Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/ec04f0ec-7774-3955-8007-0a1552a9ec6d.roa
File:                     ec04f0ec-7774-3955-8007-0a1552a9ec6d.roa (raw, json)
Hash identifier:          BSYH5uJ6hq+O+LZthJNzPHaNLMGWf/kcNt/LoORXwec=
Subject key identifier:   9F:B1:5D:E6:2F:B2:88:C7:2E:A2:9D:0D:C3:49:C9:20:C7:FB:1E:DF
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584B8A267950E126A7FA6D045234
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/ec04f0ec-7774-3955-8007-0a1552a9ec6d.roa
Signing time:             Thu 16 Oct 2025 10:06:46 +0000
ROA not before:           Thu 16 Oct 2025 10:06:46 +0000
ROA not after:            Wed 14 Jan 2026 11:06:46 +0000
asID:                     14555
IP address blocks:        170.10.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:26:79:50:e1:26:a7:fa:6d:04:52:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Oct 16 10:06:46 2025 GMT
            Not After : Jan 14 11:06:46 2026 GMT
        Subject: CN=49951809-e91e-46e8-af26-041530dd0e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ac:59:f9:48:0e:27:51:11:b3:3a:e4:e9:68:
                    94:cb:36:61:40:39:62:49:f5:f0:44:6d:cf:20:8e:
                    e8:55:ab:47:b6:d1:ac:63:5e:fb:27:7e:dc:5f:ae:
                    ce:d8:0a:29:fd:bc:c7:d4:ee:65:d6:e9:9d:65:9b:
                    e5:a3:9b:4f:c8:f1:73:c7:e7:41:63:35:7e:95:0e:
                    9e:d6:c7:69:39:df:f0:dd:65:76:ad:1a:ef:d9:ec:
                    b6:fc:36:41:f2:56:d0:c3:11:a3:21:fa:af:df:cb:
                    43:56:7f:13:9b:e7:14:89:88:78:cd:97:41:cd:9b:
                    ed:8d:f7:76:c8:94:b7:4e:e8:7c:ad:8f:44:2e:ef:
                    16:52:a7:69:d9:56:6e:4a:2b:54:3d:73:a2:60:7f:
                    39:3a:82:f9:3d:b8:f0:6d:ce:b7:87:07:b9:48:41:
                    f4:c5:1c:88:1a:c7:17:ce:fb:a1:3b:2d:0d:50:52:
                    c5:a8:32:9b:68:e1:93:46:8a:9a:c5:fb:ef:b0:2c:
                    eb:c3:22:30:98:fd:be:82:d9:02:e2:07:2f:02:c0:
                    41:52:cc:e9:31:c5:56:e4:15:b5:43:24:cb:44:8b:
                    1c:ba:3e:6f:44:20:58:7b:12:ef:1d:1a:20:40:e2:
                    24:f5:81:32:e6:ee:b8:dc:61:11:78:15:bf:4d:92:
                    23:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B1:5D:E6:2F:B2:88:C7:2E:A2:9D:0D:C3:49:C9:20:C7:FB:1E:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/ec04f0ec-7774-3955-8007-0a1552a9ec6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:02:db:e6:5f:b8:44:3f:32:b3:22:53:2c:df:80:98:0c:e3:
         ae:76:8a:b6:1e:85:cb:23:8f:99:80:ca:62:54:c0:9e:30:2d:
         95:47:a5:ca:78:97:94:d5:2c:fd:80:49:35:a0:4f:c2:0e:78:
         17:c6:2b:cd:d4:8c:e1:5f:8e:6e:de:f3:f7:ab:3f:71:54:ad:
         39:47:d6:d6:9d:79:46:8a:a1:1b:4a:4d:7b:f5:9c:94:87:f4:
         d8:96:72:17:ee:66:02:ac:1b:da:f5:d8:f7:39:4b:cf:a0:1a:
         3f:6f:20:df:46:78:d9:4d:e5:87:c1:fe:05:2f:37:40:a8:e7:
         23:3f:dd:00:93:a3:69:b7:de:d4:3b:7f:1f:8f:37:a5:ac:96:
         a3:f8:ec:1d:57:60:0a:e7:6f:fe:fa:6d:11:78:7b:9c:26:89:
         e5:0b:a8:c5:38:27:eb:e4:05:12:cf:a9:92:03:57:c6:d8:b3:
         83:c8:69:01:eb:cf:ce:0d:88:2e:a7:a9:64:63:63:9a:f0:9c:
         59:f1:aa:b9:25:be:3a:dc:5d:ab:69:06:a1:7a:d0:c9:13:1c:
         0d:b7:28:ab:6a:2b:2c:f9:20:57:c8:da:16:53:3d:26:7e:99:
         35:17:44:fe:c3:0b:e5:4a:8d:e7:57:23:c4:37:32:5d:f2:59:
         95:ba:79:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:23:43 2025 by rpki-client