Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/b48387b1-7a7b-32d4-ae68-7247e5168ca6.roa
File:                     b48387b1-7a7b-32d4-ae68-7247e5168ca6.roa (raw, json)
Hash identifier:          QPmwa2zgeCZmm4faPscOCibHnfiRQMfKdvipb48PfCc=
Subject key identifier:   0C:54:49:1C:3C:8C:CA:AB:B6:93:7E:47:FA:60:F4:48:1C:3C:04:88
Certificate issuer:       /CN=9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50
Certificate serial:       010D0C9F4328584B5F372D06CE10A0EBD1FB9540
Authority key identifier: 29:D8:39:BC:8F:B6:00:7C:FB:EB:42:7D:25:FD:CB:C4:A5:92:1C:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/b48387b1-7a7b-32d4-ae68-7247e5168ca6.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     396982
IP address blocks:        162.246.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:2d:06:ce:10:a0:eb:d1:fb:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=016e55e6-ef90-49f4-894c-c22159cd3d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4a:01:6e:a2:25:70:b9:82:16:f5:ba:e0:e6:
                    d7:2b:48:f1:81:7a:cc:9b:41:9f:45:32:91:0f:60:
                    7c:61:59:01:21:83:8f:fc:1e:19:0c:89:dd:cf:a5:
                    f0:f2:af:e0:80:53:2f:ef:53:ac:b9:62:e9:92:f8:
                    f5:bd:48:24:d6:0f:5d:09:54:44:d5:b7:5b:52:36:
                    10:e6:8c:be:ab:b2:47:dd:62:d7:58:d1:96:52:76:
                    97:83:2a:a7:6b:2d:6a:c7:27:3d:ce:87:79:35:12:
                    c5:96:49:6f:58:0a:aa:2c:63:c6:04:0f:a2:02:19:
                    ff:5b:45:fb:ff:ba:f4:0d:d8:5c:3c:cf:35:2d:d8:
                    0a:da:77:8b:60:13:e3:2f:01:ee:df:c8:72:21:fb:
                    f4:d7:0f:82:a8:a0:b0:4c:6d:30:00:e9:72:4e:9a:
                    73:b9:2a:82:db:56:a3:02:d2:c3:e7:55:60:89:bf:
                    72:04:0f:d7:09:2c:6e:09:c9:cb:59:02:2e:f9:c6:
                    d7:89:83:2a:11:b3:a9:1c:52:4c:12:66:79:90:b3:
                    d5:32:9b:8c:53:2c:ed:44:af:9e:08:0e:96:a7:bb:
                    b4:27:f8:c9:a8:cb:91:91:de:56:af:8d:94:7c:e5:
                    9c:1c:3f:7f:08:ab:b6:92:8f:62:78:8a:82:2f:ea:
                    d5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:54:49:1C:3C:8C:CA:AB:B6:93:7E:47:FA:60:F4:48:1C:3C:04:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/b48387b1-7a7b-32d4-ae68-7247e5168ca6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.crl

            X509v3 Authority Key Identifier:
                keyid:29:D8:39:BC:8F:B6:00:7C:FB:EB:42:7D:25:FD:CB:C4:A5:92:1C:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9983e3fc-6b48-4b4f-b9ed-c9b323c1cc50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.246.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a3:c5:78:07:fc:b8:10:8a:cf:63:3a:15:69:c8:9d:20:64:
         84:a6:71:05:a4:c4:d4:04:c7:0b:46:71:11:e9:10:b9:ce:10:
         0a:80:54:0c:1c:c5:4b:19:f5:e3:34:f9:06:2e:a0:9d:34:5b:
         b7:bc:57:55:7a:47:4c:bb:b2:57:c6:db:a4:1f:3d:43:03:1f:
         ce:ac:50:c0:69:9e:f6:06:41:37:b4:b6:90:ba:4c:ed:4c:13:
         e2:40:20:fa:42:7f:3b:31:6f:17:30:21:08:32:16:14:c5:85:
         4a:7a:40:58:53:bc:7d:99:0b:ed:84:74:cd:e1:27:77:ff:f1:
         74:43:cc:2e:92:11:94:d9:2e:ae:26:13:56:63:48:1e:c2:12:
         fc:48:d6:fb:69:64:dd:18:0b:6b:cf:1e:05:d8:60:62:db:e8:
         12:de:e9:3e:b2:db:56:fc:77:78:e0:95:5c:ff:e2:94:0f:9c:
         37:6c:32:af:38:0f:b1:42:94:3b:0f:0c:66:d3:16:e2:a4:1d:
         e9:0e:52:2a:aa:b4:b6:65:3d:fa:f7:2e:30:18:ea:33:38:99:
         cc:5b:a1:3b:73:ec:03:a0:e6:00:07:3c:22:25:7e:b6:7c:c9:
         cb:04:ac:0b:7c:dc:7a:6f:02:01:da:27:21:b8:81:1e:72:03:
         53:c3:95:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:35:21 2025 by rpki-client