Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/de83aa8f-9e56-370e-a6a5-a26888403d4b.roa
File:                     de83aa8f-9e56-370e-a6a5-a26888403d4b.roa (raw, json)
Hash identifier:          SovQ/iftB5tEbywswrqVMwq0fi4Lty8Zpw/2UbNatPg=
Subject key identifier:   E4:3E:28:A8:22:78:C3:BC:E4:A4:FF:B4:BE:96:47:97:E2:D9:53:73
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584B43F3159C50F81A2DDF9FFE80
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/de83aa8f-9e56-370e-a6a5-a26888403d4b.roa
Signing time:             Sun 21 Sep 2025 06:36:39 +0000
ROA not before:           Sun 21 Sep 2025 06:36:39 +0000
ROA not after:            Sat 20 Dec 2025 07:36:39 +0000
asID:                     10794
IP address blocks:        171.161.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:f3:15:9c:50:f8:1a:2d:df:9f:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Sep 21 06:36:39 2025 GMT
            Not After : Dec 20 07:36:39 2025 GMT
        Subject: CN=a1296803-0425-4d2e-8370-a4021350fac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:44:6e:36:e8:28:b6:86:1e:05:b1:94:21:09:
                    49:44:3a:82:e7:a5:bc:d8:74:ef:33:34:f3:b1:9c:
                    32:8c:e2:48:d4:7f:08:31:7f:ac:a2:29:96:f6:bc:
                    ed:7d:5f:f9:21:07:1c:05:26:ae:e0:7f:c2:08:1d:
                    27:bc:ec:39:41:e9:41:6a:23:b5:07:4c:27:65:dc:
                    3c:1c:63:82:ec:ff:90:6f:e5:b5:3b:d3:6d:65:c8:
                    cc:d8:59:b2:6d:56:fb:d6:21:17:ff:fc:02:8c:ef:
                    69:b4:88:0c:9a:d8:e8:16:a1:6f:23:ca:73:3f:84:
                    99:b5:c0:e3:97:3e:94:4a:98:a0:f9:11:72:d4:13:
                    85:96:0b:31:e3:b4:2a:5f:4f:72:23:26:8a:92:10:
                    ec:c4:15:98:e2:57:06:c6:ab:0e:c1:fc:2e:ca:41:
                    e5:26:26:93:ec:be:a9:42:3b:92:4d:79:87:9c:54:
                    18:5e:2b:94:b1:68:c7:66:57:90:ff:1f:ad:ce:be:
                    99:35:d2:f6:dc:25:0e:28:34:6f:3c:8a:e1:47:81:
                    ff:cd:1a:91:36:1d:c1:23:47:07:17:77:51:bd:ef:
                    6b:45:ff:45:2e:b3:5d:c7:3f:ec:70:d4:eb:c5:76:
                    18:73:b1:fa:f4:e2:7e:b2:3e:29:51:6e:8e:f1:26:
                    79:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3E:28:A8:22:78:C3:BC:E4:A4:FF:B4:BE:96:47:97:E2:D9:53:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/de83aa8f-9e56-370e-a6a5-a26888403d4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.161.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:3c:ff:a7:2f:65:4e:95:33:d1:8e:89:2d:bf:2e:14:5c:0e:
         6e:43:63:a0:c4:2d:91:55:ef:4f:26:5d:1e:2f:a6:f1:3e:cb:
         2c:a3:e9:e7:b3:96:cf:de:4b:a2:ab:f4:fb:f2:e3:54:cb:7f:
         f6:83:e4:03:43:11:ec:56:36:cf:72:39:cf:0a:61:48:59:12:
         6a:42:37:21:8b:a8:03:15:15:dc:5d:aa:99:0c:93:75:14:dc:
         85:8b:25:06:5a:4b:4f:08:fa:8c:93:e3:38:0b:74:73:30:0e:
         6b:cf:64:1d:14:b4:6c:26:4f:2a:e0:16:19:76:20:67:49:e5:
         51:59:61:c7:81:15:93:dd:f0:2a:b9:0c:68:c8:f9:eb:d4:9f:
         c0:2e:9a:1e:0b:cc:10:7d:87:52:2d:d9:e8:a2:6e:ee:03:61:
         e8:a4:68:d3:57:62:05:73:14:56:5d:35:e3:3c:16:0b:a4:0b:
         c6:67:2e:28:fe:23:51:13:48:2f:25:38:1c:57:a8:bd:0e:35:
         fd:32:cf:42:f5:c0:77:6e:ea:88:13:54:f6:ff:f1:17:ad:2c:
         aa:9d:f2:b0:a5:46:f2:f3:52:34:d1:33:1e:13:ec:0c:9f:8c:
         e9:a4:35:1d:c9:d0:e9:09:d1:b6:ac:8b:fc:19:bd:46:2c:50:
         a9:28:f4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:12:38 2025 by rpki-client