Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/276a4c02-d33e-4b8f-90ab-509e3d3cc86b/8f8fd147-3b13-37bb-9cbc-6698e8431c67.roa
File:                     8f8fd147-3b13-37bb-9cbc-6698e8431c67.roa (raw, json)
Hash identifier:          4YTHN0e8OsXpkt2D4hiHwWysrP+d1BZLgcOzv43esyo=
Subject key identifier:   5F:91:F8:57:EE:99:0C:E9:49:4B:06:87:23:40:3E:9E:2C:15:E9:98
Certificate issuer:       /CN=276a4c02-d33e-4b8f-90ab-509e3d3cc86b
Certificate serial:       010D0C9F4328584B89177A6420F90AFFC7CBC700
Authority key identifier: 08:8B:F0:68:52:6B:A4:C8:4C:6C:1A:CB:F9:6D:CB:7F:52:7B:4A:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/276a4c02-d33e-4b8f-90ab-509e3d3cc86b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/276a4c02-d33e-4b8f-90ab-509e3d3cc86b/8f8fd147-3b13-37bb-9cbc-6698e8431c67.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     54665
IP address blocks:        162.247.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/276a4c02-d33e-4b8f-90ab-509e3d3cc86b/276a4c02-d33e-4b8f-90ab-509e3d3cc86b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/276a4c02-d33e-4b8f-90ab-509e3d3cc86b/276a4c02-d33e-4b8f-90ab-509e3d3cc86b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/276a4c02-d33e-4b8f-90ab-509e3d3cc86b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:7a:64:20:f9:0a:ff:c7:cb:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=276a4c02-d33e-4b8f-90ab-509e3d3cc86b
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=1aa33984-a193-4e80-ba69-02da820d9a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:66:0f:f1:0d:c5:bc:e0:42:a7:8a:95:7b:cc:
                    d0:f8:91:27:f2:32:2e:7b:0c:0c:9c:37:59:14:6a:
                    6d:47:1c:a7:df:d7:f9:8b:3f:f5:06:8d:a9:81:20:
                    5d:68:f5:a6:e9:90:a3:78:01:ca:55:96:cd:bd:20:
                    7a:fb:2c:ef:d9:de:62:f6:b5:97:97:60:4c:cd:d6:
                    76:bd:55:58:57:d2:f7:4b:d3:f4:ca:b3:e5:bd:08:
                    59:41:b1:8b:94:c8:77:0d:2b:8c:d8:e3:85:8e:83:
                    20:45:d2:59:1c:96:53:24:2d:a4:d6:d9:c3:88:ee:
                    98:cb:21:c9:ea:66:91:3f:fa:a4:f7:d3:60:20:98:
                    fc:13:66:01:96:3b:e8:b2:57:d1:02:25:c2:9b:09:
                    9d:ae:83:3d:37:b1:2e:2c:2c:04:8e:6f:1c:50:a8:
                    73:18:f3:2b:77:20:8f:6a:d0:7f:ee:f4:43:e7:9a:
                    35:f1:70:08:27:d5:a6:0e:04:ca:9f:78:41:9c:b7:
                    1a:cd:86:8f:c2:6e:c0:97:9d:95:9f:da:83:e8:7d:
                    da:dd:80:aa:42:44:b7:52:db:37:ae:fe:92:a0:5d:
                    5d:94:06:ef:9e:de:ea:21:a0:77:06:2f:58:4a:a0:
                    21:9a:17:d2:c3:d4:3c:35:2b:0a:44:7a:cc:48:2d:
                    a2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:91:F8:57:EE:99:0C:E9:49:4B:06:87:23:40:3E:9E:2C:15:E9:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/276a4c02-d33e-4b8f-90ab-509e3d3cc86b/8f8fd147-3b13-37bb-9cbc-6698e8431c67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/276a4c02-d33e-4b8f-90ab-509e3d3cc86b/276a4c02-d33e-4b8f-90ab-509e3d3cc86b.crl

            X509v3 Authority Key Identifier:
                keyid:08:8B:F0:68:52:6B:A4:C8:4C:6C:1A:CB:F9:6D:CB:7F:52:7B:4A:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/276a4c02-d33e-4b8f-90ab-509e3d3cc86b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:36:a3:01:43:c6:f7:06:69:f4:64:a1:ef:37:37:29:56:4c:
         89:69:b6:f8:d7:c5:b3:42:92:b9:e7:22:ec:ee:db:74:28:7e:
         e9:ca:3e:58:7e:7d:5a:1b:58:18:4f:b1:bf:f2:4d:94:f7:c7:
         38:4f:df:87:61:a9:4c:79:2a:ed:4f:4c:21:14:5b:14:e1:70:
         47:0d:d2:6e:6d:20:3b:92:48:81:87:ed:90:b2:70:8f:c4:26:
         12:c3:7b:94:3f:40:47:48:f2:7b:e7:ae:4f:10:4f:8e:7e:47:
         61:a5:37:2c:e1:4b:ee:68:5b:cd:cd:ec:d9:b1:95:a6:83:5e:
         e8:5c:38:3b:45:02:e2:37:a7:71:2e:dc:e8:b4:1d:45:11:8f:
         33:42:9d:40:a2:9d:dd:13:9d:ed:ec:bd:2e:d3:26:5d:18:8c:
         21:0a:9a:01:e2:2c:4b:75:23:10:30:2a:76:aa:71:9a:e7:85:
         a0:17:03:f0:89:3b:cd:ac:65:f5:b6:f7:b4:f3:8f:47:69:0c:
         20:57:90:8a:3c:d5:b0:3c:bc:dd:50:03:4c:60:bd:83:a7:83:
         34:8a:2d:93:74:ad:fc:77:0e:7a:a2:2e:dc:2f:cb:9d:cb:cb:
         60:78:9d:2a:1a:8c:e9:64:85:af:13:a6:c1:ae:6d:ac:0f:c9:
         7f:f0:7b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:13:11 2025 by rpki-client