Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/4a9f4df0-5d0e-3a2a-ba53-e002ff41f854.roa
File:                     4a9f4df0-5d0e-3a2a-ba53-e002ff41f854.roa (raw, json)
Hash identifier:          IRHy39XYGQD54qosu+57IvYkW0WT8i4ZuN3cLW9yPKg=
Subject key identifier:   62:26:20:B9:81:9A:0B:DB:28:C7:3F:18:11:10:BD:53:3F:54:65:54
Certificate issuer:       /CN=03f68bb7-1e42-452b-a9a1-99c7586beba0
Certificate serial:       010D0C9F4328584B8EACE294D0277B4137606B00
Authority key identifier: 4A:FE:14:71:88:62:D6:29:3A:A3:7B:BE:73:13:AD:A1:E8:8C:49:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/4a9f4df0-5d0e-3a2a-ba53-e002ff41f854.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     13652
IP address blocks:        162.212.48.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/03f68bb7-1e42-452b-a9a1-99c7586beba0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/03f68bb7-1e42-452b-a9a1-99c7586beba0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:e2:94:d0:27:7b:41:37:60:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f68bb7-1e42-452b-a9a1-99c7586beba0
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=d3ef9768-8508-47d2-86ec-3934965791b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e1:65:e2:53:5a:c2:40:b0:66:cb:a6:9b:9f:
                    f4:84:26:9c:5b:66:0a:8f:f5:e0:0b:fa:78:e7:cb:
                    b3:9f:29:98:61:4d:53:26:a9:4d:6c:4d:3c:9d:51:
                    75:61:21:83:30:91:69:63:92:bb:cf:6e:a1:7b:cd:
                    32:8f:c9:bf:dd:41:3a:0e:ea:0d:08:fc:c5:03:a5:
                    69:93:2d:0d:f6:b2:6f:01:0e:3f:a8:72:6c:4e:67:
                    98:c3:51:37:01:5d:45:ca:ab:e0:e3:e7:03:93:ff:
                    a5:b6:0a:04:42:ee:86:62:1e:37:1e:f7:40:57:6b:
                    3b:a8:68:5a:a0:5d:46:49:dc:bb:3c:33:a2:74:d1:
                    56:5e:7e:2a:a9:95:ad:d6:12:f6:52:84:46:04:40:
                    07:61:ec:c0:aa:e6:0c:46:21:5b:1a:8a:2c:a3:f1:
                    99:7d:25:b3:c5:de:20:67:5c:2f:98:ad:8c:8e:46:
                    53:bc:47:cd:c4:50:92:83:9a:9e:b3:c9:15:44:ab:
                    12:ee:1e:19:92:7d:b5:fb:e3:f1:e9:7c:10:ff:bd:
                    0a:98:68:f6:72:9d:e1:aa:b1:fc:39:08:98:83:8d:
                    1f:9c:ca:27:aa:36:26:d0:18:e3:a5:f3:79:c3:8e:
                    e2:18:d0:4e:ff:ad:80:d0:81:e8:af:74:b6:38:06:
                    bb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:26:20:B9:81:9A:0B:DB:28:C7:3F:18:11:10:BD:53:3F:54:65:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/4a9f4df0-5d0e-3a2a-ba53-e002ff41f854.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0/03f68bb7-1e42-452b-a9a1-99c7586beba0.crl

            X509v3 Authority Key Identifier:
                keyid:4A:FE:14:71:88:62:D6:29:3A:A3:7B:BE:73:13:AD:A1:E8:8C:49:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/03f68bb7-1e42-452b-a9a1-99c7586beba0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:5b:3e:36:60:92:91:7c:0e:5f:79:71:fd:7e:b9:1d:18:69:
         c7:d1:e6:50:a7:eb:3c:86:e2:31:88:29:30:dd:6f:ad:a4:71:
         79:b4:8e:11:74:07:66:72:53:08:26:d7:65:8e:0c:04:26:35:
         1d:92:52:68:94:e1:b4:82:71:2d:05:02:a9:ac:c8:d9:11:c7:
         3a:3f:bb:2c:cf:0d:ba:7c:20:a7:a5:73:74:8e:42:da:07:6a:
         ab:03:e4:f3:9a:ab:bd:7e:ab:b5:c7:83:10:61:01:a1:38:78:
         43:4c:22:60:4f:08:05:96:bc:e5:0e:26:c4:91:29:99:19:7d:
         6b:4f:f9:53:e1:e3:9b:c1:ac:1a:b6:2c:ba:39:76:1a:83:52:
         8a:9a:4b:3b:84:3a:08:22:b6:1b:fe:3e:71:52:49:8c:90:a9:
         74:81:3c:01:25:84:7b:77:4e:4e:3d:2a:b2:1e:3c:41:44:03:
         31:18:fb:da:c0:14:69:ec:aa:8b:8b:8f:39:a6:24:a1:a8:28:
         49:72:27:8a:88:e8:93:1b:2e:8a:9f:41:c0:e1:33:fd:ff:3e:
         92:ef:17:7e:1d:d0:79:c1:4d:93:26:1a:e4:b8:aa:48:3a:91:
         d7:49:23:03:b7:12:c2:36:20:2b:ed:74:84:ad:bd:43:4d:a7:
         33:82:96:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:06:27 2025 by rpki-client