Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/09ca4d21-e90d-39be-924e-66f0e9c839b3.roa
File:                     09ca4d21-e90d-39be-924e-66f0e9c839b3.roa (raw, json)
Hash identifier:          t4Eia4BwAMMd0B1TrTz4022M8SbKkonOAIAtk0gtujI=
Subject key identifier:   DD:BB:2F:73:96:29:3A:49:0A:04:7B:09:BD:C6:5B:3F:55:94:56:CC
Certificate issuer:       /CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4
Certificate serial:       010D0C9F4328584B4BAC5F2AF82A65E893B0F480
Authority key identifier: D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/09ca4d21-e90d-39be-924e-66f0e9c839b3.roa
Signing time:             Wed 24 Sep 2025 01:00:31 +0000
ROA not before:           Wed 24 Sep 2025 01:00:31 +0000
ROA not after:            Tue 23 Dec 2025 02:00:31 +0000
asID:                     6453
IP address blocks:        167.253.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4b:ac:5f:2a:f8:2a:65:e8:93:b0:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4
        Validity
            Not Before: Sep 24 01:00:31 2025 GMT
            Not After : Dec 23 02:00:31 2025 GMT
        Subject: CN=56fcd0ee-4453-4bc0-93cb-1485f37388de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:62:fd:05:34:8b:06:94:86:be:de:78:bf:f0:
                    07:0a:e4:05:d7:45:92:a8:db:ad:9b:53:51:9c:b4:
                    a1:01:ad:8f:73:df:95:a5:1d:94:d4:ee:fe:75:2f:
                    a8:91:aa:8f:29:58:27:e3:0f:a5:65:b0:e0:41:74:
                    62:e3:11:ae:be:f6:6d:d2:29:78:8e:ff:8c:ae:d8:
                    51:50:6a:4c:bc:db:87:1d:b2:7d:c4:0f:bc:d9:40:
                    74:9e:6f:30:03:8e:2c:52:00:b8:08:cc:af:3f:f3:
                    ee:5b:0e:da:4f:b3:d2:df:e9:34:25:77:58:08:36:
                    69:be:c1:e0:86:67:1f:5d:81:d5:a4:17:5b:a5:1b:
                    e2:f8:cb:82:43:ed:00:ee:c1:aa:40:cd:ce:13:04:
                    8b:a3:d4:4e:00:56:ca:68:ed:c9:93:76:d1:d8:2e:
                    82:a7:18:2d:3c:b2:cc:85:40:83:9a:c1:69:03:12:
                    2c:c6:3a:16:80:46:d7:6a:f4:75:c0:3f:70:84:91:
                    2b:e6:58:eb:30:f9:ec:1a:5b:73:1f:f8:63:1d:74:
                    e1:32:9c:b1:67:c0:5e:bf:32:68:c6:93:8f:a2:6b:
                    85:95:25:07:46:f1:e7:5c:91:ef:0d:32:4c:b6:1b:
                    da:0b:f1:4c:ec:96:67:fb:a1:82:47:5d:b8:93:08:
                    b0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:BB:2F:73:96:29:3A:49:0A:04:7B:09:BD:C6:5B:3F:55:94:56:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/09ca4d21-e90d-39be-924e-66f0e9c839b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl

            X509v3 Authority Key Identifier:
                keyid:D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:69:c1:33:b8:08:61:1c:98:de:c4:18:30:0f:08:9b:80:bb:
         64:f9:70:51:68:e9:d5:73:bd:a6:7b:fc:db:89:39:da:ff:ce:
         58:82:ca:32:a4:aa:17:49:68:26:ca:02:17:da:da:57:e0:a2:
         0f:84:65:78:b1:0b:9b:19:49:69:02:05:59:29:2e:7d:4d:cd:
         d7:55:3f:df:bc:b3:59:c4:c6:1a:48:78:6c:bd:d3:7b:46:42:
         44:63:7b:06:00:46:05:f6:79:72:c3:2d:17:56:79:d1:99:e7:
         79:3d:0e:71:2b:96:c5:fb:3f:ac:50:29:13:c2:4b:3f:2a:4e:
         33:73:a5:a0:87:d8:da:bd:ae:3b:2c:5d:f6:d4:30:5e:46:22:
         40:1a:eb:5c:22:cc:a1:27:1a:3e:d0:5a:8a:f0:a8:3e:b8:7b:
         36:3d:13:8c:cc:cf:c3:37:15:f5:5c:2a:83:63:a5:6e:70:22:
         1f:49:28:51:be:ff:14:1d:d1:96:2b:f1:c0:0b:d0:73:e6:6a:
         98:2e:ab:01:3d:01:83:fd:0f:bc:91:10:75:91:80:ac:c6:f1:
         49:ec:8c:78:7e:db:e3:9a:e3:ac:32:0d:27:a7:d4:6c:be:aa:
         17:a3:ad:8c:8c:2a:19:5d:3c:a4:7a:66:e2:5e:a4:2f:d0:9e:
         64:aa:98:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:51:42 2025 by rpki-client