Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/823652a8-3986-3edc-b010-29419cbf2da7.roa
File:                     823652a8-3986-3edc-b010-29419cbf2da7.roa (raw, json)
Hash identifier:          ZAi5K25jURTbNvGoGp62jSz9t9QKQk3uiNfgekL0nLg=
Subject key identifier:   50:AB:9E:61:94:90:AF:74:6E:69:17:FE:12:F8:9B:67:B3:EA:4E:E6
Certificate issuer:       /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
Certificate serial:       010D0C9F4328584AD3AAA7295E14321707629980
Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/823652a8-3986-3edc-b010-29419cbf2da7.roa
Signing time:             Tue 12 Aug 2025 01:20:10 +0000
ROA not before:           Tue 12 Aug 2025 01:20:10 +0000
ROA not after:            Mon 10 Nov 2025 02:20:10 +0000
asID:                     26229
IP address blocks:        162.138.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:aa:a7:29:5e:14:32:17:07:62:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
        Validity
            Not Before: Aug 12 01:20:10 2025 GMT
            Not After : Nov 10 02:20:10 2025 GMT
        Subject: CN=670e7c45-73fb-4042-9ab5-a5c6ebd98723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:d3:aa:46:14:41:d6:05:e9:a3:a5:af:0c:db:
                    46:2c:3d:a1:91:8a:cd:aa:d7:6e:5a:9d:df:f8:b9:
                    05:da:1f:a1:90:28:c2:34:90:0a:3b:07:c3:13:dc:
                    f4:8b:80:bc:dc:a0:d7:4e:41:05:e8:a3:9f:f4:db:
                    ff:6b:32:f6:f5:9d:b2:22:4f:1a:a1:0b:f9:11:91:
                    e8:fd:9a:70:2f:87:55:e2:f0:85:33:ac:dc:7a:b0:
                    8c:fa:85:ca:b9:02:e0:94:48:80:de:c4:a0:ef:1e:
                    7d:e2:e0:30:5a:54:81:f2:e5:cc:b9:51:f6:6c:2d:
                    a7:c4:ab:fc:eb:31:da:9a:bd:36:f4:62:33:d1:a1:
                    67:bd:89:50:03:8f:78:e8:ce:02:6d:a5:5e:8d:3e:
                    69:05:ac:60:31:fa:d8:9c:6a:90:93:4f:fc:b5:02:
                    87:ac:06:c6:40:f7:af:f1:29:0a:a2:19:b5:2f:30:
                    cd:02:5a:e8:9e:75:3d:60:62:6d:d8:83:9c:19:73:
                    1c:5e:30:7c:64:e0:7c:a2:26:c7:52:1e:a2:b3:84:
                    94:f1:c0:81:7f:86:6c:19:42:6c:ca:7d:f1:05:e4:
                    86:70:5a:d8:c5:60:28:0a:62:6e:4c:37:6f:8c:99:
                    46:96:21:e0:1b:70:18:8f:c5:6c:a3:e4:87:26:52:
                    31:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AB:9E:61:94:90:AF:74:6E:69:17:FE:12:F8:9B:67:B3:EA:4E:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/823652a8-3986-3edc-b010-29419cbf2da7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl

            X509v3 Authority Key Identifier:
                keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.138.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ef:df:a4:2a:08:0d:c3:b4:66:5d:5e:a1:e2:6e:00:e8:82:
         02:7a:97:06:06:a9:01:e7:e0:fe:b9:47:51:e5:20:cd:dd:4c:
         58:e1:32:f2:7f:64:d1:85:ce:39:c8:d4:da:17:12:2e:b7:fe:
         1e:b4:a3:25:a2:9d:83:ce:15:51:28:eb:39:20:00:89:c4:bd:
         83:fd:a0:61:91:b2:76:6c:30:fe:6c:1f:68:a8:0d:4a:58:7e:
         dc:14:a6:6e:c9:d0:d3:68:c3:83:26:e3:3e:4f:18:91:1f:84:
         d1:e8:d7:32:eb:4f:2e:4f:70:95:05:47:a7:88:6c:50:b8:39:
         a4:17:bd:bb:88:05:a9:cb:3c:a7:28:44:d5:b0:fa:1e:04:28:
         11:a5:4a:37:f5:53:b9:63:a5:45:80:c0:20:5a:e5:b6:04:20:
         29:e3:3f:dc:ad:43:4f:6a:02:d6:fc:fb:9a:99:da:2c:de:35:
         b3:89:29:2b:5a:fd:58:16:c6:a8:01:d5:3e:e6:80:bd:1c:60:
         23:81:eb:90:37:29:23:a6:f7:c5:85:bb:16:98:f8:9d:16:fe:
         dc:f5:19:dc:1e:54:5b:f3:eb:c8:1b:85:62:b5:18:d7:ba:5a:
         16:40:27:0c:ef:be:a5:55:8e:1e:33:20:68:0c:d2:6a:ee:3a:
         f6:bf:cd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:17:06 2025 by rpki-client