Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/a87c3fa8-23b2-3379-81df-57cc9673cb16.roa
File:                     a87c3fa8-23b2-3379-81df-57cc9673cb16.roa (raw, json)
Hash identifier:          Rc9S/ozaaO9NOVCTO5WG2UAdVsBs/sCAlHi2t1rs7Ng=
Subject key identifier:   5E:0D:CB:51:F5:A8:6C:78:20:C7:A6:58:EC:2C:71:B3:6F:4C:BB:00
Certificate issuer:       /CN=e04d8190-ec33-4551-9197-d06746d399d0
Certificate serial:       010D0C9F4328584B864CB6AD4272A07FACD43440
Authority key identifier: 02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/a87c3fa8-23b2-3379-81df-57cc9673cb16.roa
Signing time:             Wed 15 Oct 2025 01:00:30 +0000
ROA not before:           Wed 15 Oct 2025 01:00:30 +0000
ROA not after:            Tue 13 Jan 2026 02:00:30 +0000
asID:                     36352
IP address blocks:        107.167.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:86:4c:b6:ad:42:72:a0:7f:ac:d4:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e04d8190-ec33-4551-9197-d06746d399d0
        Validity
            Not Before: Oct 15 01:00:30 2025 GMT
            Not After : Jan 13 02:00:30 2026 GMT
        Subject: CN=3ae8ce4f-4f1b-4552-962e-84628b8a2c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:14:d8:00:c7:62:7d:3b:bb:3f:3b:65:cd:02:
                    55:71:5d:0c:84:2f:7d:d9:f0:44:b4:60:b1:e0:48:
                    06:05:1b:58:fd:10:22:e9:44:80:15:2f:c4:72:6f:
                    2c:68:94:2c:46:ea:d3:00:4c:5b:03:d8:a3:59:51:
                    7d:67:02:cd:28:33:cd:56:f5:7b:43:26:50:da:94:
                    c8:48:94:4d:09:64:a5:a8:e9:6a:63:1e:5d:47:b4:
                    2f:da:09:4c:1f:bf:87:d6:c2:3f:77:2d:d7:40:33:
                    c8:0a:dc:ec:6e:b8:ec:c1:88:98:67:f8:47:a0:65:
                    71:85:3e:80:ad:4c:9f:bb:76:44:3f:4c:3a:0d:4b:
                    d6:9a:ee:d8:eb:59:91:90:55:81:b2:e1:a9:d5:b8:
                    e2:89:ee:70:8c:0e:48:3d:6a:14:43:5a:e6:e3:e7:
                    e1:c4:7e:a4:bf:08:74:4a:01:0d:8d:90:9c:2c:1a:
                    00:ac:6a:62:18:6f:5a:4d:f4:2b:b1:80:f1:31:6c:
                    82:5f:1a:02:f4:f5:e8:14:44:a4:af:cd:76:e3:36:
                    5b:c8:81:29:b1:03:9d:31:ef:af:49:a9:c5:94:03:
                    61:60:cd:8a:2b:93:d9:89:38:38:2b:19:45:d3:b2:
                    24:b4:12:5f:06:87:6a:7e:18:c3:1b:9a:9b:32:c0:
                    7d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0D:CB:51:F5:A8:6C:78:20:C7:A6:58:EC:2C:71:B3:6F:4C:BB:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/a87c3fa8-23b2-3379-81df-57cc9673cb16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl

            X509v3 Authority Key Identifier:
                keyid:02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.167.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:9e:db:92:8c:61:6c:74:c6:7c:86:66:0c:40:92:18:84:ba:
         bf:af:b1:ca:df:41:e5:a6:e1:ba:d7:ee:12:e9:07:80:75:a6:
         a9:eb:4d:56:a4:76:5a:35:f8:de:42:72:f1:43:58:b9:a2:64:
         5d:02:a0:ed:63:26:3d:b7:50:ad:51:27:d6:5d:bb:56:54:b2:
         e2:19:46:2a:35:dc:32:6b:2f:03:6e:31:fc:91:ff:23:f4:aa:
         19:4a:16:7e:4b:20:0a:6c:9c:52:0c:be:95:bc:ad:2d:5b:5d:
         d8:86:80:22:53:14:17:b7:2f:00:29:bf:6b:16:d3:82:02:ac:
         70:a5:0a:a4:e2:5f:9a:68:8d:81:da:5b:50:0b:cc:2c:57:b9:
         01:c8:82:0a:5a:1d:ec:09:35:a7:74:8d:e6:ab:d0:0d:0a:41:
         2c:1f:3d:47:a7:4b:87:af:5e:5f:af:65:56:50:16:5f:6a:7e:
         1a:5e:07:14:0f:ff:04:c9:60:9d:b8:d4:30:b6:c2:15:5b:e5:
         39:1d:c6:d7:34:bf:95:53:d3:da:f5:1d:6d:da:d5:df:b4:cc:
         5f:e5:70:9d:4b:33:b3:8d:e7:bf:82:6c:37:99:fe:67:89:d1:
         19:9e:db:3c:3e:29:d5:90:2c:73:4f:f1:78:d3:f1:fa:a9:b4:
         d7:d5:5d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:54:38 2025 by rpki-client