Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/6c89c9ec-f060-3d23-b925-9910aa06f7bc.roa
File:                     6c89c9ec-f060-3d23-b925-9910aa06f7bc.roa (raw, json)
Hash identifier:          6CfdHa+A204wL42i7wDfpbqMwUyNS4SpAPatGYS+w5I=
Subject key identifier:   DD:0E:D0:3D:01:35:EF:CD:71:EB:57:F9:D5:AA:67:FB:E6:8D:78:33
Certificate issuer:       /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
Certificate serial:       010D0C9F4328584B76F2A20DC72BE969308FF69E
Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/6c89c9ec-f060-3d23-b925-9910aa06f7bc.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     26229
IP address blocks:        162.138.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:a2:0d:c7:2b:e9:69:30:8f:f6:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=adea3bbd-7a2e-47f0-9ee5-580f0f801f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:75:74:32:21:22:fe:1c:ef:42:83:8f:1c:9b:
                    4a:c9:72:a7:cf:95:99:a3:41:38:74:ac:00:1f:36:
                    18:53:97:1e:92:26:a9:2a:e8:74:df:b4:3a:de:a8:
                    d6:fb:a7:0e:0d:e9:85:f8:27:3f:f5:f7:92:71:d6:
                    be:dc:f8:72:5f:aa:1e:c1:fa:df:27:b3:32:e7:96:
                    c8:67:85:45:3d:eb:ca:3a:7f:f9:29:37:a5:72:b4:
                    f3:5e:6e:1f:8c:68:dc:37:97:d5:77:4f:57:f0:18:
                    8a:6f:8b:36:d9:c4:70:87:a6:07:68:82:d9:d7:bc:
                    02:8b:70:87:9a:e2:bf:e9:cb:20:92:3b:36:98:7d:
                    7a:97:2f:79:18:f4:f9:0b:61:5c:51:ba:1a:40:92:
                    8b:0a:06:09:59:15:74:e6:9f:69:10:01:44:3a:07:
                    e0:f1:11:ee:18:38:fc:56:fd:30:c7:cd:59:50:8f:
                    4b:68:12:a4:16:38:63:f6:c1:9b:0f:b9:8c:38:67:
                    eb:12:6d:e0:b6:71:72:e4:79:72:2b:d1:ca:1b:06:
                    48:af:ca:0f:90:c4:2c:a9:77:fe:96:85:5c:bc:e1:
                    16:22:b1:6a:f5:4f:dc:eb:1f:68:f9:98:bc:54:3e:
                    6a:03:6f:cb:d4:37:e5:54:ac:29:21:8e:f1:2d:6b:
                    4f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0E:D0:3D:01:35:EF:CD:71:EB:57:F9:D5:AA:67:FB:E6:8D:78:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/6c89c9ec-f060-3d23-b925-9910aa06f7bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl

            X509v3 Authority Key Identifier:
                keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.138.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:7b:c6:a2:e5:14:b1:9a:a5:03:ea:9e:4f:08:1a:bb:38:2a:
         3a:a6:75:8a:0a:c1:f3:a1:74:93:6b:f8:1c:29:0a:6f:91:95:
         8e:2a:99:8b:55:06:94:27:38:04:fb:34:d2:28:af:00:3a:6d:
         ec:b1:5b:ba:5f:ab:90:fe:73:a5:50:74:29:39:a7:50:9c:06:
         1b:f6:08:0c:75:a8:fa:4a:61:68:8e:3f:c0:3b:1e:95:b5:04:
         3a:df:0a:0e:2a:52:94:6e:4d:29:70:be:77:80:12:28:5b:20:
         76:ee:9a:b3:56:e2:8e:91:6b:b3:1f:01:c1:15:4d:e1:5c:8f:
         53:96:37:ce:5e:16:a2:c3:7a:03:90:5c:ee:2a:65:4e:4d:4c:
         79:ed:4d:89:63:31:27:94:2c:d1:44:cf:8b:f9:dd:aa:e9:8f:
         f3:31:ab:9a:d7:ee:24:d4:79:85:1f:78:73:81:8d:a4:3f:ed:
         b7:da:01:3e:16:77:93:76:b6:ae:fd:52:2c:ca:8c:29:59:4f:
         56:21:0c:2d:1f:a9:65:08:fd:77:b1:3d:da:02:d0:3b:34:cb:
         c6:31:ed:af:ed:8d:b7:c7:d5:6b:bf:a7:07:cb:aa:f5:2a:0f:
         f2:79:5b:ad:d5:fa:ab:71:dd:00:13:8f:6f:43:cf:30:85:02:
         f1:25:6e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:50:08 2025 by rpki-client