Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/4dbf4ed3-09f7-367a-85ac-20b85fb7e6be.roa
File:                     4dbf4ed3-09f7-367a-85ac-20b85fb7e6be.roa (raw, json)
Hash identifier:          mVZF5Ufz2Xu/NT1IGh7tHjJDjUcjDJAKOcSS19GqCF8=
Subject key identifier:   4F:C3:19:D2:A6:DD:B5:8A:AC:18:72:71:76:C9:79:D0:87:8C:C1:78
Certificate issuer:       /CN=10b5a04a-f4e1-44ae-be5f-312a5d1a57c8
Certificate serial:       010D0C9F4328584B84E77E475C8B88E535707080
Authority key identifier: ED:4C:8D:F8:79:6F:9B:C9:5E:AC:3B:10:BA:33:AA:5A:AE:B3:C1:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/4dbf4ed3-09f7-367a-85ac-20b85fb7e6be.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     13781
IP address blocks:        163.123.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:7e:47:5c:8b:88:e5:35:70:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10b5a04a-f4e1-44ae-be5f-312a5d1a57c8
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=f53fb8ec-35a6-4304-bcc7-7564c5bc3a98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:59:c2:b0:e7:52:0b:65:9f:31:3c:db:ac:72:
                    6a:0d:6b:5b:fa:dc:d9:9c:90:8c:3a:1b:8b:ba:7b:
                    53:3b:d2:83:36:6b:98:0f:4f:26:33:d6:64:90:4f:
                    59:eb:5d:cf:f2:d5:59:77:d3:3a:28:1b:7c:fe:1c:
                    9a:8f:0c:0c:84:b2:c5:dd:dc:1f:4c:43:59:e5:34:
                    b9:60:0d:88:da:a6:26:22:95:f2:4b:4f:cb:41:bc:
                    9c:ae:a5:d1:19:ef:9c:0f:4f:75:9d:75:a0:6d:a6:
                    66:16:09:7c:ea:25:4d:29:b9:66:f2:91:a2:70:5d:
                    b8:7e:e8:ca:51:93:ad:00:0f:ee:03:5a:62:2a:bd:
                    5f:3d:72:ca:b7:49:30:e9:5d:33:7a:05:e5:fa:26:
                    dc:70:f9:39:01:84:d4:2b:7d:d5:19:6d:d4:8b:dc:
                    3f:9c:ea:34:72:29:46:ba:59:b5:92:d7:cd:69:7b:
                    04:3c:d7:27:ec:dc:b8:bf:27:e9:f4:3e:af:05:19:
                    b9:24:da:e1:e8:d3:c4:07:77:1e:e4:49:df:fd:14:
                    ae:77:02:e8:f0:2d:4c:3c:64:e5:58:cf:9e:6f:25:
                    bc:89:72:21:75:86:46:a3:c2:de:35:b9:aa:24:11:
                    18:85:fa:35:b7:46:73:6e:53:f4:7e:06:4c:ca:aa:
                    33:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C3:19:D2:A6:DD:B5:8A:AC:18:72:71:76:C9:79:D0:87:8C:C1:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/4dbf4ed3-09f7-367a-85ac-20b85fb7e6be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.crl

            X509v3 Authority Key Identifier:
                keyid:ED:4C:8D:F8:79:6F:9B:C9:5E:AC:3B:10:BA:33:AA:5A:AE:B3:C1:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10b5a04a-f4e1-44ae-be5f-312a5d1a57c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:dd:8d:a0:95:12:c5:04:dd:ad:13:f2:5e:8a:e6:db:ba:b3:
         f0:c6:10:a8:70:cd:bb:54:92:6f:de:38:07:23:97:f4:35:ed:
         1b:13:b2:d5:e9:78:ab:77:01:44:b7:f1:36:aa:27:9c:41:6a:
         61:cf:d5:6b:72:40:9a:92:2d:b6:23:f0:d9:c6:c6:e3:0b:ff:
         8b:eb:8c:89:61:37:c3:90:95:31:b7:32:59:31:7d:d0:d1:e6:
         21:18:c0:e0:6c:c3:a7:8e:8c:c0:e5:06:34:b3:66:00:62:04:
         a9:bb:83:dd:55:7c:20:6d:74:10:0d:ed:86:7b:09:52:c2:58:
         ca:08:10:d3:c4:9a:af:40:bc:1b:14:07:e1:f6:e0:0f:04:f7:
         a6:eb:8d:6b:61:38:5b:6b:d8:d3:98:61:fa:1d:de:f9:2d:9f:
         1c:e2:93:33:6e:8b:4c:97:d0:ae:b0:64:2f:c5:9e:9f:e7:56:
         62:ce:89:f0:6f:0d:da:14:96:89:27:dd:cd:eb:bf:39:c3:2f:
         0e:18:b3:06:4c:b9:57:8c:b0:81:c9:b3:1f:a4:c6:23:5c:26:
         02:3c:5a:3f:ef:b4:b0:84:ef:b0:cd:7a:d9:6f:aa:e0:4c:fc:
         3c:e6:50:32:8e:e3:b2:2f:e7:cc:a4:5b:4c:a8:8f:0e:e3:af:
         1b:22:0d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:10:12 2025 by rpki-client