Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/5d6af7c4-5d1c-368a-a24a-d9e607b56c6e.roa
File:                     5d6af7c4-5d1c-368a-a24a-d9e607b56c6e.roa (raw, json)
Hash identifier:          GS+25nds5lmIbEE6Cj/Q7rQOaXKRRodvcuFp/+LzrVc=
Subject key identifier:   2E:68:F9:DA:A6:AF:87:01:88:8D:EC:80:32:80:39:71:D0:1A:B4:F8
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584B43B307BE3475A59CF94D3AC0
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/5d6af7c4-5d1c-368a-a24a-d9e607b56c6e.roa
Signing time:             Sun 21 Sep 2025 04:27:35 +0000
ROA not before:           Sun 21 Sep 2025 04:27:35 +0000
ROA not after:            Sat 20 Dec 2025 05:27:35 +0000
asID:                     10794
IP address blocks:        171.162.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:b3:07:be:34:75:a5:9c:f9:4d:3a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Sep 21 04:27:35 2025 GMT
            Not After : Dec 20 05:27:35 2025 GMT
        Subject: CN=7d4180c5-43ec-40d2-afa3-e0a450dc7f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5f:a7:dd:e3:94:fe:05:b3:c5:6e:8d:25:e7:
                    33:b6:11:10:fe:f4:4e:b3:94:5a:eb:fc:bd:37:fd:
                    0c:70:95:4c:09:a2:d8:a8:35:6e:1c:d1:fc:61:74:
                    98:c1:62:4e:f3:a5:f6:ab:6a:c2:ca:20:22:22:66:
                    2f:7c:ab:19:06:61:f1:34:b2:1a:07:79:cb:ab:52:
                    87:e7:9b:51:e4:d0:c1:3b:57:79:8f:f6:cf:c2:9e:
                    51:09:c9:be:c4:4f:ae:5a:d3:7e:3f:1c:aa:1c:d9:
                    9a:b8:8d:a8:63:19:6b:fe:1a:68:d1:ac:ed:06:9e:
                    dc:18:96:76:f3:2f:61:ae:56:e5:37:10:b8:da:e4:
                    c7:f7:1f:ff:14:ea:2a:c7:a7:62:ad:73:29:22:e0:
                    a9:69:1d:a6:2b:45:c9:13:f2:09:96:25:f7:b3:5c:
                    f0:a3:3e:e0:44:ba:81:e6:ce:49:24:d8:c0:bd:f8:
                    d4:97:4c:dc:bb:b3:db:6d:d7:3f:99:29:74:cb:27:
                    f7:20:65:50:f8:d2:c6:a6:49:f9:32:c6:e3:e5:15:
                    df:2b:60:e1:8a:a4:01:54:76:2b:70:ff:3e:7b:a5:
                    6e:b5:c1:48:e7:78:3a:71:4f:8a:58:c2:9d:b7:c1:
                    d9:3e:1b:10:31:50:7d:ca:fb:ff:af:97:ac:be:b9:
                    fb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:68:F9:DA:A6:AF:87:01:88:8D:EC:80:32:80:39:71:D0:1A:B4:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/5d6af7c4-5d1c-368a-a24a-d9e607b56c6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:60:76:9a:25:ab:66:23:39:43:91:37:a6:a5:e3:26:36:c3:
         9a:d1:63:60:a9:9e:80:37:fd:8b:c0:29:61:4b:9c:71:a6:de:
         84:14:d0:00:23:ca:ae:85:ec:9e:fd:7f:9e:32:b9:67:b6:8e:
         38:12:05:3f:b1:d7:ae:eb:ee:94:dd:b5:a6:c6:92:f0:22:38:
         76:25:e6:bb:df:86:2a:18:82:11:c7:59:ba:eb:9e:7f:11:d5:
         27:56:55:52:ed:6a:67:bd:be:a2:86:ca:31:04:33:c1:25:6a:
         0f:53:2a:42:e2:30:53:5d:59:0c:6e:67:ee:fa:3e:ba:30:17:
         e2:4b:a2:00:5d:41:f7:e8:a9:5a:bd:07:e2:63:d6:9d:b0:21:
         a2:88:4d:9a:2a:59:ab:84:11:a9:74:f1:f0:92:5a:75:86:17:
         27:e1:44:70:e0:f0:a8:25:e7:5e:89:55:17:bc:3e:8d:d0:bc:
         6a:9d:68:cb:ca:fa:7b:ac:06:45:eb:c2:73:f2:44:39:66:49:
         8b:37:34:5c:96:3b:04:83:be:0a:e0:64:92:9d:c5:ff:58:eb:
         5d:a4:8e:c4:0c:2e:b4:da:46:b3:a5:ff:76:ff:49:de:02:29:
         74:d1:2a:31:6e:a8:46:11:df:f9:94:db:54:28:0e:80:b7:06:
         78:a7:80:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:13:00 2025 by rpki-client