Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/41081f1b-d82b-37ee-bd2d-85ddb0792990.roa
File:                     41081f1b-d82b-37ee-bd2d-85ddb0792990.roa (raw, json)
Hash identifier:          8g3Gzuj/uni1IdXsPSVoSFlo00wy1OkrT8Zv8bA0ct8=
Subject key identifier:   AA:A0:D7:98:07:8F:9D:F6:A9:50:FD:D0:CF:62:62:C8:32:19:F3:61
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F4328584B970CD89382F502A6DA6C9DC0
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/41081f1b-d82b-37ee-bd2d-85ddb0792990.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     16904
IP address blocks:        162.221.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:d8:93:82:f5:02:a6:da:6c:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=693ed419-cae0-4236-a0eb-ef6195c3e5fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dd:85:c4:3d:b7:23:96:00:f2:12:32:4f:ed:
                    2a:4d:3f:0e:c6:81:16:e1:e5:4f:8b:d7:00:1c:26:
                    28:f6:22:6c:57:b1:1c:32:78:b7:af:af:77:3a:3d:
                    d3:ed:e3:3c:c0:00:91:d7:47:e5:91:3a:4f:77:21:
                    64:45:cd:62:43:e4:b7:18:98:ef:a8:a4:c3:94:c7:
                    9c:20:06:3f:c8:11:55:77:1d:c3:24:ec:f5:c6:e9:
                    a5:f1:0b:2c:15:07:b1:a2:66:89:05:6f:2f:70:ce:
                    80:37:7e:1b:82:73:49:20:f3:f6:fe:79:9c:cb:61:
                    75:a6:af:81:5e:cb:a4:31:c1:74:a8:be:44:91:9b:
                    73:29:77:64:6d:86:aa:4b:b7:95:45:26:a9:dd:6d:
                    ed:79:59:ec:1b:ed:89:41:04:33:b6:d4:cb:ee:38:
                    3c:a9:c5:ed:18:5a:cb:60:ec:b9:30:94:1e:fd:05:
                    a7:85:f0:9f:f6:84:23:5b:4d:60:54:30:c6:c1:ae:
                    6b:42:ff:ad:9e:e8:49:6d:12:90:20:75:fd:cd:c1:
                    00:ed:90:9d:d7:21:a2:8e:4c:d2:b5:b0:64:87:6a:
                    d8:5a:85:55:bf:2a:b8:d5:95:6e:ec:de:8e:23:03:
                    1c:bf:23:6b:e4:82:87:45:51:76:3c:5f:1e:99:7f:
                    b5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A0:D7:98:07:8F:9D:F6:A9:50:FD:D0:CF:62:62:C8:32:19:F3:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/41081f1b-d82b-37ee-bd2d-85ddb0792990.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:77:8b:b8:47:7f:12:2f:80:b0:43:a9:47:ef:23:42:62:4f:
         e1:ad:a9:35:77:e8:2e:9d:39:da:4c:30:9e:18:5f:15:b3:57:
         7a:72:25:95:63:af:6d:52:c6:cf:a9:3e:7b:23:b2:a1:c2:17:
         5f:22:3a:3e:e4:9b:3f:fe:8e:0b:3d:39:2a:14:51:24:95:5a:
         ac:fa:a0:c3:0a:6e:be:bf:c7:51:7f:d6:06:87:85:ee:4c:df:
         59:7a:4d:e6:d9:f4:05:2a:ab:6d:29:b7:f4:a5:29:21:32:92:
         69:64:be:b2:4c:dc:23:6a:bb:39:7b:d4:48:96:4f:78:02:e8:
         24:da:8e:48:3d:d4:19:be:77:22:a9:1d:0e:69:da:5b:b4:8a:
         87:21:b8:1e:50:b1:c8:cd:06:71:bf:91:a9:a4:19:28:0b:ee:
         c0:57:cb:21:67:e1:b9:3f:c0:9e:c0:24:f4:58:d3:b9:1c:95:
         22:26:ac:7b:24:b5:f7:90:8c:11:13:1e:22:8e:ef:df:4a:1b:
         47:28:35:fb:d5:e6:42:0b:88:f2:ad:6d:7b:bb:20:58:cc:13:
         5f:f0:ca:6a:a8:a8:8a:f0:f3:ff:96:84:6e:58:95:4e:22:cb:
         1a:b0:4f:a4:47:62:5a:16:e2:57:e9:40:d6:62:a1:89:f1:f6:
         71:f1:2c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:44:44 2025 by rpki-client