Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/f8ce0f0e-0e89-3e53-ab10-fac5913d279d.roa
File:                     f8ce0f0e-0e89-3e53-ab10-fac5913d279d.roa (raw, json)
Hash identifier:          skWPLvtYYky2ecg4H0oqI32zUXGizSAHdWKAB5KTwkc=
Subject key identifier:   14:9B:6B:C0:94:99:1E:AB:60:49:47:D7:5A:19:0A:F0:96:2C:CC:19
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F4328584B52A7561C750874596FB06980
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/f8ce0f0e-0e89-3e53-ab10-fac5913d279d.roa
Signing time:             Fri 26 Sep 2025 13:00:42 +0000
ROA not before:           Fri 26 Sep 2025 13:00:42 +0000
ROA not after:            Thu 25 Dec 2025 14:00:42 +0000
asID:                     19886
IP address blocks:        171.162.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:52:a7:56:1c:75:08:74:59:6f:b0:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Sep 26 13:00:42 2025 GMT
            Not After : Dec 25 14:00:42 2025 GMT
        Subject: CN=c16282e8-51ea-4a4d-9355-0fee4bf7c55c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:76:9a:ff:fb:6a:f2:81:a2:93:01:1b:6b:d0:
                    7b:3f:90:4b:31:94:17:73:b1:51:cf:dd:68:b3:41:
                    ac:1f:c9:72:c6:90:37:d2:77:50:9a:02:fc:ba:98:
                    47:5c:be:da:b3:15:7d:02:45:3d:9b:a8:76:4c:21:
                    a7:ff:ae:61:bd:7c:45:4b:25:98:8e:58:7a:ce:34:
                    9b:ed:a0:e7:d8:cb:9c:76:92:1e:b6:fe:dc:1b:ab:
                    ef:7e:74:d0:a8:24:95:44:5a:a5:55:1f:be:f7:bc:
                    80:71:13:46:10:36:e5:ba:36:ef:b7:c4:21:b3:0a:
                    ac:0a:42:27:0f:dc:a0:51:fb:01:f7:7a:66:47:c3:
                    0d:10:96:e6:fc:79:0c:7c:01:11:54:7b:14:04:9c:
                    98:3e:74:52:f4:1b:3b:0c:f9:72:1e:e0:a9:f6:7d:
                    ba:ef:a7:84:cc:c9:50:d1:0c:83:5c:6d:f3:6c:c9:
                    10:bc:bd:0b:fe:ad:1c:74:61:a1:60:86:1d:41:96:
                    f5:94:15:74:67:21:3a:a5:f8:be:6b:a7:8f:ce:65:
                    ec:e7:54:b4:bb:52:ff:8a:14:bc:1b:ba:c4:fe:a3:
                    e7:e3:b4:9d:b3:19:b1:04:ba:45:5c:d7:20:79:60:
                    3a:be:0f:d1:62:83:b3:1a:97:95:06:73:5f:c5:22:
                    bd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9B:6B:C0:94:99:1E:AB:60:49:47:D7:5A:19:0A:F0:96:2C:CC:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/f8ce0f0e-0e89-3e53-ab10-fac5913d279d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ee:93:23:f0:fd:5f:85:40:e4:43:65:de:47:4d:12:77:28:
         4d:ec:f4:a5:ce:50:5a:fd:19:9d:d6:9d:10:f0:72:44:a0:06:
         3e:de:47:b7:66:59:45:69:14:36:c0:6e:11:9f:86:9f:e1:33:
         b1:6c:df:04:5f:16:2c:e7:8f:5b:9d:29:e0:9b:56:67:12:45:
         5a:0c:27:ca:72:97:46:bf:c2:53:24:8a:4c:27:3b:66:41:e3:
         aa:c7:e0:d6:ce:e1:a6:0f:34:97:8d:7f:52:71:ef:ee:5a:ec:
         4d:bd:62:c8:0e:2c:83:a7:d7:04:16:16:70:93:82:f6:be:97:
         22:06:bd:a0:d6:25:8f:68:3f:18:96:58:9a:4c:09:d4:83:ef:
         94:c6:f2:9a:6c:30:2d:f2:d9:87:e6:b8:ae:e4:3c:e9:c5:2d:
         67:7a:5f:70:0e:a2:ec:d2:cb:a0:01:d3:c8:16:36:4e:8e:77:
         21:fa:15:41:af:55:da:58:b0:49:ab:62:c8:64:b8:fe:78:13:
         8f:98:dd:fa:bc:11:50:41:59:03:93:68:bc:89:82:cb:4f:69:
         ca:ab:5c:79:43:23:66:9f:32:2c:19:32:ab:7f:d6:6f:50:b1:
         6e:76:ad:b3:71:90:e3:99:80:66:c0:c7:de:03:ba:b3:53:10:
         ef:fa:05:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:47:01 2025 by rpki-client