Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/be070d10-f5a4-3468-b574-f6ee7a234742.roa
File:                     be070d10-f5a4-3468-b574-f6ee7a234742.roa (raw, json)
Hash identifier:          0W6KSM87UIsQVmPfj9RRZPza7Mu1ATSRi7cy7Hx+fb4=
Subject key identifier:   AA:61:8D:75:30:0C:9E:C6:30:B3:2D:64:16:AF:01:41:0D:20:4C:84
Certificate issuer:       /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial:       010D0C9F4328584B4081AE19AEFD6A3A6BBA91C8
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/be070d10-f5a4-3468-b574-f6ee7a234742.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     20253
IP address blocks:        162.222.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:ae:19:ae:fd:6a:3a:6b:ba:91:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=1077c952-2459-492a-b2a3-a0951ed64f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:32:bc:70:23:60:59:6a:0a:ab:87:3c:71:c4:
                    f4:b5:45:3c:14:51:84:97:37:a4:eb:f4:ad:70:b7:
                    99:15:83:d0:3d:a7:0e:98:a0:b8:39:ca:bc:8e:7a:
                    02:0a:45:24:78:88:72:3b:59:00:95:56:87:a0:bd:
                    3e:41:c5:3c:d7:9d:d0:39:06:b0:a0:c0:a4:c1:20:
                    72:a4:8e:66:fb:1e:c5:d2:08:e5:d4:97:46:07:e9:
                    c2:b0:e4:7f:f6:5f:d5:47:d8:31:17:cb:cb:50:3f:
                    a7:11:b3:2a:22:c0:b1:2a:5a:b0:8c:1c:a9:6b:02:
                    e2:a5:db:37:61:55:a3:c3:ba:5d:a7:2c:de:1a:68:
                    86:e6:85:48:a5:df:80:3d:5d:b7:97:f1:13:48:57:
                    f6:46:1d:2e:a6:65:e2:6a:b4:6d:cd:07:1c:b9:91:
                    53:b5:3b:29:21:45:6c:0a:9f:43:f5:72:f7:6f:b5:
                    9c:48:45:67:7f:d8:b8:76:6e:c8:6c:a6:41:73:76:
                    63:37:d5:3f:d6:ff:09:6a:14:c9:04:52:86:4d:3a:
                    57:ca:c1:34:8b:da:24:ac:ef:ca:3c:9f:65:d1:c5:
                    f4:c5:02:c5:ee:4d:92:a6:21:4b:77:d5:e9:fe:a4:
                    18:0e:20:7b:26:0a:28:8e:54:12:37:39:c6:f9:7d:
                    34:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:61:8D:75:30:0C:9E:C6:30:B3:2D:64:16:AF:01:41:0D:20:4C:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/be070d10-f5a4-3468-b574-f6ee7a234742.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl

            X509v3 Authority Key Identifier:
                keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:1d:f9:b9:cb:89:9e:13:46:16:a9:19:f9:0e:d7:30:c2:89:
         97:6a:90:de:48:0a:f3:13:6f:d5:55:a5:0d:40:4b:62:19:80:
         39:95:79:70:2d:33:9e:54:0f:62:9c:cc:e9:9b:7f:f5:47:8b:
         23:e5:30:e5:fc:84:00:f3:4b:ef:a9:be:29:f1:c7:b4:47:da:
         4b:4b:41:19:5b:81:59:26:ff:97:03:09:46:b8:33:1d:aa:33:
         ab:69:88:e8:f5:6e:9a:d8:f6:ce:5c:21:29:62:70:e1:20:46:
         e0:25:0b:7d:3f:24:fe:88:3e:46:ea:88:96:6b:44:ab:0b:8e:
         c3:a9:92:d2:7e:a1:23:b0:23:12:6f:0d:d6:8d:63:c7:ad:c7:
         68:a5:a8:e7:3c:1d:a0:e1:bf:00:23:86:48:8d:bd:97:2c:d8:
         bb:7b:a2:c2:cb:9b:8b:d4:2a:31:2c:5e:70:10:b4:3f:8e:43:
         b0:e7:a7:61:cd:cd:57:f2:54:a9:52:d6:f2:81:df:0b:7b:33:
         3e:4f:e1:ca:f0:32:2f:44:ac:1d:bf:40:7a:8f:a1:79:7a:af:
         31:c6:ed:aa:3b:f6:da:a2:49:6c:73:9a:fd:1b:66:47:17:c1:
         ae:b8:24:2e:b9:d3:80:04:4d:49:50:73:18:49:f7:1f:84:f1:
         ff:de:a5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:19:43 2025 by rpki-client