Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/b7b67776-91c8-361b-921f-0e37fa0c1b1b.roa
File:                     b7b67776-91c8-361b-921f-0e37fa0c1b1b.roa (raw, json)
Hash identifier:          uTPzupLpzGFH/ORgxZDbxpim/3pwJcJMlT7uwDLOZ5c=
Subject key identifier:   B7:4F:CD:0B:9D:AC:B7:92:27:42:EE:61:04:33:2E:EC:AE:21:BF:CC
Certificate issuer:       /CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
Certificate serial:       010D0C9F4328584AF7EBD7E1EB10BE8B787F1700
Authority key identifier: 3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/b7b67776-91c8-361b-921f-0e37fa0c1b1b.roa
Signing time:             Mon 25 Aug 2025 01:00:33 +0000
ROA not before:           Mon 25 Aug 2025 01:00:33 +0000
ROA not after:            Sun 23 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        162.212.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f7:eb:d7:e1:eb:10:be:8b:78:7f:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
        Validity
            Not Before: Aug 25 01:00:33 2025 GMT
            Not After : Nov 23 02:00:33 2025 GMT
        Subject: CN=8d3bcf5c-d154-4300-8214-64941a22309f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a4:19:c1:06:76:42:25:90:79:bb:01:a8:dd:
                    f9:d6:b8:9a:42:a2:7f:8e:ff:fe:01:01:94:8e:61:
                    64:62:08:e6:06:ab:05:7b:a5:45:cb:1a:c8:5c:a9:
                    b4:e0:c3:f9:fc:d0:be:3b:23:9c:3c:14:5e:73:43:
                    18:fa:bc:58:95:7c:ba:17:99:a9:92:9f:e3:2d:25:
                    08:22:f6:71:79:90:d8:f5:4b:0d:2c:f7:04:06:59:
                    11:ff:40:86:17:49:a9:28:17:d5:7d:36:6a:9d:77:
                    77:10:9e:bf:33:20:2b:48:bf:8a:b2:79:a2:c1:66:
                    64:04:76:c0:1d:6f:28:c2:8d:d2:cb:30:45:62:33:
                    8f:d2:f3:3b:6b:e5:ab:31:b6:1f:e7:59:c4:b5:28:
                    51:9a:24:09:ce:d2:f5:a1:ee:1d:e3:09:45:8b:8a:
                    12:be:c2:05:be:54:55:bc:8f:f9:c7:1c:5a:59:d7:
                    5a:21:8a:f2:4a:c6:2e:19:42:1d:2c:d4:be:da:9f:
                    b8:c9:d0:62:3b:0d:7a:fd:36:a4:be:b6:d4:6f:96:
                    96:ee:44:40:25:0b:cb:7c:8f:7d:df:b5:57:f9:49:
                    da:57:43:23:a1:5b:d9:3d:52:ef:fc:c7:50:03:8d:
                    90:df:89:c9:ba:ea:72:37:f1:bc:68:af:2d:14:79:
                    3e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:4F:CD:0B:9D:AC:B7:92:27:42:EE:61:04:33:2E:EC:AE:21:BF:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/b7b67776-91c8-361b-921f-0e37fa0c1b1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:c0:46:53:bb:17:04:02:62:b4:03:8d:e4:ff:80:76:83:0a:
         54:93:a7:ff:b1:47:3d:1d:cf:1e:d7:f6:48:87:9d:85:04:f9:
         50:37:64:56:37:7f:10:f7:08:c3:41:a0:51:c1:fa:1a:db:14:
         5a:b7:57:cb:6f:0b:38:e3:51:04:48:9a:15:7a:af:dd:51:93:
         f4:a9:9a:86:f8:28:15:d2:67:35:d9:16:8c:97:2c:e5:b2:69:
         8a:4f:45:dd:57:08:bf:e0:d0:fc:0d:5c:26:6e:7e:b7:aa:8a:
         dd:03:0d:8a:a1:61:e0:bd:be:f1:89:dd:ea:22:3d:03:35:0b:
         e5:85:31:e3:ee:62:6f:3a:15:ea:7d:59:51:d3:a0:a5:42:6e:
         82:23:a7:21:4d:9d:cc:2f:f0:c2:67:6d:1e:3d:85:30:6f:8f:
         90:48:0e:41:87:c9:30:5f:8b:de:cf:ec:51:96:7f:66:11:db:
         c6:c2:cc:24:d5:55:cd:8e:7b:41:a3:44:03:01:df:73:61:e0:
         cd:f3:d0:31:5f:a9:ec:26:15:77:79:d5:bf:a6:8c:a6:bd:7f:
         83:14:e1:33:fc:eb:9c:f8:59:ff:31:a5:d8:0c:15:5f:18:d2:
         81:32:eb:84:89:c9:ec:20:7d:8c:37:6d:ec:1f:95:d5:20:84:
         7a:2f:2e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:24:07 2025 by rpki-client