Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/27dfa34e-e99b-3a95-afac-f983350fa289.roa
File:                     27dfa34e-e99b-3a95-afac-f983350fa289.roa (raw, json)
Hash identifier:          SX4I7TVjUyMtqYn/ac85XlUA/ajiO9+1ifJI4TBDEQU=
Subject key identifier:   1C:0A:20:D3:25:D1:B6:08:7A:75:5C:DE:82:CD:78:77:D2:AF:C4:F5
Certificate issuer:       /CN=961facb0-d9c9-4d9b-8bfa-17d54168d407
Certificate serial:       010D0C9F4328584AF5214C201424DA1246ED5D00
Authority key identifier: 01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/27dfa34e-e99b-3a95-afac-f983350fa289.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     393433
IP address blocks:        162.254.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:4c:20:14:24:da:12:46:ed:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961facb0-d9c9-4d9b-8bfa-17d54168d407
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=df62340b-df14-4050-ba44-5f45db5239a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:df:1b:00:eb:9d:1a:8c:e2:3a:0f:13:62:
                    bb:7b:5b:a0:e0:be:ae:e7:87:2f:aa:e1:e0:d5:5b:
                    56:69:77:f4:a7:04:e2:a7:29:c0:5a:a6:fc:1d:2e:
                    f4:58:22:23:71:61:5e:8c:9b:5b:83:34:f3:9c:f8:
                    22:e0:1a:05:1d:7d:be:d4:4f:af:54:fa:3d:a2:69:
                    45:70:04:e4:86:f4:43:9d:28:97:1f:a9:cb:79:79:
                    e1:50:9d:a7:e7:c5:96:8c:ec:6b:51:5d:c9:fd:b6:
                    5f:23:ef:ec:0b:f0:3d:83:fd:bb:a9:2b:ad:c1:df:
                    12:b1:3b:2e:19:31:eb:10:e3:75:60:06:9d:d3:6d:
                    7f:20:d9:69:d7:66:70:e6:dd:16:92:cd:39:11:a2:
                    86:9c:d5:82:bb:d2:b3:c9:01:b3:51:34:53:62:1a:
                    9c:75:68:44:d7:72:20:c3:30:92:eb:79:fc:96:12:
                    2e:53:89:ca:e8:b7:22:77:1d:ec:5d:bc:de:1d:1a:
                    7b:d4:cf:80:a4:da:9c:a7:20:e5:c3:ae:3b:a1:84:
                    a0:5d:20:e0:9a:f3:28:b8:9a:7b:de:20:0a:e9:d9:
                    a3:ba:e8:48:ab:a2:ab:3d:49:56:7f:95:64:78:b3:
                    eb:cb:68:fc:28:47:8c:4a:c4:33:95:60:88:20:3c:
                    0f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0A:20:D3:25:D1:B6:08:7A:75:5C:DE:82:CD:78:77:D2:AF:C4:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/27dfa34e-e99b-3a95-afac-f983350fa289.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407/961facb0-d9c9-4d9b-8bfa-17d54168d407.crl

            X509v3 Authority Key Identifier:
                keyid:01:B0:05:9D:78:D4:42:79:95:AB:1F:7A:A9:BA:83:A6:7A:A6:C2:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/961facb0-d9c9-4d9b-8bfa-17d54168d407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:df:9d:c4:15:e7:bb:6f:1d:95:e4:c5:80:80:ad:25:cd:37:
         0f:00:4c:8d:c7:da:be:33:c4:1e:3b:91:6b:20:82:3c:79:5e:
         f6:91:42:a8:7f:00:0a:d7:e0:ae:14:dd:9a:f5:eb:09:a9:3e:
         53:66:79:a2:65:33:39:48:15:26:0e:e8:78:ef:65:87:76:f1:
         01:6c:0c:00:b4:c5:bf:dc:6d:10:cb:c1:3f:8a:7d:4b:41:e3:
         c0:51:1c:6a:6b:1d:6e:75:37:71:3f:cc:d9:08:43:13:78:8d:
         91:03:5d:71:47:f1:7d:d1:13:db:ec:a0:c6:10:ec:05:1c:3f:
         1c:aa:68:8a:7c:4d:c4:c6:f8:fb:fe:94:e3:37:11:73:c6:f6:
         81:f2:5c:cf:6b:bd:ed:07:52:b8:4c:f0:66:52:ee:38:e9:98:
         ca:2c:fe:5b:9e:dd:45:37:7e:02:61:c2:29:82:e1:bd:b2:59:
         01:67:7f:11:42:a3:a8:50:fa:75:70:4c:5f:ba:96:25:7b:c4:
         c2:ad:8c:e7:65:69:f2:8b:df:c6:1f:7f:6f:1b:0d:9f:56:eb:
         10:6e:f1:1f:48:cb:f0:a1:81:a7:95:2c:bb:52:50:7a:c0:34:
         a5:91:d6:b3:79:ad:27:ef:e5:d7:d1:c1:54:1a:c3:71:b0:24:
         34:42:8b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:17:12 2025 by rpki-client