Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/f35b210d-fbc7-3b2f-b3db-5c9930fb1f2d.roa
File:                     f35b210d-fbc7-3b2f-b3db-5c9930fb1f2d.roa (raw, json)
Hash identifier:          Zgv4yYj7dsHKXEOqBDJRzEZIO2/Y2CwDAjBwfvm838A=
Subject key identifier:   67:FD:C8:7B:A9:D8:D7:68:28:DB:6B:0B:CC:AD:20:AB:9A:52:79:4B
Certificate issuer:       /CN=a773147e-548c-4c30-a3fe-91c723e2cad9
Certificate serial:       010D0C9F4328584B8C433F2EABF9DAD6599E2B60
Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/f35b210d-fbc7-3b2f-b3db-5c9930fb1f2d.roa
Signing time:             Fri 17 Oct 2025 04:16:22 +0000
ROA not before:           Fri 17 Oct 2025 04:16:22 +0000
ROA not after:            Thu 15 Jan 2026 05:16:22 +0000
asID:                     55256
IP address blocks:        158.95.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8c:43:3f:2e:ab:f9:da:d6:59:9e:2b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9
        Validity
            Not Before: Oct 17 04:16:22 2025 GMT
            Not After : Jan 15 05:16:22 2026 GMT
        Subject: CN=2b9d2695-8d31-469d-8ec5-7684cc5f0494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:05:31:c0:27:d4:cc:fd:81:09:22:06:36:8d:
                    af:88:3c:13:80:c0:63:cb:21:d4:78:60:6c:63:7f:
                    c9:e2:e0:73:0e:22:09:b9:14:5b:6f:39:b8:91:ed:
                    38:ce:ab:bd:29:99:51:12:39:3d:e5:ab:a7:3a:87:
                    da:bb:3b:8c:d9:d6:e0:73:fd:96:23:08:08:6d:ca:
                    13:97:d9:94:b4:8e:bf:c4:76:f9:bb:fe:97:de:ca:
                    3b:e9:78:77:47:5a:6a:c9:7a:1f:00:37:a1:d4:75:
                    34:62:a4:02:43:1a:5c:18:df:79:c3:df:25:9d:2e:
                    19:5a:67:56:b7:5e:99:f2:7f:da:a8:ed:77:db:33:
                    e3:a4:9a:49:40:cf:c7:a5:31:89:1b:17:1c:87:a1:
                    78:d8:28:4d:be:12:74:c5:c2:f7:85:ca:8b:23:36:
                    14:a1:97:59:a3:82:7d:76:71:af:c5:01:2f:4b:8e:
                    fb:8a:bc:12:42:1e:7e:73:26:fa:b0:08:c2:a8:c1:
                    ca:55:f7:e8:16:4f:0b:e4:86:bb:3c:94:5e:98:5b:
                    32:21:fd:21:a8:f7:e7:bc:21:a7:91:5f:1b:e6:89:
                    82:e6:b3:65:b6:df:42:5e:c7:80:60:ba:3e:e9:52:
                    0b:cc:a0:2f:c9:1c:90:7b:af:af:a5:cd:e0:9f:03:
                    3b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FD:C8:7B:A9:D8:D7:68:28:DB:6B:0B:CC:AD:20:AB:9A:52:79:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/f35b210d-fbc7-3b2f-b3db-5c9930fb1f2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl

            X509v3 Authority Key Identifier:
                keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.95.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:3d:f7:08:cb:73:0b:80:2f:77:36:4a:95:d3:82:53:12:44:
         89:1b:8e:94:69:02:17:05:ec:71:e0:63:a7:f4:50:36:0c:54:
         f3:10:8c:42:8b:75:75:14:ec:10:0c:4a:72:8e:46:37:c0:42:
         af:94:ae:b5:2b:17:5d:5d:0e:77:21:f6:80:b0:a4:71:b6:ba:
         7c:e5:05:17:06:09:9c:63:9a:26:87:77:d5:ef:fa:e7:d8:86:
         c0:dc:0a:84:02:09:64:eb:de:06:28:74:9f:ee:ec:a2:e3:a4:
         26:4e:1c:ec:94:52:66:ee:4e:d3:d8:96:87:b3:39:83:be:8a:
         4b:35:39:cd:8f:9e:44:8b:e3:7c:88:66:d6:87:75:7c:58:dc:
         e2:e7:88:e8:90:27:be:55:62:8c:a6:9d:37:76:79:2f:9c:17:
         17:f1:b5:20:c5:cf:d7:55:26:e2:62:01:d9:32:87:d1:f9:ed:
         c8:a4:86:47:ab:f4:09:39:a6:de:9e:b3:af:cb:1d:4d:c3:e6:
         2b:01:62:58:93:6d:41:e4:23:2d:b6:89:0e:50:1f:cc:62:97:
         77:d9:65:fc:eb:e0:4c:39:e8:d8:7e:8a:b6:f6:ea:dd:16:6e:
         5e:16:ae:b8:c6:da:09:11:60:36:a0:b9:57:79:88:2a:83:9c:
         a9:4d:07:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:29:28 2025 by rpki-client