Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/6c5f0451-1a47-3cdb-b708-9d15837deda8.roa
File:                     6c5f0451-1a47-3cdb-b708-9d15837deda8.roa (raw, json)
Hash identifier:          U3ncZuhyqPin5tp20FfAfafE6hqrEDLkgH1gpVbhRbM=
Subject key identifier:   71:2A:42:33:EC:85:34:12:16:61:D0:4E:A4:62:71:23:F2:C0:EE:FC
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F4328584B6A61E964335D449CEC2743C0
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/6c5f0451-1a47-3cdb-b708-9d15837deda8.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     55293
IP address blocks:        162.212.132.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:e9:64:33:5d:44:9c:ec:27:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=828b3588-6976-429b-9463-1b00fd9a05d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:96:bd:e0:76:b7:44:dc:52:ff:8c:cb:d1:fd:
                    a9:96:4d:48:1e:50:fb:71:f4:51:43:1f:ef:f7:5b:
                    8b:4f:3e:32:01:7e:9e:b3:c3:04:05:d6:f2:a1:49:
                    4c:71:11:47:46:85:6c:5a:8b:df:3c:08:3c:8b:09:
                    49:86:7b:0e:c2:df:2d:98:05:7a:ab:d3:33:f5:cd:
                    01:fd:0f:e5:e6:21:92:0a:1b:f2:71:ea:ff:b3:bf:
                    29:be:81:57:f1:84:3b:f8:0e:a2:22:d0:c1:5d:62:
                    13:bb:ed:6f:01:54:7e:c8:17:ff:08:bd:90:7e:f5:
                    e8:2e:eb:14:56:d8:02:7f:04:df:57:47:c7:6f:56:
                    07:07:64:fb:3f:45:f4:60:92:29:9a:53:c6:81:17:
                    8e:77:6f:d1:c0:c0:79:dd:0b:69:24:d7:6a:87:47:
                    42:33:77:46:e3:f0:b9:24:de:2b:69:3d:20:24:f7:
                    8e:17:3f:94:f1:be:6a:9a:72:be:f8:30:66:6b:cc:
                    3f:ba:91:ed:f5:a7:db:53:4c:28:2a:23:a3:77:5e:
                    69:e6:7d:bb:2c:24:c7:91:6f:f8:74:d7:d0:82:64:
                    9e:0b:ea:45:35:32:a7:59:24:96:65:5d:c5:d6:73:
                    56:e7:6b:ac:f2:8f:7b:9f:e7:67:9a:08:40:a7:b4:
                    cc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:2A:42:33:EC:85:34:12:16:61:D0:4E:A4:62:71:23:F2:C0:EE:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/6c5f0451-1a47-3cdb-b708-9d15837deda8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:51:7f:44:4d:76:f5:57:d1:db:c0:8a:a5:9e:62:f6:74:bd:
         8c:6a:bc:51:26:b0:a4:5c:1f:39:3f:56:ca:94:2c:3d:7a:ed:
         4f:c0:7f:d6:7f:44:3c:90:91:fc:c1:f5:df:41:cb:b3:ac:78:
         cb:70:47:ed:36:36:76:6b:23:96:f7:0c:f3:c7:e2:e9:63:ee:
         9a:b0:e5:69:b6:f1:4b:c0:c3:c0:2a:dc:96:94:27:86:29:a4:
         30:32:bc:34:b5:90:14:91:3c:c0:62:e8:6f:c9:11:d3:90:e5:
         db:60:99:c5:26:34:be:88:a2:bb:de:21:28:dc:54:bf:6e:e0:
         4a:04:a1:9c:03:d0:a6:13:1a:8f:74:60:02:24:d0:a6:1e:98:
         4f:ea:55:3e:c6:d5:95:98:d2:69:0f:1d:96:c9:f8:0d:46:82:
         66:9d:74:bb:9a:41:4b:dd:96:92:cb:e5:1a:97:0b:8b:74:0f:
         32:7a:95:e4:29:7d:44:d0:06:c8:ea:71:b3:2c:52:5e:3f:91:
         25:2d:4f:69:89:be:08:cc:6d:d6:3a:d0:17:6c:90:b7:d3:fd:
         c1:98:b1:5d:1b:49:63:14:d9:0c:42:66:10:e8:93:25:a4:92:
         d3:37:0b:28:f8:6f:dd:75:b1:c0:9c:27:f9:86:19:2e:ae:6d:
         c8:cd:57:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:49:03 2025 by rpki-client