Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/1b3a3b5b-1b03-3b09-883d-66285c8776bd.roa
File:                     1b3a3b5b-1b03-3b09-883d-66285c8776bd.roa (raw, json)
Hash identifier:          ouR1m/FbytWcHa4IR6WprpkShyjOVcDomsZiryJRzuY=
Subject key identifier:   D9:73:B6:27:AB:81:A1:F5:93:9C:8B:E6:19:33:63:91:8C:CF:3C:44
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584B8A26035A17A169E9CA4B6380
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/1b3a3b5b-1b03-3b09-883d-66285c8776bd.roa
Signing time:             Thu 16 Oct 2025 10:05:51 +0000
ROA not before:           Thu 16 Oct 2025 10:05:51 +0000
ROA not after:            Wed 14 Jan 2026 11:05:51 +0000
asID:                     14555
IP address blocks:        170.10.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:26:03:5a:17:a1:69:e9:ca:4b:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Oct 16 10:05:51 2025 GMT
            Not After : Jan 14 11:05:51 2026 GMT
        Subject: CN=7cfe1e50-9d77-4bdb-bbc8-8368ef4bc4b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e3:10:62:1d:5e:68:65:2b:a3:3c:ff:48:63:
                    fe:8e:9c:bb:70:ce:08:e4:b5:64:9c:b7:d8:e8:d8:
                    1a:e1:d2:8e:35:b0:4e:07:55:76:a4:e6:85:03:13:
                    b9:2f:e2:c0:f0:76:27:f9:33:ce:58:d5:bb:bf:86:
                    0c:87:e9:63:89:4e:d3:77:46:dd:9b:f8:5d:2c:5a:
                    4a:06:55:23:4a:d1:53:11:82:f2:9e:44:91:f2:82:
                    c6:aa:6f:74:b1:96:b0:76:65:cb:5f:6c:21:b5:82:
                    73:1e:8d:3f:0c:32:32:dc:3e:ca:d4:a8:1f:01:7d:
                    2e:97:f9:1d:d5:43:7a:3d:af:47:95:58:4f:02:af:
                    c7:38:4a:9d:45:aa:3d:01:25:52:96:95:79:c3:09:
                    64:11:c4:de:7a:bb:9a:9e:80:ea:19:66:a5:5c:b8:
                    15:d1:62:68:ba:4a:75:c9:12:c0:c2:22:bb:50:cc:
                    ae:74:1b:96:0b:16:cf:6d:fa:53:a7:bb:ef:18:fe:
                    9d:49:fb:30:da:7f:f0:7a:93:08:61:73:f6:73:d1:
                    2e:6e:b8:97:75:43:12:54:d4:ef:5f:14:cd:47:54:
                    83:ab:6b:29:a8:16:a1:1a:1d:8f:d5:6d:13:2f:a4:
                    63:ed:88:c2:b8:66:b4:e0:3e:60:5d:72:5b:ed:df:
                    f8:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:73:B6:27:AB:81:A1:F5:93:9C:8B:E6:19:33:63:91:8C:CF:3C:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/1b3a3b5b-1b03-3b09-883d-66285c8776bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:cd:83:5a:cf:50:fc:66:35:a3:4a:da:b8:e7:c4:eb:e3:03:
         ad:0a:d5:98:ba:2f:34:51:1e:c8:51:3b:16:58:85:77:97:4f:
         d6:11:b8:8e:6b:54:0e:06:77:a6:4c:26:67:7e:70:b3:3f:ce:
         0f:9a:32:56:69:18:bd:52:57:54:74:63:0a:69:80:9a:0b:ad:
         d1:d7:d8:e2:03:b6:9d:8a:64:41:64:8b:b6:a8:fe:59:31:cc:
         e8:bb:7c:87:ff:80:bb:e1:00:b1:3a:63:35:e6:b0:aa:46:05:
         6d:ff:12:7e:a5:b4:c1:b1:1d:69:c6:94:53:80:4e:d5:30:62:
         69:d6:7e:1e:95:76:f6:ca:3c:db:91:93:2e:ce:8f:29:84:4b:
         5c:46:63:e9:ea:e8:fa:f8:f2:64:99:b5:d8:02:bd:4c:83:e8:
         6e:82:21:55:a6:7d:7f:70:bb:29:d0:65:ea:8a:3f:96:8d:d2:
         40:90:b6:22:6d:c7:28:01:fe:27:f4:61:b6:51:7b:96:c4:d4:
         03:19:d2:83:42:ae:89:e6:b9:83:c9:0f:3d:f4:77:2f:b9:40:
         23:d8:04:71:da:95:2c:52:71:4e:4b:23:76:0b:3e:d5:51:e3:
         28:54:49:37:22:9f:6d:c7:d1:57:fa:b9:9d:36:0b:a3:c0:a7:
         85:dd:9a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:16:24 2025 by rpki-client