Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/3d0587fb-7521-3040-b8ce-e34178b2fbca.roa
File:                     3d0587fb-7521-3040-b8ce-e34178b2fbca.roa (raw, json)
Hash identifier:          WPD0YFVk8Qe4UgfySZ2+h6dPQpV0SOdKQkcm1SRCIDA=
Subject key identifier:   C0:4F:A4:C9:F4:A5:8C:75:B9:6C:CF:98:59:8C:CC:34:66:22:63:1F
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584B609CB793029718E87C07A300
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/3d0587fb-7521-3040-b8ce-e34178b2fbca.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     10794
IP address blocks:        171.161.96.0/21 maxlen: 21
                          171.161.96.0/24 maxlen: 24
                          171.161.97.0/24 maxlen: 24
                          171.161.98.0/24 maxlen: 24
                          171.161.99.0/24 maxlen: 24
                          171.161.100.0/24 maxlen: 24
                          171.161.101.0/24 maxlen: 24
                          171.161.102.0/24 maxlen: 24
                          171.161.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:b7:93:02:97:18:e8:7c:07:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=59ed5df9-5fd9-4d0e-ac8e-a4f73e571c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e1:82:ac:56:61:ae:ce:5f:fd:ee:2e:80:08:
                    5f:3b:c6:9a:5a:97:48:eb:73:99:93:93:c1:ff:27:
                    1d:25:74:10:80:0c:98:07:36:f6:b2:46:7e:7c:fa:
                    19:e3:df:fa:be:dd:25:16:25:31:11:60:c0:94:a3:
                    fe:6c:43:a0:cd:6c:47:aa:89:87:6c:26:e6:0f:f1:
                    93:7a:cc:d3:7e:49:8c:8e:57:b3:af:66:c4:36:3a:
                    c8:c6:04:eb:24:34:4e:2a:5b:84:bf:09:62:a1:e8:
                    32:32:13:97:ea:87:4f:9e:a3:60:18:de:47:a9:af:
                    cd:e3:b5:1a:0d:ff:37:04:c3:81:53:fd:72:f6:4f:
                    5e:8e:46:69:73:90:94:32:2a:b6:84:a4:e0:8e:1e:
                    57:70:b1:c1:35:8f:a7:e3:79:ef:5a:1f:4d:d5:4e:
                    29:9e:d1:a4:40:63:fb:3d:c3:76:ca:a7:2e:fe:cf:
                    28:f1:d2:b1:30:6b:1c:24:aa:ff:4b:28:04:4f:f6:
                    ed:45:ce:8d:c4:1e:53:b5:84:69:23:8b:f9:90:42:
                    3d:8a:d8:d0:ad:77:e5:31:62:c7:ad:79:11:47:e2:
                    09:8c:ce:2e:82:24:04:96:be:2c:95:d2:40:4b:86:
                    3d:56:c4:a4:86:1b:26:07:3e:77:2a:54:f6:d7:16:
                    4c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4F:A4:C9:F4:A5:8C:75:B9:6C:CF:98:59:8C:CC:34:66:22:63:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/3d0587fb-7521-3040-b8ce-e34178b2fbca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.161.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:ff:50:e6:8e:0f:dc:8e:7f:8a:e0:3d:18:fa:e7:97:ed:de:
         6e:06:26:f5:37:8d:75:26:1b:d8:e2:3c:f3:86:28:36:a3:b0:
         17:0b:5a:be:0d:58:a1:b7:a8:33:7f:24:66:fd:1a:81:c7:d9:
         a8:f9:36:05:85:1c:cb:68:32:fb:9a:09:5d:41:8b:bd:f7:55:
         bc:55:3e:80:17:1b:ad:74:b2:81:07:77:64:c2:79:47:4c:51:
         96:ad:f6:82:df:3e:56:e3:90:da:52:8d:50:db:bd:a5:ef:d5:
         a9:ec:5f:fd:8c:3c:7b:a4:09:c8:cf:23:39:f8:43:22:f8:4e:
         a4:5f:b1:a2:0b:70:93:00:d8:90:01:40:32:39:d1:ae:0f:1a:
         59:fa:d5:a6:c9:c8:9e:1a:f0:d3:56:c9:f3:f9:98:c1:16:93:
         e0:77:27:12:a0:ed:af:1a:d6:9b:49:b9:cd:75:69:4c:e7:5c:
         06:0d:9a:3f:90:90:f6:cd:8d:9a:61:42:5f:c6:95:51:ef:b4:
         ba:00:8b:0b:0b:82:d1:1d:bc:f8:4d:6e:1b:62:0d:96:1a:fd:
         f9:e2:36:f4:b5:d8:8e:c4:e2:6d:bc:11:7b:b7:cf:5d:c6:e3:
         a6:65:a5:90:45:ac:83:a1:45:55:00:24:93:03:7a:ee:ae:67:
         72:50:8d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:47:13 2025 by rpki-client