Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/bde1f10e-8cb8-3586-b173-8d0b76c7a2f8.roa
File:                     bde1f10e-8cb8-3586-b173-8d0b76c7a2f8.roa (raw, json)
Hash identifier:          LXSE7qTm7XwCeu3qH4QGCsItcNIP1B0yFopL11PU8cE=
Subject key identifier:   13:64:26:55:1C:75:49:B9:FF:CD:6C:1C:C0:89:23:3A:FB:BF:CF:74
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F4328584B7F5212FE22369197D839CB40
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/bde1f10e-8cb8-3586-b173-8d0b76c7a2f8.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     397041
IP address blocks:        161.199.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:12:fe:22:36:91:97:d8:39:cb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=711c903b-9ef5-479f-b0d7-76b693bfa98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e5:c5:3e:91:71:70:01:a6:b0:ff:a2:36:72:
                    64:ea:0c:45:3e:ae:20:75:1a:99:70:62:ab:ec:d5:
                    55:2a:1b:9a:90:ca:71:ea:a8:a1:0f:20:aa:84:04:
                    12:c7:fe:98:14:de:e9:cb:71:37:0d:a5:44:b1:1e:
                    77:ce:d0:fb:4c:41:e2:94:cd:e7:bd:ce:cb:5b:13:
                    5c:f8:0d:1a:35:46:d2:a7:94:16:29:dd:c6:ff:9a:
                    9c:eb:0f:3c:d2:11:db:19:5e:d6:f8:21:74:6b:0d:
                    bb:84:7b:ea:6b:15:39:2f:c7:e3:34:23:5a:fb:7b:
                    02:c5:28:e4:6e:a6:dd:42:84:3c:cf:5d:c6:71:2d:
                    1e:03:19:7e:5b:e5:08:62:1e:09:90:56:85:3b:39:
                    35:b4:23:f8:9a:1d:f3:73:cf:c9:48:ec:e7:ee:0a:
                    98:66:41:e5:20:91:d5:41:a0:e7:3d:c2:9e:b5:df:
                    40:9b:c7:95:41:b6:25:ad:6f:1e:b1:93:61:b5:fc:
                    0f:58:1c:7c:75:3e:70:79:05:ea:9a:3f:87:5f:6f:
                    3d:19:00:48:97:f2:92:43:c6:23:8b:df:4d:17:f1:
                    57:e2:9a:c3:7a:84:ac:2a:09:31:60:be:9e:de:3e:
                    9c:8d:77:ce:6e:3f:2c:8e:e9:72:92:d9:04:b1:e2:
                    ae:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:64:26:55:1C:75:49:B9:FF:CD:6C:1C:C0:89:23:3A:FB:BF:CF:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/bde1f10e-8cb8-3586-b173-8d0b76c7a2f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.199.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:48:4c:69:74:11:30:e3:7a:ab:74:72:0e:c2:4b:b1:98:2e:
         5d:29:b9:fd:79:ba:41:0d:9e:8b:4f:77:bf:cc:eb:cf:9f:4e:
         23:f2:70:91:2d:4f:db:78:85:29:06:60:fe:ad:5e:f8:70:35:
         fd:ab:31:38:04:c3:b2:e1:92:c7:89:f6:0f:5c:2e:b4:d2:6d:
         2a:41:9c:95:63:65:09:d2:d0:d1:9d:85:b6:24:85:42:dc:9a:
         cf:4b:3e:90:90:67:2a:bd:6a:15:11:3d:a6:dc:fa:87:5e:81:
         05:dd:4a:76:93:92:62:59:f2:4d:8b:11:23:7e:0e:e3:af:3d:
         c6:f6:65:67:c8:24:7c:db:21:37:e0:a3:6f:9b:d8:f9:d5:52:
         35:ab:67:63:f7:7c:47:c9:ff:d4:92:88:5d:f0:21:a6:76:1f:
         cd:13:52:2b:b4:93:d1:31:29:61:4b:59:8d:0d:91:9b:04:dc:
         7c:d2:2e:b8:60:67:ff:56:d1:c5:c7:ad:d0:f3:7e:cb:9c:49:
         f9:b9:12:92:d2:6b:5e:c3:50:6d:ff:51:0a:b4:dc:87:97:0f:
         79:c9:5f:09:f5:ac:f8:8f:6f:19:e9:23:38:cf:7b:38:5d:33:
         9b:74:00:04:58:44:de:af:0b:16:bc:a8:74:24:31:14:d6:25:
         ad:a4:71:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:53:45 2025 by rpki-client