Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/3a488832-42d4-3bc4-a61f-b7bd8e0ab3ea.roa
File:                     3a488832-42d4-3bc4-a61f-b7bd8e0ab3ea.roa (raw, json)
Hash identifier:          7Ve6skTHu2OSH72Gqqyu/63iLPA1e2OBfS11HlcUVCw=
Subject key identifier:   7A:F3:5B:43:E5:86:B1:49:46:80:C8:27:3D:6C:B1:A2:B4:06:D5:27
Certificate issuer:       /CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
Certificate serial:       010D0C9F4328584B87B2408D9A7124A686960BC0
Authority key identifier: 74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/3a488832-42d4-3bc4-a61f-b7bd8e0ab3ea.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     36549
IP address blocks:        162.249.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:40:8d:9a:71:24:a6:86:96:0b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=a83aab36-56f7-475f-9a96-2a602ebdfed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2f:de:24:f3:8c:35:b5:49:90:41:74:90:4e:
                    b1:33:a8:3a:0e:bb:e7:f6:c8:2e:80:06:52:cd:6b:
                    a0:a9:7e:8f:56:54:b1:5c:10:fc:f7:0f:c5:be:09:
                    ae:d7:ae:2a:b3:7c:4f:18:43:80:0a:f0:d0:f3:77:
                    40:d1:4a:54:f0:fd:62:9d:50:23:96:46:16:bd:7c:
                    27:4c:05:40:0e:02:e5:0c:a8:ad:69:9c:6a:5d:9d:
                    6d:5a:dc:13:00:c4:44:34:1a:b2:d9:9e:73:b2:1b:
                    7a:80:58:35:bb:05:da:13:d1:14:10:5f:e9:9a:15:
                    6d:1e:74:70:20:86:fb:eb:70:1d:42:52:1a:cd:ba:
                    0c:72:95:17:73:2f:9e:a5:21:a6:4c:33:01:0d:13:
                    56:98:9f:32:4a:58:87:7d:db:23:89:c0:ef:85:30:
                    a1:03:72:92:40:03:ef:50:0f:70:86:fb:fa:21:e0:
                    88:48:04:0e:4a:60:e6:5b:7f:4a:8d:b0:fe:53:be:
                    aa:db:8a:96:4b:e8:cc:81:2f:0a:0e:a0:c8:b8:98:
                    78:e4:d5:96:da:b2:e7:e6:c7:4e:7c:31:94:d2:16:
                    63:84:dc:38:14:44:5d:01:11:67:0e:c5:69:27:aa:
                    f4:45:d4:d9:3d:74:e9:d1:4e:94:8e:2f:de:70:69:
                    7f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F3:5B:43:E5:86:B1:49:46:80:C8:27:3D:6C:B1:A2:B4:06:D5:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/3a488832-42d4-3bc4-a61f-b7bd8e0ab3ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl

            X509v3 Authority Key Identifier:
                keyid:74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.249.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:56:72:97:02:5e:c3:27:0c:eb:11:a3:c0:7b:06:c7:b5:0d:
         25:ce:10:f7:c2:50:ae:41:1d:12:e0:15:14:85:0e:6e:81:13:
         4a:15:f9:5e:56:a0:75:a1:44:4f:a8:41:55:77:0c:c2:aa:21:
         3f:7f:bf:c7:29:f9:e7:4a:bb:f1:f2:ba:39:13:f8:45:e7:aa:
         4d:f0:88:bb:ed:77:d4:d5:a0:5e:ca:0b:94:f7:d1:75:d0:10:
         a6:a5:57:ff:71:fb:9f:4e:32:7b:2f:39:ee:de:3f:31:e4:25:
         9b:83:5f:16:7b:f6:ee:47:ce:dc:c1:bf:38:fc:98:2f:b4:e6:
         2d:b3:ea:68:44:12:16:aa:34:42:3a:2b:f5:e4:74:5d:5b:ea:
         20:60:f0:be:a4:7b:33:50:89:a2:5f:75:8a:ae:22:3b:f1:c0:
         54:b1:f4:77:68:a8:6b:1a:95:be:24:a8:00:d4:2c:8f:58:44:
         08:e7:95:5b:80:f3:fc:d2:92:d3:12:6e:4b:58:0d:8d:06:7d:
         ac:b5:d6:19:26:9b:9b:0e:79:ac:35:80:93:22:b8:23:df:6f:
         93:d4:54:ec:d3:33:49:5c:40:30:0d:92:0a:ab:5a:7b:df:66:
         65:4f:11:fe:72:00:58:35:8b:12:38:59:32:00:98:36:3a:03:
         f7:51:23:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:23:56 2025 by rpki-client