Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/5ef0a992-a485-3af1-beba-8f97c63f47f3.roa
File:                     5ef0a992-a485-3af1-beba-8f97c63f47f3.roa (raw, json)
Hash identifier:          awvqEMbcsMlyahGPqUH5litQkMpW4vXU65RJmKvCL5E=
Subject key identifier:   53:D7:EF:83:67:81:CD:1D:2E:B5:6A:A7:54:33:3C:65:66:7D:0E:D8
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584B609CB7A45A54CEBC4F571180
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/5ef0a992-a485-3af1-beba-8f97c63f47f3.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     10794
IP address blocks:        171.161.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:b7:a4:5a:54:ce:bc:4f:57:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=f9406415-90e4-435d-8792-b2ff5df8779c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d2:60:5e:40:a3:7d:81:80:5c:8d:20:c5:d3:
                    b3:0f:a1:a1:fb:69:f1:b0:df:99:9a:04:88:79:7e:
                    f9:e1:23:c7:2c:5c:c3:bd:5a:2b:0c:38:cb:03:bd:
                    b1:1e:1a:af:41:4a:3c:e8:f1:30:0a:e0:d1:1b:bd:
                    af:fd:d6:d1:21:a2:c5:0a:ae:85:f7:8c:28:1d:dd:
                    a5:78:d8:3a:ce:b3:13:91:6e:f3:d9:59:8d:85:b2:
                    d4:cd:3a:98:43:1c:f3:e1:a0:f9:a7:b9:67:66:d5:
                    12:cc:94:fd:8e:36:6a:a1:f7:9d:46:cf:42:3d:d5:
                    b1:e5:e6:66:cf:83:17:62:d0:4e:be:fc:2f:7c:aa:
                    99:5f:2c:98:3f:b5:20:4c:d0:42:a5:83:44:50:ee:
                    2f:82:14:eb:3a:fc:f9:d7:a7:f2:51:10:22:75:f8:
                    ef:d0:82:e7:3b:57:63:e9:84:7e:1e:94:da:49:6f:
                    8f:86:d1:0a:50:87:cd:52:1c:85:c5:06:1f:cb:1a:
                    03:d4:5b:08:f4:4f:cf:56:d1:4a:e0:67:71:53:8b:
                    2f:07:a0:5d:d1:ef:71:2a:c7:e1:c9:3b:19:cb:17:
                    ec:a1:d9:0f:ae:c5:d1:3c:af:9d:a9:9b:8a:42:91:
                    ca:c5:ab:d5:4f:10:4e:c5:00:c5:5a:81:b4:58:d6:
                    41:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D7:EF:83:67:81:CD:1D:2E:B5:6A:A7:54:33:3C:65:66:7D:0E:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/5ef0a992-a485-3af1-beba-8f97c63f47f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.161.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:0f:f4:a8:01:51:cf:06:2c:7d:20:2a:9c:e8:58:8d:ed:1f:
         95:eb:e7:88:00:34:c1:9a:7a:43:b6:a7:3e:4e:2d:8e:b6:02:
         5b:66:df:84:2e:8e:ef:9c:cd:3a:1d:fe:d0:29:c8:6b:66:1c:
         53:37:3d:49:a1:f4:ff:57:89:05:e6:9f:0e:b3:c9:60:2a:d8:
         ef:85:f8:7c:d2:be:e5:25:9f:02:f8:1e:f6:14:59:93:48:d0:
         70:52:3a:3a:c5:27:34:f7:48:53:4d:5f:4e:d8:31:e4:97:ae:
         33:37:2c:98:84:3d:25:39:c5:d7:fb:58:d1:74:1c:49:ac:74:
         46:d6:fe:5e:a5:04:75:ac:e5:f1:a5:d7:8d:e5:6d:51:9a:60:
         80:32:d6:0a:5f:1c:68:b3:27:2a:aa:36:89:34:f0:6e:07:3d:
         f0:44:d7:73:c6:ad:ed:4e:16:d7:d2:52:53:08:41:85:83:bc:
         2d:9c:aa:39:45:19:bd:41:a9:99:8a:c8:d7:69:f1:95:74:29:
         d2:02:33:e3:6c:e6:75:f9:d1:15:34:64:12:87:a3:83:6a:f5:
         70:02:d7:2f:f8:ba:c3:db:ff:3a:69:aa:e5:89:1f:a3:a3:47:
         3e:df:26:a1:46:7e:f9:0c:6a:03:e1:7a:c9:54:85:79:42:7b:
         af:71:53:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:23:12 2025 by rpki-client