Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/81acedff-a99b-311a-84dc-11dd71f0b2d1.roa
File:                     81acedff-a99b-311a-84dc-11dd71f0b2d1.roa (raw, json)
Hash identifier:          LNOhkELRMwnRyF6gQLMmUXMQBOgMj67lfpYSfuVutMU=
Subject key identifier:   B1:1B:45:09:95:89:C8:EF:8D:85:08:B4:A1:C9:75:89:BD:5C:E6:8D
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584B8A1BF8D2AB5DD40239F30F00
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/81acedff-a99b-311a-84dc-11dd71f0b2d1.roa
Signing time:             Thu 16 Oct 2025 09:45:37 +0000
ROA not before:           Thu 16 Oct 2025 09:45:37 +0000
ROA not after:            Wed 14 Jan 2026 10:45:37 +0000
asID:                     14555
IP address blocks:        162.210.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:1b:f8:d2:ab:5d:d4:02:39:f3:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Oct 16 09:45:37 2025 GMT
            Not After : Jan 14 10:45:37 2026 GMT
        Subject: CN=e09a0cc5-a11d-4ec3-a859-17e14ccfe5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:83:75:cb:5c:ee:b9:db:cf:0b:9f:ee:13:8d:
                    aa:5c:1a:b8:84:7c:1f:93:27:c6:20:a6:8a:2b:2d:
                    7e:01:79:cb:69:45:72:b3:79:cc:b6:5f:a5:4f:27:
                    8c:b5:40:4d:b2:32:0c:eb:7d:88:5d:d8:71:34:7c:
                    1f:da:b5:58:83:88:c2:20:46:fb:1f:62:da:73:87:
                    27:76:2c:f2:08:78:4b:39:0a:5d:91:47:77:df:ea:
                    f0:43:69:d6:ff:04:88:f2:23:9a:c0:1e:db:70:2e:
                    6c:b2:7e:15:c1:01:b2:a7:49:67:09:57:ab:39:e0:
                    38:8e:2e:72:bd:d4:9f:5f:87:20:72:fb:66:25:ef:
                    9a:2c:38:5d:ad:45:c8:0c:60:9d:50:08:aa:86:8b:
                    12:6b:bf:d0:1e:e9:7a:0d:4c:e2:98:38:6c:5a:0d:
                    2a:87:f3:57:cb:f2:ce:30:be:4d:40:32:9d:ae:24:
                    64:6d:02:16:c9:ba:39:5f:de:90:59:5e:d3:cc:b0:
                    ab:49:d7:23:db:79:6c:65:eb:10:ef:8a:94:f5:75:
                    22:68:f2:36:78:5e:df:6e:fb:c8:e4:02:13:a8:00:
                    bd:2a:94:f8:cc:fb:61:82:d1:73:5c:7a:3f:df:2c:
                    68:77:5e:a4:75:5f:9b:c4:75:40:2f:c9:2d:2c:0b:
                    f2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1B:45:09:95:89:C8:EF:8D:85:08:B4:A1:C9:75:89:BD:5C:E6:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/81acedff-a99b-311a-84dc-11dd71f0b2d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:b8:cd:05:58:60:03:cf:f0:3f:a5:77:c9:0a:de:65:54:ed:
         18:cc:f6:53:07:b5:fb:69:31:db:fc:68:ed:2c:91:60:ca:6a:
         ad:ec:70:09:78:fb:e5:79:87:16:77:1c:e2:b0:6d:50:89:c5:
         4e:4c:d4:f7:4f:0c:bb:6d:08:48:85:16:78:ac:ab:be:ee:09:
         c4:b5:de:df:a3:91:b1:4d:34:0a:28:33:eb:37:3e:a5:33:f0:
         66:d7:59:6a:43:c1:c2:79:12:bc:ed:8e:b2:d4:a6:1f:84:24:
         26:19:d3:52:6c:9d:cf:d1:4c:83:29:4f:1e:1b:5c:97:c6:de:
         64:73:9b:d2:45:ad:e2:7d:e8:93:6c:8e:8c:72:48:ee:82:32:
         63:3d:7d:a5:b6:d0:ec:66:57:70:3b:7c:1f:3e:92:4e:d4:9d:
         9e:ac:58:6a:06:f6:8b:dd:58:5b:fe:e9:fa:8d:13:56:d9:13:
         e0:c6:e5:31:c7:e4:c5:69:1d:0e:4c:3b:f8:b3:21:65:ff:92:
         37:59:ab:50:d8:3c:56:41:41:d7:01:a3:e7:d7:86:11:5b:4e:
         46:38:19:fa:0c:c9:46:1c:fc:fb:c4:de:f0:5a:8f:39:ec:a3:
         e9:a5:4b:ff:8f:06:91:0d:34:58:fd:61:1d:2f:b6:4a:cc:92:
         94:57:a4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:23:51 2025 by rpki-client