Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/2a5c7778-1786-3e6f-8890-b24491b369bb.roa
File:                     2a5c7778-1786-3e6f-8890-b24491b369bb.roa (raw, json)
Hash identifier:          l7f5FBOPPhZDu1iowUZBDAWdxAr/E1cN1BVurN/bUC0=
Subject key identifier:   17:A9:D3:C9:51:E4:40:20:E3:24:92:65:99:CF:C0:DF:02:1B:33:2D
Certificate issuer:       /CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113
Certificate serial:       010D0C9F4328584B92DCEFFD7538B2BFC7E6E740
Authority key identifier: A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/2a5c7778-1786-3e6f-8890-b24491b369bb.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     22504
IP address blocks:        162.118.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:ef:fd:75:38:b2:bf:c7:e6:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a3fe3a9-d9f7-4b8e-a037-877363c53113
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=397232a4-1667-41e2-a100-d35e5826aa6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7b:19:e5:7a:3c:99:fd:44:bd:f8:4e:bd:9d:
                    92:21:dc:e5:2a:b5:f9:a8:4c:84:d0:af:ae:d1:9e:
                    71:70:72:3a:b1:7f:91:eb:4e:cf:95:5d:98:10:c2:
                    1e:ef:dc:85:6b:68:18:13:3d:6d:b5:36:e2:8a:f3:
                    19:e7:da:44:e6:39:4b:b8:5d:70:f3:98:bd:0d:8e:
                    af:d7:62:2d:58:fe:aa:fe:73:26:f9:11:4f:55:2a:
                    c1:fd:3f:86:35:01:b8:88:f5:25:d1:65:d7:ab:a7:
                    31:0f:9a:44:70:d5:88:7f:61:7b:9c:84:ad:02:2f:
                    17:bd:40:ae:de:0a:71:0e:e3:36:34:22:0a:ba:3f:
                    d0:da:27:38:54:c5:18:16:87:de:60:36:4c:df:dc:
                    6d:08:e9:5c:69:ac:cb:37:a4:a4:9b:6f:06:33:08:
                    47:ef:f5:4d:ce:f5:59:80:79:e4:7e:04:de:70:93:
                    11:d5:c2:f3:5d:f6:1b:02:b4:e4:7f:ce:11:30:01:
                    8b:7f:e8:b1:fd:71:da:c7:65:32:d9:cd:de:5d:52:
                    24:38:06:47:de:1f:40:eb:2c:9a:ac:73:80:73:18:
                    b1:fd:78:31:7e:04:8b:a3:43:7e:b0:ed:1d:d8:0d:
                    ff:6e:16:df:f3:ce:a7:95:db:fd:dc:19:9a:02:a4:
                    a0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A9:D3:C9:51:E4:40:20:E3:24:92:65:99:CF:C0:DF:02:1B:33:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/2a5c7778-1786-3e6f-8890-b24491b369bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113/5a3fe3a9-d9f7-4b8e-a037-877363c53113.crl

            X509v3 Authority Key Identifier:
                keyid:A8:C1:4B:3D:D1:52:6C:35:99:64:83:60:2D:FC:F0:4C:0A:BC:EC:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a3fe3a9-d9f7-4b8e-a037-877363c53113.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.118.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:f1:d2:fa:57:e6:e6:cc:2f:24:dd:9d:a1:ce:71:11:53:f7:
         9f:a9:49:49:df:e1:c8:20:72:a4:1a:80:d6:2b:6a:70:c8:ea:
         00:ee:0d:79:06:a8:29:ac:d3:15:f5:3c:3c:6b:b8:a6:95:b7:
         c8:8d:ed:10:a8:0d:63:79:22:e8:db:bc:fc:93:82:4b:99:69:
         4c:4f:30:f5:d6:b1:1d:73:0f:d0:b4:c2:5d:66:dd:82:b2:1f:
         4c:b3:6d:33:b4:33:a3:3c:42:90:d1:fb:a4:d6:fc:13:d5:a2:
         4c:e6:84:ef:b5:fa:e4:ef:bd:e8:20:4e:6f:d1:e9:a1:0a:a3:
         21:52:fe:6b:d3:15:0c:e9:1a:48:73:bc:85:f9:c1:31:22:63:
         24:4e:e6:04:a0:7a:11:74:b0:6c:08:14:a8:97:d2:54:af:2a:
         75:5a:85:c6:4e:cc:37:75:f1:e7:fa:21:64:f1:7f:4a:3c:50:
         71:b4:2a:2e:99:0c:51:c2:53:59:c6:b0:ea:5f:f4:a0:ca:d3:
         24:4c:30:81:1d:70:de:b9:30:70:fd:b4:83:75:63:90:78:3d:
         ed:11:bc:f4:d2:98:2d:c9:09:39:6d:1f:c7:b2:ae:db:99:c3:
         96:0b:d2:66:5d:b3:7a:50:2d:ac:3c:b8:ed:66:da:8b:8e:dc:
         7c:f5:2c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:50:15 2025 by rpki-client