0:c6:b6:c0:cd:2c:50:35:a2:30:e2:ff:20:4f:
                    60:f5:82:a7:c9:e2:d9:4e:8b:05:5c:74:77:49:9b:
                    aa:17:48:8e:87:27:52:5f:06:a5:20:41:d4:b9:49:
                    20:0f:3d:91:e8:2d:ec:be:c6:b9:73:59:af:42:d9:
                    d2:91:a2:0b:a1:ae:82:76:51:fe:c4:02:f2:12:01:
                    81:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:31:91:AE:8C:D5:F6:0F:5B:58:E9:AB:60:1F:CA:3C:C6:36:7B:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/5c9511ee-140a-3e15-aa57-d189e7ae07d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.crl

            X509v3 Authority Key Identifier:
                keyid:05:2D:96:20:77:4E:FD:BC:47:2C:1C:A1:09:8E:5B:31:5D:1C:FC:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.163.0.0-107.163.95.255
                  192.155.160.0/20
                  192.186.0.0/18
                  192.250.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:00:38:1e:ae:bb:b9:78:90:51:fe:68:37:c0:dd:f2:a5:38:
         bc:cd:55:07:50:45:ec:32:0c:29:3b:fb:96:a5:f7:07:9d:e9:
         35:4f:fd:e9:ad:10:57:c0:25:62:08:f4:cf:33:52:fb:18:9b:
         23:de:57:26:0e:5a:25:5c:00:83:26:54:ef:82:1a:8f:2d:cf:
         2f:6a:34:b0:9a:90:f8:17:04:32:e1:10:81:89:2d:c5:3f:30:
         4e:d1:95:18:d4:de:f8:fa:7e:5a:cb:1f:18:0d:ec:e4:23:3f:
         ce:b0:99:09:5f:b9:9b:33:34:f6:af:4a:ab:78:fb:f2:76:74:
         56:97:cf:04:ca:cb:4d:25:3e:01:b7:23:65:ec:1b:3f:84:d1:
         73:de:0c:c6:e1:8f:cd:96:88:6a:bc:15:6a:b4:10:40:e9:ad:
         a1:1b:3b:79:18:45:6f:01:d5:a6:04:a8:08:43:3a:3e:46:1a:
         2b:fe:bc:00:61:bd:29:03:57:02:ff:5f:bd:87:dc:af:2b:9e:
         c4:68:11:21:46:3f:b0:c4:6d:db:96:f1:f7:e1:dd:67:90:dc:
         33:37:e3:94:12:69:67:3d:c2:de:64:d8:45:2d:dd:0a:aa:43:
         5d:1a:f8:2a:23:4c:35:dd:99:bf:df:54:d4:0d:8d:42:d7:bf:
         ef:59:eb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:04:59 2025 by rpki-client