Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/242015a7-2fcc-35cd-81a1-69f68f54f6e4.roa
File:                     242015a7-2fcc-35cd-81a1-69f68f54f6e4.roa (raw, json)
Hash identifier:          YAMCKGNg9ugGzFIy+ChWxfpAWjKN79pq4WawlaX/ERk=
Subject key identifier:   32:00:C0:CA:9D:AD:B2:1C:7D:D6:F6:B3:6E:B8:F5:F9:F2:6F:F3:15
Certificate issuer:       /CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
Certificate serial:       010D0C9F4328584B80B7633D37E1FB5D057ED680
Authority key identifier: 4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/242015a7-2fcc-35cd-81a1-69f68f54f6e4.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     53334
IP address blocks:        162.252.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:63:3d:37:e1:fb:5d:05:7e:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aabacdc-6419-4970-8298-c7c44ff8c8d4
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=38cca988-3139-47b8-a5d1-2088b13dbb34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ca:7f:cf:11:a9:65:d7:e3:2a:df:59:20:a8:
                    c3:74:35:46:db:d5:82:8a:a3:7b:b0:4f:92:6c:96:
                    c3:a9:30:94:b6:9f:14:1f:99:ec:62:7b:73:af:f3:
                    1f:16:16:18:24:de:ba:35:bb:c2:09:bd:f2:c9:7e:
                    d0:a2:a2:ac:26:02:38:da:11:f8:3d:6f:6f:3f:35:
                    06:92:36:b8:ee:b7:23:c1:68:86:1a:6c:b5:62:f7:
                    53:53:4b:64:a2:50:cd:a8:34:98:06:4f:27:01:f7:
                    3a:ca:28:36:da:61:c3:a5:f5:9a:73:9c:f3:a3:5a:
                    85:09:5c:19:8c:64:c0:26:10:eb:b1:a6:ae:d9:53:
                    93:0b:ea:fa:97:db:69:06:d6:39:33:7f:09:cc:39:
                    74:e4:c6:b3:dc:77:35:71:4f:2e:9b:ee:f5:0a:77:
                    10:70:cd:b9:74:28:0c:d4:27:4b:09:e3:cd:d5:b3:
                    db:ca:f8:31:7a:95:1e:ff:26:9f:09:b9:93:c8:43:
                    41:06:f0:a9:08:93:7b:09:70:09:d3:ee:52:f3:7a:
                    1c:e6:7a:d2:bf:5e:13:3f:50:76:fb:25:52:c7:1a:
                    12:a4:72:cf:d1:da:84:c5:b7:b5:1e:b6:46:42:a1:
                    72:c7:47:58:ca:5d:cf:7e:29:6c:ef:e8:58:f4:c4:
                    98:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:00:C0:CA:9D:AD:B2:1C:7D:D6:F6:B3:6E:B8:F5:F9:F2:6F:F3:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/242015a7-2fcc-35cd-81a1-69f68f54f6e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4/7aabacdc-6419-4970-8298-c7c44ff8c8d4.crl

            X509v3 Authority Key Identifier:
                keyid:4A:2D:AA:1A:EB:E3:1E:42:E1:65:2A:5D:F2:0D:1B:91:03:3B:D9:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7aabacdc-6419-4970-8298-c7c44ff8c8d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:d2:0a:54:48:b6:77:88:24:09:6f:c0:ed:5b:38:3a:f5:76:
         8d:28:f0:1e:13:57:42:5a:3f:cb:1e:41:cd:b4:3e:7e:35:dd:
         62:90:98:3d:b0:29:ac:f9:8d:d2:87:2e:cb:d1:e3:74:e2:a3:
         c2:38:f3:86:40:e9:c1:d1:29:76:8e:7b:9e:c5:46:26:52:e3:
         20:9c:6b:73:dc:69:12:23:8e:39:e4:92:d3:44:30:fd:a5:fe:
         ac:ec:ac:f2:37:5c:3e:97:6d:a0:89:3a:24:24:2d:7a:4d:7e:
         e7:9e:0b:0f:8d:b8:63:e3:19:33:88:a5:ea:48:17:31:c9:41:
         57:84:fd:5c:73:dc:e6:bc:4a:d7:22:5b:39:1b:b0:03:15:a2:
         69:85:95:a1:cc:68:76:2d:65:f6:ca:cf:29:f3:e3:20:5f:c5:
         f2:3a:50:27:a0:cc:6b:62:eb:3f:e6:07:f7:31:6f:58:12:41:
         f5:6a:d6:45:5c:1d:82:24:f0:74:f8:7e:c2:06:f2:c1:8e:c0:
         75:7e:b9:1b:7f:db:0c:f9:56:c8:ca:ae:04:2e:c3:8d:bb:a2:
         59:44:0c:a7:01:0e:9a:03:38:ca:9e:2c:9b:a3:d9:78:fe:83:
         22:5a:f0:71:ab:42:19:8b:e2:d1:6f:ad:2d:9c:96:62:01:07:
         dd:17:3c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:21:17 2025 by rpki-client