Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/076d9570-0456-3dcc-9405-ad3bffb76943.roa
File:                     076d9570-0456-3dcc-9405-ad3bffb76943.roa (raw, json)
Hash identifier:          FVLeEO/HFwlMPseHZvDWjqp3znVINEEjbqRwRA9gLJI=
Subject key identifier:   A6:B5:DE:E2:8D:1E:F5:36:57:A9:0E:62:17:30:79:38:CB:67:D4:95
Certificate issuer:       /CN=b5de9249-f707-4392-b43f-d406dfb20aee
Certificate serial:       010D0C9F4328584B47FA9DEBDEB52290F1180F75
Authority key identifier: 05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/076d9570-0456-3dcc-9405-ad3bffb76943.roa
Signing time:             Mon 22 Sep 2025 17:15:03 +0000
ROA not before:           Mon 22 Sep 2025 17:15:03 +0000
ROA not after:            Sun 21 Dec 2025 18:15:03 +0000
asID:                     16504
IP address blocks:        157.96.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:fa:9d:eb:de:b5:22:90:f1:18:0f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5de9249-f707-4392-b43f-d406dfb20aee
        Validity
            Not Before: Sep 22 17:15:03 2025 GMT
            Not After : Dec 21 18:15:03 2025 GMT
        Subject: CN=a612df88-5c32-46e4-a9fe-6364e6522691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e0:44:ef:5d:ed:42:34:ed:cb:64:4b:33:46:
                    6e:f7:41:7e:4c:5d:ed:01:53:ea:59:e9:6e:ae:0e:
                    22:1e:e1:1d:09:0a:bb:bd:58:71:a9:00:a0:68:af:
                    1c:00:e2:14:d5:58:a9:bf:a7:b9:40:2a:d9:4f:35:
                    a2:ad:f3:87:6b:e7:38:a1:cf:32:ea:9b:d0:d2:6b:
                    e1:fc:5c:d8:2e:57:2b:28:05:8d:d2:98:08:70:0f:
                    b4:c7:ba:08:5f:58:4b:5a:6a:ea:8f:da:d1:4c:bf:
                    7e:3f:7e:5c:d9:17:1a:a7:61:67:92:1c:33:90:7a:
                    25:f1:00:2f:dc:8e:fd:d6:33:cc:f0:7f:92:be:7f:
                    33:9c:79:7e:29:77:61:5f:4a:64:68:46:8f:8b:ba:
                    51:e2:ce:15:77:85:83:be:29:50:ab:75:80:80:1e:
                    8a:29:11:6d:2c:5d:1c:70:d0:f1:fb:f5:e2:9a:f5:
                    cf:d8:0a:c4:e6:9c:05:1e:c0:22:f0:9c:39:f7:82:
                    9c:9c:85:10:e0:97:17:03:3e:16:4a:bc:47:07:b8:
                    b1:12:d2:80:c4:a6:82:9b:1d:94:58:0d:90:3d:84:
                    83:65:91:25:bd:de:7d:31:fe:89:05:c2:69:52:d1:
                    92:14:a1:0f:56:85:a5:ea:34:61:67:12:09:e9:91:
                    e0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B5:DE:E2:8D:1E:F5:36:57:A9:0E:62:17:30:79:38:CB:67:D4:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/076d9570-0456-3dcc-9405-ad3bffb76943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee/b5de9249-f707-4392-b43f-d406dfb20aee.crl

            X509v3 Authority Key Identifier:
                keyid:05:0C:20:4D:9D:46:81:D1:F9:1C:0A:D8:09:4B:AF:50:A9:B6:E7:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b5de9249-f707-4392-b43f-d406dfb20aee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.96.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:24:d1:f7:31:d7:3e:8b:1e:db:24:5b:5d:53:50:ae:00:be:
         8b:a9:67:58:20:93:17:ee:93:ca:3e:b4:aa:f6:10:24:ff:f2:
         20:42:05:a9:60:74:70:05:11:2a:f3:66:2c:8a:f9:1d:e5:30:
         e1:25:11:3e:46:e3:d8:71:5d:3a:95:cb:04:0c:4f:e9:40:59:
         bc:6e:52:f2:20:1a:f5:85:8e:83:9c:0e:49:05:d5:5c:3d:86:
         4a:fd:59:48:a2:74:15:f0:92:d4:57:87:2b:41:15:9a:b8:b3:
         6e:f5:e2:b8:1c:f9:4b:b5:b7:05:98:86:33:e3:63:a5:68:12:
         04:c1:66:8b:25:a3:a8:11:e2:ee:5f:26:20:ca:88:85:ad:ff:
         2c:4b:9e:32:6f:d3:0f:7d:a1:19:47:f3:16:8c:2f:0d:94:6a:
         8e:f6:00:67:a6:91:76:c4:f0:3f:96:e4:ee:7b:e9:5a:6b:89:
         5b:8c:4d:90:63:f0:aa:c9:2e:0c:74:4c:32:94:a7:5d:d2:c8:
         1b:d7:53:2e:74:dc:86:81:42:58:70:d3:68:15:86:25:e6:5f:
         97:59:88:90:06:ce:78:5a:1a:e9:fe:2a:1b:c4:6e:f9:cb:28:
         dc:4c:51:24:30:aa:26:9a:d7:1d:8d:c2:85:00:c2:13:fd:04:
         73:a7:c4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:49:15 2025 by rpki-client