Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/00a7dfe4-53bb-3f76-bd67-bc563899af0d.roa
File:                     00a7dfe4-53bb-3f76-bd67-bc563899af0d.roa (raw, json)
Hash identifier:          +2SlQJwjdDiyG+dFTS0MQ6K3l9D/2O/bXdihNxihtqs=
Subject key identifier:   05:9A:C3:E7:F2:6C:8B:BC:5A:F6:A4:E8:0A:21:37:F1:F5:9E:D2:14
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584B439A2C9FBAC1EAEA6A857590
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/00a7dfe4-53bb-3f76-bd67-bc563899af0d.roa
Signing time:             Sun 21 Sep 2025 03:04:11 +0000
ROA not before:           Sun 21 Sep 2025 03:04:11 +0000
ROA not after:            Sat 20 Dec 2025 04:04:11 +0000
asID:                     10794
IP address blocks:        171.161.32.0/20 maxlen: 20
                          171.161.32.0/24 maxlen: 24
                          171.161.33.0/24 maxlen: 24
                          171.161.34.0/24 maxlen: 24
                          171.161.35.0/24 maxlen: 24
                          171.161.36.0/24 maxlen: 24
                          171.161.37.0/24 maxlen: 24
                          171.161.38.0/24 maxlen: 24
                          171.161.39.0/24 maxlen: 24
                          171.161.40.0/24 maxlen: 24
                          171.161.41.0/24 maxlen: 24
                          171.161.42.0/24 maxlen: 24
                          171.161.43.0/24 maxlen: 24
                          171.161.44.0/24 maxlen: 24
                          171.161.45.0/24 maxlen: 24
                          171.161.46.0/23 maxlen: 23
                          171.161.46.0/24 maxlen: 24
                          171.161.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:9a:2c:9f:ba:c1:ea:ea:6a:85:75:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Sep 21 03:04:11 2025 GMT
            Not After : Dec 20 04:04:11 2025 GMT
        Subject: CN=5aee47d7-2f25-4669-b7fe-12acbd32180c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5c:1b:a9:56:b5:c5:fd:b3:de:c2:92:3a:6e:
                    54:71:0e:01:84:72:d7:b7:a7:1c:2a:11:f0:b6:1e:
                    da:fe:8e:77:64:b3:7f:58:03:97:51:1d:f9:0c:7f:
                    ca:3e:c7:a7:9b:84:8b:0f:cf:2d:cb:1d:22:72:47:
                    54:59:b5:bd:ee:ef:8b:74:14:ea:ad:82:75:4a:06:
                    b3:f2:41:ff:1c:2f:02:08:d0:b9:29:f6:a1:4c:8b:
                    d0:47:67:4d:66:c0:6e:a3:bb:dd:ce:19:22:19:23:
                    e5:a3:62:3e:e6:2e:b0:90:5c:18:9f:b8:7a:09:4c:
                    78:34:96:4e:0d:f3:ec:6a:72:6d:57:a7:6b:f1:29:
                    fe:e8:39:9a:53:91:24:42:3f:39:e7:a5:0d:e8:0e:
                    c5:a5:38:8c:a0:0a:e5:94:2e:6d:48:a5:a4:f2:a6:
                    8c:aa:81:48:f2:e5:f9:42:30:e4:61:e4:e6:89:ec:
                    6c:cb:22:f4:26:66:ba:f7:29:29:a6:d6:22:0d:a0:
                    c1:ea:64:c3:4e:b3:06:5e:68:50:bb:8d:6c:2a:83:
                    25:8f:48:fe:6e:d7:33:ef:a9:00:56:31:e8:4f:b9:
                    a4:b8:a0:d7:85:99:3a:08:00:82:b4:b7:3e:14:10:
                    59:00:a3:cb:05:8e:ac:aa:58:2a:e0:c8:51:02:94:
                    18:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9A:C3:E7:F2:6C:8B:BC:5A:F6:A4:E8:0A:21:37:F1:F5:9E:D2:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/00a7dfe4-53bb-3f76-bd67-bc563899af0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.161.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:e8:64:e8:ed:fb:e6:df:03:3a:ec:6e:d4:a1:7d:68:8d:cc:
         dd:5a:b8:3e:3b:cd:18:80:9d:ed:9e:32:b9:9e:3c:36:93:30:
         a0:5c:4f:6d:3e:9d:3a:2a:b4:32:73:68:5b:17:99:dd:49:54:
         8c:89:32:e2:b2:58:fe:45:15:cc:de:8f:f5:59:0e:0e:64:44:
         22:fa:50:57:6a:49:34:3a:88:56:05:d6:05:c1:bd:69:ea:cb:
         a6:0b:4c:c2:4e:d0:87:d6:d1:9d:cc:e3:fe:f5:fa:20:7a:46:
         de:44:97:30:16:70:d2:16:c4:46:9b:4b:ff:e7:15:02:92:04:
         4c:1b:7e:85:87:61:23:b5:02:9b:eb:09:1b:d5:67:ee:b0:0f:
         68:75:43:32:92:da:2d:f0:3c:c9:15:df:3b:a3:5e:6d:be:aa:
         de:32:40:32:51:72:57:77:0a:73:70:7a:48:08:d2:72:a7:07:
         cb:03:ac:be:13:86:b5:81:3d:8f:af:4c:0b:a3:a1:bc:e0:fb:
         2b:38:f1:70:12:c0:6a:e2:6e:0f:79:dd:35:19:70:aa:eb:dc:
         83:d6:d4:70:a1:08:ed:30:e0:a5:ea:b1:ed:19:87:64:52:b4:
         03:aa:fd:9f:38:ae:83:f5:19:36:20:9e:1a:e3:fb:17:9e:b0:
         28:00:d0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:12:41 2025 by rpki-client