Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf/9611d087-962b-31a2-9513-bcb228516dce.roa
File:                     9611d087-962b-31a2-9513-bcb228516dce.roa (raw, json)
Hash identifier:          Pj7AggfelwAnaKV0KBnMcSks9S7I+bzPwM6eKPLhsoI=
Subject key identifier:   40:D1:D6:4B:16:D8:A5:24:B2:4C:5F:DF:78:D7:87:19:66:08:B0:A1
Certificate issuer:       /CN=50deb463-b2f6-472b-b250-97bddd7db9cf
Certificate serial:       010D0C9F4328584B7DECA46D4B08AEB9AC801C40
Authority key identifier: BA:0E:F3:4B:A8:FD:46:6C:16:B0:10:26:7F:09:9D:56:23:5F:81:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf/9611d087-962b-31a2-9513-bcb228516dce.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     397423
IP address blocks:        173.0.8.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf/50deb463-b2f6-472b-b250-97bddd7db9cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf/50deb463-b2f6-472b-b250-97bddd7db9cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:a4:6d:4b:08:ae:b9:ac:80:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50deb463-b2f6-472b-b250-97bddd7db9cf
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=a78a2e15-ee09-449b-a4ce-00fb75743b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6f:03:03:9a:0f:1d:a3:9e:77:44:31:53:f8:
                    da:0a:b5:b6:db:d2:bc:18:ae:6d:9d:04:d3:a2:3a:
                    00:8b:13:78:de:11:16:b8:a2:ca:61:1a:a3:aa:93:
                    14:3e:3a:d9:2b:d1:34:9f:78:d9:bc:57:46:6a:33:
                    7e:c5:79:94:ee:02:81:ff:50:4d:bc:49:16:26:8e:
                    bf:44:78:a1:23:36:7c:3d:c1:7b:2a:d6:28:e0:12:
                    c9:1d:3e:40:fc:91:de:40:42:8b:23:ad:aa:1c:11:
                    20:5c:1e:55:44:2f:91:e6:df:1e:8b:4a:2f:55:a6:
                    8a:e0:d2:77:06:df:26:5d:48:07:e2:a0:bc:6e:ea:
                    63:9f:1d:16:7f:b3:42:3e:fa:a5:13:f8:31:be:14:
                    52:f6:3c:57:fd:37:00:a0:5f:34:a5:ab:f1:c8:28:
                    6a:be:8c:08:46:28:ac:ed:cc:2e:55:0e:38:9f:34:
                    94:ab:07:cb:a7:3c:e9:e5:dd:82:1d:31:d3:29:99:
                    dd:f5:d5:74:86:73:13:18:8a:74:84:71:05:03:69:
                    c1:99:07:b3:d8:78:79:6c:cd:73:a2:61:a4:b9:55:
                    91:92:ab:a9:8a:e6:64:64:d5:2e:24:5f:52:2a:19:
                    12:59:ff:79:6c:7a:d5:2a:9c:f9:7c:3e:e9:7d:71:
                    cf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D1:D6:4B:16:D8:A5:24:B2:4C:5F:DF:78:D7:87:19:66:08:B0:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf/9611d087-962b-31a2-9513-bcb228516dce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf/50deb463-b2f6-472b-b250-97bddd7db9cf.crl

            X509v3 Authority Key Identifier:
                keyid:BA:0E:F3:4B:A8:FD:46:6C:16:B0:10:26:7F:09:9D:56:23:5F:81:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50deb463-b2f6-472b-b250-97bddd7db9cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:bc:06:01:3e:19:d7:c0:9c:7c:95:56:54:9f:23:a7:e5:e5:
         b9:73:f2:93:cb:6e:05:f4:95:c4:11:05:cc:62:f5:29:e9:34:
         c2:23:f3:90:6f:57:eb:b1:46:26:ca:fa:46:67:0f:c9:94:cd:
         cd:17:34:d3:f5:99:78:2b:a7:e7:67:41:d5:91:ee:7f:14:bd:
         ad:ed:9a:53:e8:45:c0:f4:a6:c6:59:47:e2:12:eb:46:42:10:
         6c:4d:f1:0e:39:bc:4c:22:e9:e9:fb:23:f2:a8:db:41:ec:85:
         80:c0:02:fc:7d:35:37:7e:a8:9a:2d:19:35:66:40:b8:03:4c:
         f5:8a:3c:77:93:1f:3e:6c:8d:06:92:a0:39:41:42:e8:11:15:
         0f:72:f9:e8:d2:77:23:ba:3a:7b:23:23:56:92:8b:18:ea:0a:
         2b:dd:93:1d:52:e3:ed:d6:04:ea:bd:0d:e2:fc:ba:7b:e6:55:
         c6:57:84:6f:c9:d8:3f:80:0b:cf:23:2a:4d:39:26:a2:c3:36:
         c5:90:b2:4d:64:f1:2f:68:0d:ca:f4:97:b8:37:b6:b5:f9:91:
         45:46:e1:c3:c2:82:1c:16:1a:2a:17:19:97:cf:a9:bd:92:0a:
         75:ef:96:26:fb:c2:22:15:e4:ba:3f:92:bf:f9:66:3c:4d:a0:
         15:66:a9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:46:28 2025 by rpki-client