Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/78d04205-2b1b-3a89-8a6b-8efaafbd4f4f.roa
File:                     78d04205-2b1b-3a89-8a6b-8efaafbd4f4f.roa (raw, json)
Hash identifier:          4ppkC0pi0ss8YT+2ed1ORcBHeuqc5+1uiRSriT1/PEQ=
Subject key identifier:   41:A4:16:3B:91:17:61:3F:6F:5A:83:51:84:90:6A:D1:16:E1:34:06
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584B52A757C2B98ED577B9C49140
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/78d04205-2b1b-3a89-8a6b-8efaafbd4f4f.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     19886
IP address blocks:        171.162.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:57:c2:b9:8e:d5:77:b9:c4:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=5bf8a54e-100d-44b9-8574-e39079da6213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e5:8d:1a:c2:28:eb:a3:fd:8c:9a:f4:fb:29:
                    b5:d7:40:17:56:42:62:59:f7:c4:ca:21:6a:1b:5a:
                    52:e0:a6:49:b7:47:6c:68:37:8a:76:25:40:a2:ce:
                    66:1c:8a:f2:4c:8e:b0:f1:0a:4a:63:89:dd:4f:12:
                    00:18:07:8d:2e:fc:b1:9a:8a:06:0f:a7:99:cc:84:
                    6e:df:aa:a2:45:bb:70:7d:05:5c:53:2b:9f:7d:4d:
                    2f:24:95:ce:f3:60:84:e6:2a:56:5a:cb:2f:00:af:
                    6e:04:71:ff:f1:0b:d0:8a:51:d8:94:5e:0f:71:fb:
                    4f:be:56:fe:1c:c6:ca:ea:8c:81:73:d5:35:7c:cf:
                    61:17:6d:5e:51:36:0a:8b:01:14:81:2c:fd:79:fa:
                    38:45:bd:b7:41:b2:2b:6d:34:9e:39:87:0b:20:db:
                    b7:ec:86:f9:10:b3:0c:e8:24:4f:c1:bb:c1:a8:77:
                    b5:c6:b5:f1:d6:24:38:8a:87:c9:78:d5:2a:08:ed:
                    5b:64:dc:ad:6d:64:67:b7:00:36:da:1a:a3:97:99:
                    f6:a5:a1:30:c4:10:6e:dd:be:08:46:24:6c:ce:18:
                    1e:06:ee:01:7b:a5:60:ee:c5:f8:b6:2c:78:86:db:
                    54:97:87:79:0d:6f:cd:23:e6:08:f3:85:6b:a5:58:
                    74:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A4:16:3B:91:17:61:3F:6F:5A:83:51:84:90:6A:D1:16:E1:34:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/78d04205-2b1b-3a89-8a6b-8efaafbd4f4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:20:76:27:3d:05:4d:35:83:9a:94:09:37:d9:a1:ae:92:10:
         4a:ff:8e:11:bf:cd:45:8a:dd:9b:5e:74:08:2e:c6:19:75:c1:
         ce:56:e1:02:e5:d4:11:dd:38:3b:95:0b:b5:25:3e:5b:df:cc:
         e1:89:fc:94:1c:1e:9d:7a:03:1a:ca:2f:e1:bf:1d:83:4c:8a:
         33:70:24:6b:a3:6b:dc:3f:c2:08:98:5d:44:1b:3e:ad:60:a3:
         33:0a:b1:4a:8f:90:22:d6:ff:dd:fb:11:2a:cd:4b:1c:2e:9d:
         81:d6:44:d2:3a:35:3e:bc:04:03:c0:bc:d7:4d:5d:4b:d7:14:
         9b:df:d7:7c:46:4f:e6:53:8b:c1:ff:7c:c5:6f:23:79:c1:ff:
         c6:82:5e:a5:08:05:30:1d:de:62:5d:b6:de:5e:04:e0:5e:e4:
         f6:e9:a8:1a:43:79:76:50:9c:4e:f0:0e:b6:3f:5c:16:a6:b7:
         f9:a4:38:3c:30:d7:c9:ff:59:9a:9d:90:c5:95:6c:2a:de:e7:
         55:41:44:74:c4:78:28:31:c5:c4:9a:ab:09:9c:53:db:b1:57:
         0f:f6:fa:db:13:fe:2e:ae:65:4e:db:c9:a3:63:d1:92:be:ff:
         fa:66:da:70:ec:3e:28:38:ca:dd:94:3b:90:c5:bb:f1:30:d3:
         35:3b:59:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:22:55 2025 by rpki-client