Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4662eab7-7242-38f8-b0cb-c724ec5f03a1.roa
File:                     4662eab7-7242-38f8-b0cb-c724ec5f03a1.roa (raw, json)
Hash identifier:          6kyi6WclKK5hDS8k7wgJgnnF/Kjl9JwhZ3e7UURemLI=
Subject key identifier:   B5:16:2C:1F:20:4F:2A:08:E1:7A:0D:19:3B:CB:48:F2:05:2F:AA:9D
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB77F51E59BFEA64DA0C880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4662eab7-7242-38f8-b0cb-c724ec5f03a1.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     21508
IP address blocks:        162.148.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:7f:51:e5:9b:fe:a6:4d:a0:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=e0725840-bad9-492b-bdc4-79a29e687a8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:91:fa:82:4c:ad:c3:c2:2c:b8:00:2a:96:53:
                    64:35:4b:e3:62:7e:64:5a:e6:14:41:f1:13:10:8b:
                    8f:38:8d:ed:34:57:5a:2a:05:a8:98:03:07:2e:1f:
                    23:b0:af:48:c9:05:a0:c6:9e:7b:fb:60:ce:ce:62:
                    e1:14:7b:fe:1a:e5:6f:28:b1:0b:bc:e3:c5:dd:99:
                    fb:b4:82:e0:34:9e:d9:90:0c:15:8c:96:ba:15:9d:
                    24:67:af:c5:86:60:ce:c8:fe:5b:df:ea:a1:3a:7c:
                    8b:8b:5a:df:a6:87:9e:e7:1d:f9:bb:38:68:33:0d:
                    40:f7:e4:d8:7b:b6:92:6b:71:39:da:86:c9:b6:d2:
                    c7:cf:66:d8:70:4e:75:b4:2d:31:22:73:b3:cc:1d:
                    ca:8c:cd:2c:86:6a:06:4d:5d:b1:f6:16:87:d3:1d:
                    65:25:59:97:bb:47:9c:5c:95:83:56:de:1a:f8:93:
                    f6:36:6e:af:50:c4:4e:4d:e3:57:c2:ed:cc:6f:29:
                    1b:c6:35:9c:26:99:4f:2c:83:58:0a:c7:b8:dc:aa:
                    27:33:af:a7:61:9e:f2:cd:66:08:ac:80:39:bf:6a:
                    b6:21:e3:5f:d4:ce:51:cb:1e:b3:18:0e:f9:82:62:
                    fe:bb:58:00:2e:14:19:64:0e:48:10:59:0f:60:a4:
                    bc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:16:2C:1F:20:4F:2A:08:E1:7A:0D:19:3B:CB:48:F2:05:2F:AA:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4662eab7-7242-38f8-b0cb-c724ec5f03a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.148.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:b9:0b:e0:46:7c:c2:21:17:48:83:95:bb:83:ac:e8:7e:1f:
         f5:d2:c0:8c:5b:8c:cf:66:e1:62:75:d6:60:4c:90:89:9b:c8:
         f3:cb:e9:de:d1:ae:b7:fc:45:d9:ba:6c:70:5b:55:b5:49:e5:
         cb:5b:4d:8d:21:4c:59:ef:60:e0:b7:56:6e:cd:ec:06:4c:d9:
         c8:40:d8:69:a2:0d:6c:75:85:95:a1:ab:bf:54:6e:97:e2:cb:
         77:63:fe:d4:8f:2e:24:d3:0a:67:8e:02:ed:19:94:b7:d2:3c:
         31:4d:f8:fd:45:8c:4f:c0:3a:03:11:16:59:ed:1d:0c:f2:26:
         99:75:5f:d7:ca:f2:28:ac:6e:c2:d7:a8:2c:5e:9b:b2:d2:5b:
         34:aa:19:45:8e:8b:60:44:31:c4:fc:b7:1a:94:b1:dc:3d:81:
         e1:78:8f:43:72:7f:f6:eb:a0:cb:c2:35:6e:9b:e5:75:52:df:
         00:9d:3a:2c:3d:91:08:96:49:35:0c:91:49:20:ed:18:2e:7f:
         ae:d3:54:b5:59:1e:77:68:77:19:18:81:8a:eb:71:33:ac:a1:
         75:9f:8f:5d:87:c4:06:ae:3f:ff:d3:68:6b:27:38:5a:aa:97:
         c1:09:fe:b1:bd:cb:15:69:2e:6d:fc:cb:f5:49:1e:aa:01:d3:
         54:7d:da:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:03:22 2025 by rpki-client