Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/a805dcee-de5f-32cd-8460-f5c507fc9aac.roa
File:                     a805dcee-de5f-32cd-8460-f5c507fc9aac.roa (raw, json)
Hash identifier:          O003HzZ1f+uGNTrcsPFMzI1cKFtUEFzDMT6joNu4KK4=
Subject key identifier:   96:B5:1E:DC:D2:36:1C:B5:72:A4:7D:12:E9:6A:88:3D:B4:32:FE:E5
Certificate issuer:       /CN=b8a29c46-e0f1-4edc-988a-9420affbc339
Certificate serial:       010D0C9F4328584B0746BC954FFCC322F0B25640
Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/a805dcee-de5f-32cd-8460-f5c507fc9aac.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     205627
IP address blocks:        170.2.122.0/23 maxlen: 24
                          170.2.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:bc:95:4f:fc:c3:22:f0:b2:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=9bcd74a9-4480-4f92-b722-01b3e67325d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:34:ba:b1:39:46:b3:84:f3:91:11:04:6b:1c:
                    f0:4a:77:5b:60:3a:7e:cf:fb:93:4a:c4:30:b1:42:
                    f1:9d:41:8e:15:d1:b6:36:7e:16:25:6b:30:46:50:
                    31:70:9a:b4:9b:4e:ed:bf:61:0e:ee:54:02:05:f5:
                    1d:ce:9c:6e:22:2b:c2:9d:ea:04:d6:2a:78:45:fc:
                    10:1f:84:05:c2:80:b8:13:6e:93:88:5a:db:4d:5e:
                    ae:a5:db:a3:4d:08:38:db:c7:4b:6f:b7:d7:24:14:
                    6f:ed:cb:03:b2:fa:45:90:94:73:42:c9:d3:4b:de:
                    85:84:90:20:c5:4c:44:a9:fc:7e:26:a0:3a:4b:4a:
                    ba:ca:f4:ab:93:3d:bc:f2:9b:2f:de:5f:2a:1c:94:
                    5a:7f:dd:2c:f6:a0:eb:b3:d7:77:c8:35:bb:72:1f:
                    5e:de:13:af:90:f5:cf:10:40:31:36:9d:85:1f:ec:
                    eb:1b:0a:40:91:35:14:54:f0:4c:ad:71:9b:32:17:
                    6d:d4:53:e4:c9:41:00:2a:e4:44:b2:7a:18:e4:1d:
                    97:79:7b:87:59:a7:b3:2e:55:08:83:ca:9b:ec:71:
                    da:64:6d:24:a5:4b:3a:62:d3:d4:ef:f7:6a:ef:fd:
                    46:6c:56:25:54:1b:b6:be:6a:99:19:30:c1:28:de:
                    c2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B5:1E:DC:D2:36:1C:B5:72:A4:7D:12:E9:6A:88:3D:B4:32:FE:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/a805dcee-de5f-32cd-8460-f5c507fc9aac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl

            X509v3 Authority Key Identifier:
                keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.2.122.0-170.2.125.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:32:f1:66:f1:f2:a7:c2:8f:4a:be:f7:41:ab:25:5b:75:9b:
         72:0f:3a:bb:f1:63:a0:62:10:45:a3:8e:83:5f:11:a3:0f:0a:
         95:ac:32:37:30:53:57:48:19:8f:b8:af:99:2e:5a:f0:c7:66:
         58:ee:0d:c7:bc:04:a1:35:1f:0e:ff:d0:38:bc:eb:4e:c6:1c:
         01:66:11:8a:9a:d9:a9:b0:e2:09:50:94:ca:c3:68:dc:91:c0:
         19:6a:d3:03:d9:54:4a:9b:96:d3:95:e8:5b:3f:da:d8:a5:22:
         ba:e8:7b:58:70:c0:af:1f:0f:b4:0c:8c:fc:40:d5:60:6e:49:
         42:1d:4e:22:ba:8a:78:96:09:de:cb:2e:15:47:79:14:ff:0a:
         a2:38:9a:d7:58:15:50:8b:08:a7:4d:a2:13:f7:c2:46:88:fe:
         72:12:89:a1:42:af:cc:36:aa:cf:28:a8:fe:6a:ee:56:4c:8a:
         74:00:2e:45:0f:5a:b5:e4:8c:c1:7e:2e:28:29:5d:4f:fc:de:
         3e:d6:58:e6:b8:c8:f4:3c:bf:80:7f:8e:df:67:f0:69:c2:24:
         40:90:02:2e:5e:e8:da:7b:1b:88:e6:c3:58:41:ea:2d:a7:eb:
         6a:78:26:71:ac:e4:e7:60:73:de:eb:dc:86:db:21:11:bc:2f:
         83:bf:03:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:50 2025 by rpki-client