Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/aeb2fd2a-aa41-30df-aba1-b89c4ea76180.roa
File:                     aeb2fd2a-aa41-30df-aba1-b89c4ea76180.roa (raw, json)
Hash identifier:          QLRX/1Pw5NkzuXDHOPoujrXbMMRQdhfEorbhfa8KLMI=
Subject key identifier:   57:9E:5A:5B:D4:67:AA:96:28:10:3E:8F:8C:68:5A:32:D3:98:AB:89
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584B636750A95823CCA8158529C0
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/aeb2fd2a-aa41-30df-aba1-b89c4ea76180.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     10794
IP address blocks:        171.161.120.0/21 maxlen: 21
                          171.161.120.0/24 maxlen: 24
                          171.161.121.0/24 maxlen: 24
                          171.161.122.0/24 maxlen: 24
                          171.161.123.0/24 maxlen: 24
                          171.161.124.0/24 maxlen: 24
                          171.161.125.0/24 maxlen: 24
                          171.161.126.0/24 maxlen: 24
                          171.161.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:50:a9:58:23:cc:a8:15:85:29:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=37043a92-67e9-4d88-975e-00a3a0b6c7ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:87:f4:7d:66:9c:e0:6d:5b:a5:c4:b4:e8:1a:
                    20:c3:99:af:c3:b4:de:1d:ce:18:30:a0:2c:df:cd:
                    1f:20:bb:cf:d9:b5:c2:60:87:93:9c:77:60:fa:72:
                    84:88:b2:3e:13:ab:48:32:5b:e3:7f:23:e8:80:cc:
                    b1:94:86:6e:38:70:8f:1f:ac:93:f6:cc:3a:22:b5:
                    5e:52:78:2e:fd:45:8e:8b:f3:fe:7a:3c:fb:ea:f3:
                    9c:ae:98:e4:f4:e1:38:59:ba:b8:30:bd:42:f2:9c:
                    f5:31:7f:ec:2f:c8:45:1c:8a:41:7d:c3:4f:86:1a:
                    f5:f8:a3:8d:57:54:a9:13:8d:bf:93:b4:71:06:c4:
                    39:9a:0d:8f:86:a8:2d:80:24:f6:06:6e:6a:e1:1d:
                    98:12:6a:0e:58:d4:d4:45:98:f7:ee:3f:65:d0:a0:
                    4f:b0:d8:c0:fe:55:f8:39:31:a2:48:41:de:e9:33:
                    28:e2:c5:4a:c1:a2:30:d5:39:bd:9a:ba:d1:1c:56:
                    60:bd:5e:b0:e7:ce:b9:ae:0d:39:cd:49:44:de:2b:
                    d8:20:47:2b:79:d8:6d:34:1f:8b:fc:3e:ee:46:36:
                    2f:0e:06:77:be:9e:10:07:6b:2f:a0:ed:2b:2d:b4:
                    03:10:d6:c7:77:e1:18:3c:de:df:f2:f4:76:16:41:
                    89:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:9E:5A:5B:D4:67:AA:96:28:10:3E:8F:8C:68:5A:32:D3:98:AB:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/aeb2fd2a-aa41-30df-aba1-b89c4ea76180.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.161.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:4f:e0:f0:85:5a:82:ba:b7:f3:7a:13:85:dc:75:cf:bd:ab:
         c3:dd:6d:f8:b8:9b:ac:02:7e:ef:f2:0d:a1:ae:44:75:67:79:
         16:44:a5:24:f9:9a:e7:8a:e8:3f:80:17:78:a2:a2:f9:08:3f:
         39:cc:4a:cb:44:83:15:e3:58:28:ad:c5:d5:ae:35:05:a3:06:
         0d:fc:e3:bd:3b:fe:65:80:9d:23:d4:37:b4:6d:fa:cd:59:f3:
         65:da:7b:7d:e9:ed:e9:c6:88:77:0e:8a:c0:e4:33:3f:f3:88:
         7e:88:1d:e8:d2:ad:46:86:78:48:53:19:55:98:e9:11:11:4c:
         3d:4e:3c:eb:48:43:f0:55:31:bf:38:84:1a:a3:eb:fe:d4:3e:
         3a:80:8a:b9:15:c9:2d:0b:0f:08:2d:af:5c:c7:74:3d:0b:a3:
         0f:00:72:ef:6e:a1:88:9b:84:2d:38:6f:6f:f9:0c:d3:c8:01:
         5d:0d:55:2c:db:59:d1:be:69:c3:61:45:f1:ad:2c:b0:73:cc:
         00:74:97:7d:37:5e:dc:38:02:b6:4a:76:8f:e5:64:47:14:52:
         b9:c8:db:95:5f:b8:db:c0:4c:ac:cc:f0:2f:be:0b:d3:6a:57:
         54:6b:c1:45:0c:4e:8e:b5:91:08:62:ae:e3:00:fc:96:e8:d1:
         cd:c8:ad:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:23:02 2025 by rpki-client