Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/05aa2fea-24ee-3777-9c8f-bbe03559447c.roa
File:                     05aa2fea-24ee-3777-9c8f-bbe03559447c.roa (raw, json)
Hash identifier:          R3UIBwysgG67B+GY2z1dRw54dLPJECSWmYFDFd9MFFg=
Subject key identifier:   76:41:25:B4:05:DD:F8:A9:92:63:48:54:21:3A:FB:6A:26:49:F9:0A
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584B8A2972C3C62D3258269A1D40
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/05aa2fea-24ee-3777-9c8f-bbe03559447c.roa
Signing time:             Thu 16 Oct 2025 10:12:46 +0000
ROA not before:           Thu 16 Oct 2025 10:12:46 +0000
ROA not after:            Wed 14 Jan 2026 11:12:46 +0000
asID:                     14555
IP address blocks:        170.10.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:29:72:c3:c6:2d:32:58:26:9a:1d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Oct 16 10:12:46 2025 GMT
            Not After : Jan 14 11:12:46 2026 GMT
        Subject: CN=5da1ee0a-b56f-4cbf-8e27-58eee68237bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c7:d8:ee:10:87:01:9a:33:f3:62:41:7f:04:
                    5f:87:0f:c4:b7:aa:0d:87:77:60:c2:14:c6:42:8a:
                    18:9b:09:82:2c:0a:e7:a2:b9:19:e5:66:cf:75:c8:
                    51:62:da:c6:58:e6:74:7a:1d:bb:41:b2:18:d3:45:
                    27:40:ea:ef:bd:dd:38:e1:ff:54:f6:dc:83:ab:99:
                    57:5a:60:0b:26:1b:17:34:43:fe:8d:55:42:fa:cb:
                    69:98:e4:49:89:a4:0a:a7:5d:43:cf:2f:d2:58:cf:
                    77:cc:fe:da:33:a0:47:84:26:15:b0:f9:df:ed:c8:
                    ea:3c:c3:5d:09:58:5b:ac:41:84:ff:c2:25:ef:45:
                    1d:39:40:ee:7a:61:8d:f9:76:8b:2b:0b:9e:f1:eb:
                    b4:8f:17:ff:0b:27:e5:3f:07:73:fc:14:cf:3b:0e:
                    fe:b1:c6:a1:58:11:31:d6:5f:05:fe:0e:3a:d0:a5:
                    49:73:1d:63:2e:47:a8:6c:0a:85:03:0b:23:20:59:
                    0c:69:07:82:e9:dd:bc:cf:06:dd:3f:55:e7:4d:31:
                    01:c6:99:ac:2f:83:61:48:5b:90:40:00:57:fe:ed:
                    61:a3:3f:d2:33:3a:74:76:38:44:ef:36:53:4c:37:
                    44:93:cb:3a:91:7c:ec:41:56:9f:ba:fc:4f:d2:cb:
                    ad:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:41:25:B4:05:DD:F8:A9:92:63:48:54:21:3A:FB:6A:26:49:F9:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/05aa2fea-24ee-3777-9c8f-bbe03559447c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:d6:9c:3e:71:31:4d:31:fe:e1:42:04:4f:af:af:77:01:38:
         18:17:91:d5:2e:74:a0:05:ab:5a:87:bb:4e:9c:fc:c3:75:a5:
         10:6a:82:bf:5e:eb:56:d3:5d:4f:30:51:26:08:fb:e0:bf:4c:
         d8:4b:ea:ec:3f:c2:d9:ff:c8:69:e8:43:cb:71:8c:7b:f5:59:
         64:9c:0c:e4:49:50:48:84:af:a7:6d:8b:ee:88:de:3a:84:c9:
         71:bb:4b:53:7a:65:53:b8:9e:db:af:a4:bc:80:29:f2:a6:d5:
         f2:10:7e:1d:e1:35:b3:95:6c:65:36:da:d9:05:20:40:03:81:
         bc:2e:6c:e9:85:df:5e:87:18:3b:8b:d0:2c:d6:55:2b:64:f1:
         a1:9d:8e:33:72:99:7e:ee:0f:3b:e8:c8:ce:2d:ec:ae:dc:6e:
         70:9d:d2:6e:e2:60:43:42:c6:d8:ba:c6:1d:ef:58:51:ff:a4:
         ae:27:15:fe:93:31:13:56:55:6a:bd:f4:ff:92:5d:0f:6d:9e:
         86:53:da:1b:0f:d3:84:34:7f:7d:7f:8f:1e:fe:bd:dc:c5:e9:
         89:62:56:3e:04:7c:26:9c:a1:ad:42:cf:cb:3c:77:1f:1a:a5:
         c9:38:bd:f4:13:2a:f6:49:b2:bb:01:63:2a:3d:50:a7:4b:04:
         13:0a:c0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:23:40 2025 by rpki-client