Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/9cd6624e-86f9-3575-8e6b-484b03a1d6fc.roa
File:                     9cd6624e-86f9-3575-8e6b-484b03a1d6fc.roa (raw, json)
Hash identifier:          N0e3mM+UFbN5zKzRIyUzKvYYvwpXHTPjrB948bGm2rQ=
Subject key identifier:   FB:44:C4:87:C8:78:60:1D:69:B3:F3:8A:AC:9B:55:9F:1F:45:6A:40
Certificate issuer:       /CN=336db060-273c-4da7-88b6-6f47c8830474
Certificate serial:       010D0C9F4328584B5F3721EC99C4DC4B02119780
Authority key identifier: 75:8C:5C:A3:D0:83:73:A0:2B:3B:9C:DF:74:59:F1:87:A2:69:14:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/9cd6624e-86f9-3575-8e6b-484b03a1d6fc.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     398663
IP address blocks:        157.160.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/336db060-273c-4da7-88b6-6f47c8830474.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/336db060-273c-4da7-88b6-6f47c8830474.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:21:ec:99:c4:dc:4b:02:11:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=336db060-273c-4da7-88b6-6f47c8830474
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=03db0f05-f208-48c0-9166-5f53b05767e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b8:72:ed:cd:7b:19:fa:af:51:c8:de:5e:b0:
                    85:a0:d2:71:fa:e2:39:83:1a:15:2c:a5:6c:55:c1:
                    23:09:2e:4a:88:23:a5:64:2e:9e:69:e5:58:f3:e6:
                    af:fd:e9:e3:06:00:c3:91:b7:6c:3f:49:59:a2:c5:
                    01:62:ae:59:a2:5a:5a:50:06:7d:6f:b1:3f:4e:e9:
                    1c:8d:5f:95:02:b3:1e:25:c2:97:aa:08:53:7c:3c:
                    00:68:57:e0:2b:b4:79:b3:0f:2b:5e:ab:be:6c:b5:
                    36:78:e7:37:4e:09:0e:d2:bb:9e:9d:65:42:70:36:
                    d3:01:7d:00:ea:91:69:fc:10:db:df:31:d0:c0:98:
                    39:12:1d:ab:20:11:04:78:f1:9d:8f:5f:8d:89:7c:
                    6c:86:b7:43:d8:b3:b0:69:17:57:62:d5:83:04:5e:
                    a8:76:fa:16:b0:f4:16:1f:92:24:1d:d6:fb:d4:55:
                    08:78:42:1e:05:92:b4:5d:4a:5d:b3:6c:83:e7:38:
                    dd:c6:7b:56:3f:27:b0:45:97:79:71:f5:f3:85:10:
                    d8:ec:2b:c7:e9:06:6b:4f:7a:32:4e:ba:7d:f5:bd:
                    f7:bc:89:34:90:02:59:59:f9:39:9b:ed:2a:21:a9:
                    20:7e:21:b4:f6:fd:01:5b:e9:97:45:a2:f9:e3:66:
                    08:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:44:C4:87:C8:78:60:1D:69:B3:F3:8A:AC:9B:55:9F:1F:45:6A:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/9cd6624e-86f9-3575-8e6b-484b03a1d6fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474/336db060-273c-4da7-88b6-6f47c8830474.crl

            X509v3 Authority Key Identifier:
                keyid:75:8C:5C:A3:D0:83:73:A0:2B:3B:9C:DF:74:59:F1:87:A2:69:14:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/336db060-273c-4da7-88b6-6f47c8830474.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.160.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:31:74:dc:10:33:38:24:fe:b2:40:83:13:45:76:cf:8b:ad:
         77:2e:d2:79:92:be:2c:30:42:b7:9a:49:89:41:51:64:6d:e5:
         e4:3c:32:ae:92:7e:1d:05:96:17:a5:42:c5:9f:74:a0:7d:5f:
         cf:72:da:6d:e5:64:03:b1:0d:1b:38:7b:b2:3d:72:b3:54:1d:
         91:66:43:30:3a:0c:9a:70:e1:4b:54:3f:3d:3e:5a:f2:7f:76:
         3b:50:8b:3d:07:64:e2:9c:03:05:50:b6:19:e8:d4:4b:db:37:
         e4:ea:3f:fc:d8:df:8c:5a:90:9f:c9:52:62:49:a2:ae:53:8e:
         6a:93:f1:78:87:b9:77:37:61:0f:36:16:eb:37:4c:d2:94:73:
         cc:6f:ae:72:9a:f5:b3:66:36:97:e2:41:d0:dc:73:74:a8:13:
         3d:c1:4d:62:dd:e8:92:2c:b1:80:79:18:96:e5:7b:90:34:2a:
         4d:f9:69:fa:c9:7f:99:44:4b:fb:76:06:be:9f:12:71:91:f6:
         0e:a4:59:f7:2a:04:79:8c:02:43:ba:54:52:09:3b:0f:4d:9d:
         10:f4:53:f6:ca:f7:e0:71:7c:62:45:39:4f:a0:f2:cc:56:a0:
         e5:9e:a5:a1:5c:03:fe:7b:68:95:17:2f:e7:57:81:be:8a:0b:
         bb:63:53:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 04:45:42 2025 by rpki-client