Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3a306480-c08e-3e60-bdf7-f87037f23621.roa
File:                     3a306480-c08e-3e60-bdf7-f87037f23621.roa (raw, json)
Hash identifier:          XX0zgFO3YmC/JlwaCB7kRgXKcZOCsvsvqQq88+axjS4=
Subject key identifier:   64:03:0A:2B:9F:0D:87:6B:A0:1F:7E:F4:A4:C6:AF:65:39:F1:95:AA
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584B6A61E94F987D750B2B6A56C0
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3a306480-c08e-3e60-bdf7-f87037f23621.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     55293
IP address blocks:        162.212.128.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:e9:4f:98:7d:75:0b:2b:6a:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=991d4488-a2ab-4446-8e1b-1290a0b2401f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6b:22:e9:c4:1a:ff:0b:90:c0:01:2c:71:20:
                    7e:94:a3:1b:6d:72:4b:d4:88:87:f6:af:46:1b:4a:
                    2d:59:71:f2:33:93:c7:ff:df:df:d7:ba:d9:4c:f4:
                    e1:54:a8:44:da:8e:e3:0c:cd:d4:80:cc:d7:29:ab:
                    11:be:49:b6:ab:58:b1:39:08:37:94:75:fa:7b:21:
                    fe:15:b4:bb:a7:e6:23:66:6a:65:5f:c4:0a:24:d1:
                    39:7d:35:9d:84:cd:81:f3:fe:9d:ef:52:e0:76:01:
                    6c:ce:89:7f:92:a1:2e:b7:fa:ed:82:a9:8c:89:a6:
                    3a:54:ff:a0:04:72:79:54:83:06:35:d9:52:2e:ef:
                    1b:ed:cc:be:60:6a:f9:01:37:a2:69:b1:7b:a3:5d:
                    14:8b:9c:1f:fe:5f:1d:f8:6c:df:e7:62:ef:45:a4:
                    bf:83:1d:3b:37:2e:67:58:af:70:7f:4a:93:86:7f:
                    ea:99:d1:df:3c:42:4e:89:45:16:02:6a:db:59:6d:
                    64:34:fb:eb:86:ee:cb:41:ae:c7:23:1d:5b:5a:fb:
                    e2:57:5a:03:0e:1c:3f:e7:e2:03:64:3b:1a:61:6a:
                    dc:1e:13:63:61:52:b5:e2:8a:4a:bf:b2:f3:d5:70:
                    11:74:db:71:2a:a0:7f:f7:b9:84:c6:af:3c:1f:d2:
                    43:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:03:0A:2B:9F:0D:87:6B:A0:1F:7E:F4:A4:C6:AF:65:39:F1:95:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/3a306480-c08e-3e60-bdf7-f87037f23621.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:49:68:a5:72:e7:55:1d:e8:04:80:bf:71:39:09:57:69:aa:
         8d:38:f2:e5:80:ab:7b:b3:7b:93:53:02:58:45:12:c8:2c:a0:
         b9:99:3a:d3:c0:1d:82:50:e5:35:be:b6:c0:50:48:89:6a:f1:
         62:ef:5d:a5:12:f7:ae:62:aa:15:de:f5:cd:7e:31:16:3d:96:
         f0:15:af:1c:71:77:94:7e:ca:d6:ff:ab:53:89:6b:a0:d6:97:
         ca:61:79:11:45:f3:64:2a:2a:47:cd:d3:50:e8:0a:2b:ef:6d:
         30:e3:b4:29:86:c2:90:61:8f:f1:06:9c:d4:d4:2c:72:5d:ea:
         33:93:1b:53:a9:dc:ec:1c:42:cd:87:fd:4c:54:27:23:58:37:
         ee:ea:91:1d:4f:3d:82:5e:23:3f:2c:f0:37:51:b1:e3:a0:bb:
         3c:ac:42:ec:7b:fc:d8:7b:66:56:52:b6:ab:8d:07:b2:d4:87:
         d7:86:be:b2:26:9a:53:19:e0:d2:42:5f:74:3b:5d:85:c3:62:
         47:67:cc:c9:86:94:34:bd:ec:d5:40:17:c4:35:8a:2b:36:36:
         c7:e6:0f:a3:70:3c:c0:6e:fb:9f:98:f3:26:d1:21:33:2c:3c:
         52:01:ac:9d:99:e6:4b:9b:26:e8:28:7e:0b:8b:84:c6:0e:0c:
         4e:d7:85:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:24:31 2025 by rpki-client