Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/cf5bcca4-5a5c-301c-9c8d-ef2e12035755.roa
File:                     cf5bcca4-5a5c-301c-9c8d-ef2e12035755.roa (raw, json)
Hash identifier:          RWR2LWjdmMJUldTTU3aE4DSoJeH1TQ+qVvjuGyEhtmY=
Subject key identifier:   7F:F8:8E:50:1F:46:6B:D7:AE:6A:F3:E8:C6:90:F3:27:AA:08:12:4C
Certificate issuer:       /CN=05437be8-72be-4526-bdc7-04862534a038
Certificate serial:       010D0C9F4328584B84E77BCF483571135BD09380
Authority key identifier: C3:03:49:15:9B:48:48:BC:E7:B0:E3:1B:32:7F:83:D7:97:DB:AF:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/cf5bcca4-5a5c-301c-9c8d-ef2e12035755.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     399035
IP address blocks:        162.142.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/05437be8-72be-4526-bdc7-04862534a038.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/05437be8-72be-4526-bdc7-04862534a038.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:7b:cf:48:35:71:13:5b:d0:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05437be8-72be-4526-bdc7-04862534a038
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=3e5cc7de-7577-43d6-9eb6-4a9ca8354364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:af:73:a2:25:50:39:ee:fa:b9:a9:91:c4:5a:
                    71:21:59:a6:4e:45:de:1f:d8:bc:1c:db:68:1b:bb:
                    37:4f:f5:17:85:0a:94:7f:11:6c:ee:cd:fd:c3:81:
                    63:fd:09:b5:00:5e:c9:d5:a3:1c:e6:e4:db:e1:de:
                    52:2c:6e:7f:47:f0:c7:70:e3:0a:57:3a:fe:a6:c1:
                    a3:59:c1:e3:bf:b8:df:cc:33:43:21:86:e6:d6:1d:
                    3a:cc:cd:02:91:44:46:8b:68:49:55:cf:5d:a9:8b:
                    09:01:71:b3:1a:fa:2d:19:be:1a:96:db:a8:dd:44:
                    9a:a1:f0:a5:9e:74:b2:90:3d:a3:9a:aa:fa:14:81:
                    29:24:e2:f9:63:d3:a6:e2:be:3b:e6:d6:e5:cc:30:
                    5b:0e:3b:95:cd:5d:a5:ff:4d:72:18:74:1e:db:92:
                    53:69:4e:4e:0f:ed:9d:17:b4:7d:7f:7d:7e:3f:bf:
                    98:01:1e:48:02:94:07:5b:5b:b2:1a:b0:ea:43:f1:
                    6d:cc:d2:83:98:e4:1f:05:84:03:5b:d7:a4:0f:4f:
                    7a:c1:b8:8a:9d:fb:10:f9:5c:50:4b:b1:da:6c:95:
                    f0:fd:30:c1:0c:44:1e:77:d1:cb:97:0a:92:74:ef:
                    b0:b8:3a:cb:ea:02:7e:d2:8d:13:cd:3a:0a:8f:d1:
                    1b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F8:8E:50:1F:46:6B:D7:AE:6A:F3:E8:C6:90:F3:27:AA:08:12:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/cf5bcca4-5a5c-301c-9c8d-ef2e12035755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/05437be8-72be-4526-bdc7-04862534a038.crl

            X509v3 Authority Key Identifier:
                keyid:C3:03:49:15:9B:48:48:BC:E7:B0:E3:1B:32:7F:83:D7:97:DB:AF:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.142.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:2f:6c:18:a1:34:7f:13:8d:eb:e3:c4:53:ff:9f:66:a2:8d:
         3f:32:5b:ae:ae:9f:08:e2:08:24:b3:33:70:9b:1a:a5:fb:98:
         81:ab:64:1b:8f:66:3b:b9:d9:2c:80:da:94:60:75:46:bd:10:
         2b:43:bd:f2:94:fa:b5:e9:80:a6:94:55:0e:89:c8:48:cc:80:
         f7:e1:42:5b:cb:84:f3:b0:3e:5a:fe:3d:f5:38:4b:2d:fc:d3:
         04:82:2d:61:c0:47:fc:49:e9:35:e4:a0:d1:33:9a:8e:1d:b5:
         93:42:15:c2:69:ad:30:17:12:00:d4:c2:05:21:77:87:e5:6e:
         a6:3c:da:84:34:04:30:62:7e:9c:15:a6:13:44:2c:65:f0:aa:
         cf:44:f8:f3:da:05:45:1d:0d:7e:68:90:a3:f4:0a:cb:ac:47:
         21:79:51:3a:4d:2a:82:5a:d6:3a:36:b2:7c:1e:04:05:3e:6f:
         ba:fc:2f:31:e0:42:3c:fc:3a:d8:b8:44:27:f2:72:f2:0a:79:
         6d:b4:26:6a:95:34:12:66:c8:b4:e8:ef:3a:38:33:4e:56:cc:
         3b:56:52:81:35:98:4b:84:72:17:06:82:36:0b:ae:c0:26:e2:
         ee:7e:a7:3d:e0:1e:9a:b9:9b:eb:f6:9a:20:6d:98:b8:75:c4:
         24:a6:55:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:10:32 2025 by rpki-client