Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/30b798ba-83f7-3eae-a101-05352b87e9a3.roa
File:                     30b798ba-83f7-3eae-a101-05352b87e9a3.roa (raw, json)
Hash identifier:          0gP5r27seiGaBOloNaQBgjaQ0XpUPDxzZf+ova+9sIs=
Subject key identifier:   0D:7B:1F:49:B5:7F:4F:8A:3A:C4:BB:AC:B4:69:46:D2:63:BE:B1:00
Certificate issuer:       /CN=11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf
Certificate serial:       010D0C9F4328584B7C8759246277D7D14979B980
Authority key identifier: 08:EC:40:00:FC:71:C9:4B:F2:7C:CB:EA:1A:E5:AE:C4:5A:4B:6D:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/30b798ba-83f7-3eae-a101-05352b87e9a3.roa
Signing time:             Sat 11 Oct 2025 13:00:38 +0000
ROA not before:           Sat 11 Oct 2025 13:00:38 +0000
ROA not after:            Fri 09 Jan 2026 14:00:38 +0000
asID:                     401170
IP address blocks:        162.211.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7c:87:59:24:62:77:d7:d1:49:79:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf
        Validity
            Not Before: Oct 11 13:00:38 2025 GMT
            Not After : Jan  9 14:00:38 2026 GMT
        Subject: CN=483112fe-76c1-48f9-8571-cbb53fa7a9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dc:04:fd:a0:6f:cc:fe:5e:36:19:60:27:0b:
                    85:0a:9d:41:1c:f3:26:39:3d:57:01:f8:6d:ba:72:
                    0b:3c:c1:8e:94:eb:64:bd:ae:48:09:fb:8f:83:06:
                    9c:85:62:6b:76:a6:0b:f9:b0:65:9d:c9:89:41:17:
                    0e:91:72:de:4c:fd:0b:61:fe:1a:f3:51:43:1c:2d:
                    65:02:f0:18:e6:6e:dc:b9:c0:f6:ce:a4:5c:cb:68:
                    09:d7:50:b2:5a:a3:b2:12:1f:46:26:ab:15:dc:0d:
                    b9:88:e3:1f:fa:60:62:16:b7:70:b5:d9:de:68:08:
                    b6:eb:8d:48:26:c4:3b:07:32:04:6f:d9:5c:33:4a:
                    8b:70:b4:18:3b:ab:10:9a:9d:26:c6:39:66:d5:5c:
                    e1:8c:28:2b:2f:11:06:55:44:36:d8:9a:aa:97:a4:
                    57:50:dc:82:d6:20:0b:e1:ef:59:f6:0e:11:c8:8f:
                    ba:03:5f:01:ff:64:eb:35:5b:28:e9:3a:d4:96:9d:
                    78:c2:05:87:0e:53:fb:3b:67:29:7b:aa:e5:8d:3f:
                    9d:7d:d8:e2:72:42:1b:71:b5:20:10:8f:4c:14:22:
                    19:fd:37:44:6a:13:04:2c:28:1e:32:8d:3f:71:82:
                    6b:bd:81:43:8f:58:fd:6e:72:ec:e1:8d:9c:65:ee:
                    0f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7B:1F:49:B5:7F:4F:8A:3A:C4:BB:AC:B4:69:46:D2:63:BE:B1:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/30b798ba-83f7-3eae-a101-05352b87e9a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.crl

            X509v3 Authority Key Identifier:
                keyid:08:EC:40:00:FC:71:C9:4B:F2:7C:CB:EA:1A:E5:AE:C4:5A:4B:6D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/11bd1aa0-2b4e-4348-8f58-8a94e4bf18bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:85:ea:fb:24:42:fc:ba:f6:f0:38:61:65:84:22:40:bc:5b:
         e5:2c:44:76:a6:fa:b4:b8:a4:fe:37:d8:1a:25:20:4e:79:e5:
         68:10:71:bf:98:dc:56:88:1c:e1:60:29:17:6c:b5:e1:f6:f8:
         bc:fc:0a:69:1e:78:80:a5:17:ba:43:4d:d0:0d:01:40:25:75:
         48:02:52:c6:d4:2d:43:4a:7f:b7:98:5c:1d:48:77:32:ac:3f:
         91:26:2f:72:fa:3d:44:c2:e5:9b:f9:ba:1c:ee:22:2c:48:6b:
         99:27:95:a2:11:ac:4e:72:1c:bd:27:c8:05:fa:f7:c8:f8:39:
         c8:0c:23:c7:5f:80:83:08:d1:59:86:9b:2e:74:be:0a:c6:71:
         d9:97:fd:b5:94:39:b1:8e:03:b4:13:e9:f6:ed:4f:92:b1:03:
         dd:b2:30:c5:3b:05:89:85:a2:82:33:8c:6f:81:5f:0b:95:6e:
         dd:17:6d:a8:e2:3e:9c:53:bf:73:63:8b:71:28:90:4b:6d:0e:
         4c:5f:27:cd:d5:48:89:da:92:b3:86:8d:15:a9:10:57:93:5d:
         b2:2a:89:5d:c7:ed:20:a3:40:fe:fb:07:db:96:16:e4:be:84:
         47:7b:72:42:86:1c:90:d1:79:56:df:f7:ff:16:cf:40:a7:3f:
         21:bf:24:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:55:17 2025 by rpki-client