Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/546c97aa-97bc-33f3-9a9e-1a52f83a981f.roa
File:                     546c97aa-97bc-33f3-9a9e-1a52f83a981f.roa (raw, json)
Hash identifier:          4aSdO71SACr5w4FlnzQqiKk4/f34vAt9kkJDmfhoElY=
Subject key identifier:   D1:8C:20:39:13:11:36:F4:BE:65:2F:F8:B4:6F:26:9E:C4:2C:BE:26
Certificate issuer:       /CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Certificate serial:       010D0C9F4328584B3F1C6186A8395B81FE1EFBC0
Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/546c97aa-97bc-33f3-9a9e-1a52f83a981f.roa
Signing time:             Fri 19 Sep 2025 13:00:41 +0000
ROA not before:           Fri 19 Sep 2025 13:00:41 +0000
ROA not after:            Thu 18 Dec 2025 14:00:41 +0000
asID:                     394453
IP address blocks:        198.212.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:1c:61:86:a8:39:5b:81:fe:1e:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551
        Validity
            Not Before: Sep 19 13:00:41 2025 GMT
            Not After : Dec 18 14:00:41 2025 GMT
        Subject: CN=16bdd189-dcb1-4b85-89a8-3430724f5fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:47:d7:07:0b:b3:5d:d2:46:8f:64:29:ff:87:
                    39:b5:96:a0:b5:f0:e0:f3:3d:c3:9b:dc:b3:05:9c:
                    82:13:51:6b:87:06:b8:cc:41:3b:01:d5:a9:b7:24:
                    ce:a6:1b:1b:5a:ef:78:a7:50:63:e4:24:43:21:f0:
                    31:c2:7d:d0:64:92:30:ed:b9:14:89:ac:9a:79:8c:
                    9a:24:5b:55:79:ff:d2:ee:90:99:ee:c9:99:8c:6f:
                    54:65:89:a7:72:08:c5:d6:c1:0b:58:06:bc:2e:d4:
                    11:57:e6:2c:56:e0:3a:c0:2b:29:de:77:01:da:ca:
                    40:58:82:a8:fb:35:85:50:ef:59:a5:f5:fa:26:99:
                    a1:0e:50:ab:da:d4:5f:10:6b:ee:45:63:8d:81:57:
                    2e:52:c1:c2:4b:7e:17:66:61:57:f6:b8:1b:26:f4:
                    f8:cc:62:bf:66:35:d6:da:9e:08:ae:5d:a7:40:04:
                    de:5a:4d:e0:d0:10:fb:d4:78:3a:8b:c1:d7:af:4d:
                    a0:d0:6a:bf:9d:a8:84:cb:9e:ff:bc:1d:5d:27:e8:
                    eb:85:04:96:64:89:fa:e8:18:3c:bb:7d:e8:9a:9c:
                    d8:7f:f3:2c:51:ad:6e:43:23:a2:9a:ab:cf:72:03:
                    0f:71:6b:10:23:18:61:95:c2:fb:06:f0:d7:6b:b2:
                    29:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8C:20:39:13:11:36:F4:BE:65:2F:F8:B4:6F:26:9E:C4:2C:BE:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/546c97aa-97bc-33f3-9a9e-1a52f83a981f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl

            X509v3 Authority Key Identifier:
                keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.212.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ac:fe:75:29:fd:8a:e9:56:36:4a:4a:aa:4b:64:79:52:cf:
         b5:40:56:6f:6c:91:b5:ae:ac:52:22:cc:8f:7c:bd:dd:c7:e1:
         15:85:4f:02:c1:83:4d:83:7b:85:be:e6:46:5d:b9:92:3b:ef:
         1e:9b:d9:9a:96:9a:be:fa:e6:ae:93:77:2b:4a:59:57:92:74:
         64:eb:2a:b0:ec:d7:5d:92:56:1d:e1:c5:ee:e8:24:58:c9:7e:
         37:11:e8:7e:92:f5:28:26:32:35:b6:31:35:ae:08:ee:98:9e:
         07:ac:1a:c0:ea:33:c2:dd:d1:a0:29:4f:18:eb:a5:a6:a7:6e:
         33:48:55:4f:c9:dd:9e:47:d0:35:29:71:14:84:83:5c:89:57:
         73:f4:fe:9a:5d:82:a0:a7:79:31:0b:97:ed:07:2c:78:2d:8a:
         98:fb:31:b1:24:bc:2e:57:7f:72:47:b8:47:da:14:82:ce:e6:
         fc:ce:72:de:f4:b4:26:3f:e4:dd:c3:94:04:d7:ea:21:96:3e:
         76:0e:2e:51:bd:06:92:7b:a5:5d:e5:63:5b:4a:81:ae:9b:81:
         7b:36:d4:fc:59:1c:b8:90:59:9d:07:76:6a:cb:89:6f:a5:b3:
         41:dc:47:3b:c5:1c:89:b9:2e:94:f7:f1:90:3e:a8:6d:f6:b7:
         c7:c7:dc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:55:07 2025 by rpki-client