Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/8753b34a-45f9-33d2-8b55-363c26c79f7b.roa
File:                     8753b34a-45f9-33d2-8b55-363c26c79f7b.roa (raw, json)
Hash identifier:          7AXfOqA0u+cNjbf0OnLwUaB0U2iHpcv0CxCucHQJvx8=
Subject key identifier:   2E:06:D6:03:0C:D8:9C:6B:1E:21:39:27:12:25:24:3D:1C:33:55:A9
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584B437D8EE72A4A586E01F40900
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/8753b34a-45f9-33d2-8b55-363c26c79f7b.roa
Signing time:             Sun 21 Sep 2025 02:39:51 +0000
ROA not before:           Sun 21 Sep 2025 02:39:51 +0000
ROA not after:            Sat 20 Dec 2025 03:39:51 +0000
asID:                     10794
IP address blocks:        171.159.48.0/20 maxlen: 20
                          171.159.48.0/24 maxlen: 24
                          171.159.49.0/24 maxlen: 24
                          171.159.50.0/24 maxlen: 24
                          171.159.51.0/24 maxlen: 24
                          171.159.52.0/24 maxlen: 24
                          171.159.53.0/24 maxlen: 24
                          171.159.54.0/24 maxlen: 24
                          171.159.55.0/24 maxlen: 24
                          171.159.56.0/24 maxlen: 24
                          171.159.57.0/24 maxlen: 24
                          171.159.58.0/24 maxlen: 24
                          171.159.59.0/24 maxlen: 24
                          171.159.60.0/24 maxlen: 24
                          171.159.61.0/24 maxlen: 24
                          171.159.62.0/24 maxlen: 24
                          171.159.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:7d:8e:e7:2a:4a:58:6e:01:f4:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Sep 21 02:39:51 2025 GMT
            Not After : Dec 20 03:39:51 2025 GMT
        Subject: CN=8d8bd9ad-c4d0-453d-8608-b4c6061d4af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:92:ae:96:10:5f:5a:43:08:6d:1d:31:f4:e6:
                    fd:32:16:5e:08:d1:77:06:41:4d:5f:0d:75:50:08:
                    8a:70:74:1c:39:85:31:8b:a7:99:b7:80:f5:3e:ba:
                    ea:d7:3f:15:7e:f6:d5:c2:b9:0d:42:a3:12:36:5a:
                    1f:e9:41:a8:70:91:c9:65:9d:bd:d4:80:41:42:7e:
                    3d:db:8d:dd:7a:e4:e7:23:dc:be:d4:63:75:77:c1:
                    3f:9c:94:4d:dd:c8:ce:1f:e7:e7:48:54:f5:29:f3:
                    43:49:c5:52:8b:ac:55:52:c1:11:b1:f7:0d:cc:0e:
                    52:21:92:40:7b:83:cd:34:63:66:7d:42:ef:14:e7:
                    d3:df:fc:1f:6c:9e:cc:4e:70:00:d3:7c:33:72:92:
                    bb:bd:f6:8b:72:d3:0a:9f:0d:f8:c0:36:ea:e8:83:
                    a4:38:87:10:79:81:da:14:4c:18:9b:5e:6f:1f:5b:
                    74:09:08:89:cd:1d:0b:6c:56:13:b0:03:a4:85:aa:
                    b5:98:f5:e9:98:81:9c:5a:81:98:57:75:23:3b:5c:
                    0c:7f:64:ae:8c:a3:d8:30:98:4e:d5:b9:92:6c:fb:
                    6b:86:09:ce:ef:d3:c2:c4:2b:0e:c2:d9:63:06:ed:
                    e7:54:ca:fa:6e:d3:a8:5e:b4:9c:4c:31:c6:f1:09:
                    7b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:06:D6:03:0C:D8:9C:6B:1E:21:39:27:12:25:24:3D:1C:33:55:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/8753b34a-45f9-33d2-8b55-363c26c79f7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.159.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:0a:01:ff:11:5f:a8:c9:4a:aa:ca:00:46:42:29:06:94:61:
         0a:c9:5b:44:ad:49:9c:55:c6:6d:95:46:b0:02:b3:06:84:c8:
         2f:df:2e:29:97:0a:37:f4:47:60:62:fe:6e:1c:16:0a:a0:ca:
         cc:57:e2:e8:f7:91:9b:df:b1:01:05:7a:a3:cd:f1:ae:03:b4:
         67:11:45:c3:94:74:3b:67:d3:84:dd:fa:73:26:3f:c3:f4:1e:
         15:39:ca:c6:92:18:df:bb:4b:40:0d:9c:67:7b:f0:56:b5:7a:
         28:1f:ee:58:56:8d:42:fe:a1:c5:aa:6b:9c:cf:6c:a6:f0:eb:
         17:81:7a:0b:c2:62:ac:a8:1b:5d:52:c5:06:15:28:f4:53:ce:
         84:d1:90:06:63:37:12:23:ff:c5:05:f9:3e:36:39:48:67:11:
         e7:27:01:7b:f3:f8:ac:1a:4a:8a:07:52:cd:13:2c:6e:8c:06:
         e9:b9:d9:d1:d0:ab:1b:5c:a2:72:7c:7b:05:77:00:21:6b:d3:
         6f:f3:35:df:d7:8f:6e:d5:88:f1:95:c1:99:a1:10:29:b9:81:
         37:47:b3:57:be:fd:54:4b:ee:30:93:f0:89:31:3b:89:01:a2:
         e9:c0:47:24:39:13:e3:3b:2b:b5:a0:d4:6b:a2:d4:95:1e:92:
         21:23:85:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:12:39 2025 by rpki-client