Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/aad49aad-215f-3ba3-aae8-ef01bd379726.roa
File:                     aad49aad-215f-3ba3-aae8-ef01bd379726.roa (raw, json)
Hash identifier:          qxu6mA3hjHzsMQDvzbr6UzhKJ1mDoq+Z52m9GVgCXCo=
Subject key identifier:   26:E8:39:11:24:4D:52:39:9E:55:3D:41:BC:47:49:11:2D:E7:0D:35
Certificate issuer:       /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
Certificate serial:       010D0C9F4328584AD3AB82BB449898CC55859180
Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/aad49aad-215f-3ba3-aae8-ef01bd379726.roa
Signing time:             Tue 12 Aug 2025 01:21:54 +0000
ROA not before:           Tue 12 Aug 2025 01:21:54 +0000
ROA not after:            Mon 10 Nov 2025 02:21:54 +0000
asID:                     26229
IP address blocks:        162.138.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:ab:82:bb:44:98:98:cc:55:85:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
        Validity
            Not Before: Aug 12 01:21:54 2025 GMT
            Not After : Nov 10 02:21:54 2025 GMT
        Subject: CN=df742f3a-c2d1-4071-8201-971ba9777427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ba:ea:f1:f1:1d:ca:bb:fd:96:56:16:88:79:
                    41:66:e9:6f:ac:3f:77:03:51:f2:58:44:26:3b:07:
                    62:f2:13:6a:05:63:7f:fe:fc:cb:1e:19:77:6e:46:
                    54:a9:4f:d7:ce:1d:aa:05:80:23:0f:f1:60:95:7f:
                    13:0f:0a:f1:36:26:42:42:d6:8f:a7:3f:c8:d7:ef:
                    33:66:9a:6d:db:22:49:4f:2c:40:e4:d6:6b:42:0e:
                    96:a1:5c:79:d7:e3:1f:86:45:1b:b3:34:24:54:12:
                    23:2b:1a:19:bc:9a:72:b4:a9:1e:52:d9:2e:79:0a:
                    76:83:a4:53:cf:7a:a2:89:a8:95:73:94:f7:9b:43:
                    39:fa:e3:a9:fa:16:3e:fe:e7:5f:be:2c:ed:d1:70:
                    d5:5a:a9:91:a4:0b:0b:24:6d:06:4c:81:2b:1b:89:
                    12:14:30:8c:21:aa:60:cc:91:c8:13:75:2d:29:f1:
                    5a:c3:aa:eb:0f:9e:24:51:33:75:ea:3a:55:81:2e:
                    aa:c6:9e:9d:7f:2d:06:49:e8:ce:e5:50:9a:23:54:
                    81:0f:be:00:bd:56:9e:95:74:be:e2:b4:6b:4c:54:
                    88:04:e3:7a:f0:ea:1b:dd:0c:b3:a4:4c:ec:d0:4e:
                    86:c4:c8:be:02:07:dd:03:6e:3a:d7:0e:e8:e3:4a:
                    69:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:E8:39:11:24:4D:52:39:9E:55:3D:41:BC:47:49:11:2D:E7:0D:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/aad49aad-215f-3ba3-aae8-ef01bd379726.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl

            X509v3 Authority Key Identifier:
                keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.138.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:93:15:9d:9d:20:27:d3:2c:e3:5e:3e:a5:07:16:ef:9c:79:
         8b:15:60:b2:de:b4:1b:af:6c:16:28:5b:9a:00:76:fc:44:65:
         db:8f:18:22:65:15:ff:4d:23:54:a4:e2:d6:36:50:75:91:fd:
         18:c9:f0:3a:86:ad:af:db:1d:89:87:c8:c5:54:ed:f6:0c:7f:
         88:99:5a:bb:0f:91:b9:4c:29:46:2f:ef:bb:7b:f9:6a:65:7e:
         a0:e3:cf:42:c2:30:7b:26:ee:0f:75:d1:c3:1e:e8:81:9b:42:
         45:94:65:fa:42:ed:ba:69:b7:f8:bc:0a:52:f1:95:4f:b9:92:
         16:e4:66:d6:ef:d8:ce:ff:de:71:d5:dc:c0:2b:7a:37:45:ea:
         eb:b4:1e:6e:42:74:bb:de:ee:ab:a7:05:4c:a0:66:25:de:17:
         a5:3f:16:c6:a8:e7:c1:a6:0b:9f:25:7e:17:3e:0e:41:7f:32:
         cf:6e:00:f8:ee:13:2f:cc:9d:e2:b0:68:c4:bf:5b:f3:a4:fa:
         66:6f:27:52:f8:a6:aa:8a:d8:68:ad:66:62:c1:1b:aa:80:04:
         62:43:7a:38:b5:c2:1c:bd:dc:04:6f:24:23:8b:60:7f:ad:d3:
         91:34:66:9d:92:9d:55:16:22:d2:0f:b4:ce:06:8e:3c:0e:e2:
         86:95:76:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:17:33 2025 by rpki-client