Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/67ba1f16-6e03-3334-a408-55819b6b4d7a.roa
File:                     67ba1f16-6e03-3334-a408-55819b6b4d7a.roa (raw, json)
Hash identifier:          ifkDFJodvaF6Si6RTT0Mfs48JtsVl8YcCKKFQcD1SAA=
Subject key identifier:   39:86:53:34:FF:8E:78:F3:6F:A2:9F:1B:46:92:E0:0F:48:C6:CA:58
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584B8A1DE0A700BE734FFA36B410
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/67ba1f16-6e03-3334-a408-55819b6b4d7a.roa
Signing time:             Thu 16 Oct 2025 09:49:27 +0000
ROA not before:           Thu 16 Oct 2025 09:49:27 +0000
ROA not after:            Wed 14 Jan 2026 10:49:27 +0000
asID:                     14555
IP address blocks:        162.210.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:1d:e0:a7:00:be:73:4f:fa:36:b4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Oct 16 09:49:27 2025 GMT
            Not After : Jan 14 10:49:27 2026 GMT
        Subject: CN=624292fb-dd34-47dd-972e-9d7a8aca1865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9d:9e:15:cd:84:c6:96:fd:3b:81:6a:7d:89:
                    b6:f2:b2:85:6b:79:45:bd:7c:36:0c:da:5e:23:da:
                    58:ca:6c:da:68:8e:4d:8c:2c:8a:1b:cb:12:6b:b0:
                    41:67:13:02:b8:e5:6d:6f:7c:28:71:2c:88:23:60:
                    8e:f2:d2:5b:91:fb:be:73:f2:52:f4:7c:78:7c:c9:
                    b2:47:c1:c0:78:31:9b:f7:67:89:51:31:18:8d:0b:
                    ed:82:1e:ee:42:80:4f:f6:12:40:08:c1:26:cf:86:
                    65:b2:fa:a3:7b:cd:5c:ae:06:43:d5:34:3a:7d:49:
                    db:bd:a3:63:ef:94:5e:98:43:0c:b6:3a:2b:f8:a4:
                    cb:4b:87:bf:af:b3:ca:5e:04:b4:3b:76:03:0a:02:
                    74:f1:0b:bc:aa:4a:bc:c2:c2:54:9a:8f:bf:61:34:
                    0c:80:93:ef:00:9e:57:9f:a5:f8:65:26:1d:36:2d:
                    82:da:f9:1d:d6:72:63:99:8c:ab:0a:b2:f3:66:50:
                    e2:a4:07:4f:fb:88:9d:cc:8b:24:4e:cb:5c:40:d0:
                    03:c0:ab:bc:f1:e8:f3:85:41:d1:fe:ff:f3:b9:7f:
                    ec:f1:31:4f:31:f9:ba:d6:23:ca:60:83:56:0d:2c:
                    0b:34:c6:59:cd:c3:a3:fe:c8:4f:cb:1f:ea:0b:62:
                    11:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:86:53:34:FF:8E:78:F3:6F:A2:9F:1B:46:92:E0:0F:48:C6:CA:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/67ba1f16-6e03-3334-a408-55819b6b4d7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:64:86:5e:56:93:31:7b:89:e7:02:85:63:a3:1a:53:80:d2:
         79:12:fa:60:db:81:72:d3:4a:b4:f7:c5:df:78:e6:c5:93:4e:
         b2:d0:cc:71:e3:87:bf:fb:a2:83:89:f3:6f:d1:51:15:47:f5:
         45:36:59:31:b7:11:c9:1b:fe:4a:e3:14:9c:90:80:1b:f1:b6:
         5f:10:eb:7e:51:a8:0a:e9:99:0a:62:fc:54:dd:55:18:b0:cb:
         84:05:d4:d7:ea:74:bf:27:51:b2:c6:15:87:e8:20:bf:b2:d4:
         c8:c1:58:e7:42:19:51:0c:aa:12:10:0c:1b:77:e0:8c:5b:ff:
         e7:bc:5c:9a:5a:f7:5f:5c:ae:f7:53:fe:8e:c3:73:a4:91:ae:
         24:01:dc:2b:33:6f:09:c6:ce:dd:11:d6:e8:74:b9:fd:38:fc:
         b5:f7:39:a9:72:40:8a:13:90:4b:17:de:87:e3:d0:7d:fe:bf:
         63:40:a6:4f:60:72:e0:31:c1:71:39:3e:6c:d4:ad:e5:7d:c7:
         fb:ee:7e:8c:75:f2:82:43:89:33:b5:07:d5:2b:2a:ab:56:1c:
         15:06:44:57:fe:ce:20:ea:a2:b6:bb:1a:51:42:fa:9f:5d:96:
         82:98:91:f0:69:fe:96:27:ec:a8:43:8f:8c:4a:2d:d8:63:43:
         50:59:13:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:55:57 2025 by rpki-client