Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/b71a5c47-9712-3ccd-a2b9-b3c5ec50ac15.roa
File:                     b71a5c47-9712-3ccd-a2b9-b3c5ec50ac15.roa (raw, json)
Hash identifier:          sd3tzX1C4WqnrAGnQ4Em1/uVVOyQtandvYY7ZughN08=
Subject key identifier:   27:8E:86:ED:BA:AB:0F:C4:93:5D:D1:05:02:2B:20:63:57:D0:C4:3B
Certificate issuer:       /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
Certificate serial:       010D0C9F4328584B76F2A124B83B5E13DBC54D80
Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/b71a5c47-9712-3ccd-a2b9-b3c5ec50ac15.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     26229
IP address blocks:        162.138.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:a1:24:b8:3b:5e:13:db:c5:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=e263f910-7bd4-4b81-af45-f4b9398bc111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3c:02:06:fa:e5:92:d0:2a:26:48:cd:b8:dc:
                    07:30:0d:90:73:5e:6e:51:eb:35:5b:8d:8c:85:b7:
                    7d:d4:6f:31:0c:8b:70:2e:b2:ea:2e:cb:39:d9:bd:
                    5c:52:3f:d7:85:c1:d1:cf:7d:5a:30:ed:6a:0d:9b:
                    10:0d:67:60:00:13:a5:b1:e5:ae:7e:d7:b5:30:cd:
                    29:58:dd:ad:fe:b9:e1:9d:aa:b5:92:c2:58:15:6e:
                    4d:65:48:ea:f8:76:0c:6a:63:ab:7d:b5:3d:99:a2:
                    56:f2:c9:6b:ab:53:53:11:f2:ce:9f:9e:c8:da:64:
                    6d:84:2f:ab:75:db:8a:35:1f:08:9a:bf:6d:f2:ed:
                    da:30:3b:70:77:91:df:f1:50:70:ea:73:3f:b2:04:
                    51:f1:a2:26:ef:1d:90:ca:82:fa:f4:e0:c9:a2:89:
                    26:45:c1:20:88:b1:cb:aa:41:72:13:a0:9b:29:43:
                    e4:11:af:69:de:6d:7f:79:cf:37:4b:98:69:77:2b:
                    b4:ee:f5:ed:05:d6:13:ad:d2:65:cf:f7:8e:a9:94:
                    90:4f:b6:50:c8:ae:dc:84:68:67:14:15:25:cc:a8:
                    1a:dc:ac:7d:c4:2e:b2:8e:02:74:97:9d:25:77:10:
                    68:64:c6:58:2e:2f:1e:93:20:8c:2a:6a:7d:a5:4b:
                    4f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:8E:86:ED:BA:AB:0F:C4:93:5D:D1:05:02:2B:20:63:57:D0:C4:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/b71a5c47-9712-3ccd-a2b9-b3c5ec50ac15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl

            X509v3 Authority Key Identifier:
                keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.138.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:53:81:1a:da:bc:3e:8d:4e:0b:d9:24:d0:b9:2d:10:c4:91:
         5c:d0:3e:8e:f2:cd:a7:a6:69:63:85:14:da:f6:84:de:e3:92:
         d5:e2:eb:f7:38:30:81:9b:82:52:45:b9:64:48:9e:64:a6:98:
         f8:9b:ac:d9:87:1b:98:f8:23:26:84:27:0c:07:06:59:5a:ae:
         8c:b5:a6:bb:7b:a8:1b:e2:bb:ce:3b:40:ed:af:b1:ab:a5:55:
         f5:ee:23:7c:cd:6c:ee:86:78:cb:97:3f:6b:af:9e:55:75:e3:
         00:f3:bf:d3:47:8a:44:1d:a9:a0:b2:ac:38:66:ed:62:52:f7:
         4d:6c:14:15:fd:93:de:6b:73:cc:ae:2b:cc:e7:91:63:7f:45:
         30:e1:9e:05:35:fd:a6:03:3f:72:c8:fd:63:96:8f:f5:09:90:
         98:78:41:8c:35:8f:3a:59:88:d1:e8:b8:bd:b5:92:38:d8:2f:
         27:77:09:64:65:4f:43:79:d4:be:5a:96:34:96:b3:df:14:64:
         b9:83:94:60:21:36:d0:39:97:72:50:48:a9:ae:96:01:f9:23:
         b4:a4:10:33:dc:9b:c1:ba:24:32:5e:8a:ab:21:ea:3c:ca:f5:
         7c:e1:50:a1:34:11:7f:73:1f:6b:69:e6:c8:04:9d:58:e5:4e:
         a1:fd:18:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:18 2025 by rpki-client