Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/10efffec-8118-3912-b378-fa58a2bf751a.roa
File:                     10efffec-8118-3912-b378-fa58a2bf751a.roa (raw, json)
Hash identifier:          4k+AJ43j2vAZrkuygO0TKmqgdu+c9JT4ohBqsR6uyqc=
Subject key identifier:   47:55:3C:FD:73:E0:12:AB:DC:9D:44:26:88:48:C8:F5:5F:41:01:30
Certificate issuer:       /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial:       010D0C9F4328584B6D2CB76A05E1BAF96E2C7100
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/10efffec-8118-3912-b378-fa58a2bf751a.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     18934
IP address blocks:        142.202.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:b7:6a:05:e1:ba:f9:6e:2c:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=9b5c9565-44f2-41ee-b5c2-7058ce87a02c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f4:b0:50:0a:36:91:91:29:36:32:59:ab:3c:
                    ec:2d:7f:4a:d8:08:ee:1a:e0:72:eb:49:af:7a:0a:
                    b9:64:8e:05:27:a2:b6:89:91:af:69:28:36:b3:8b:
                    8d:05:5c:75:ff:1a:7a:c6:87:56:da:6a:68:e2:e7:
                    60:53:e5:46:94:2f:c7:a3:80:dd:12:8f:ac:4c:73:
                    18:19:d4:ab:1d:7a:b2:ea:4e:aa:c0:e6:d9:06:09:
                    23:86:66:60:25:ac:b7:df:5f:10:49:f3:59:89:23:
                    4e:60:e9:69:c1:1c:58:d9:eb:7c:2c:f9:64:a7:2f:
                    09:b6:13:46:fc:cd:0c:bc:e0:81:39:11:e9:f5:47:
                    d1:cf:0e:54:8d:d9:38:0d:fa:c4:81:93:fb:c5:a2:
                    2a:9f:08:4b:62:f7:32:97:b1:45:9e:b5:bd:d2:7f:
                    7a:ac:11:33:89:6f:53:9b:01:b9:ff:6c:3f:f4:08:
                    2b:47:c4:8b:cd:ed:82:a6:00:6e:44:43:00:28:f5:
                    5f:21:9a:30:8e:13:72:d4:25:e2:a9:af:1c:15:20:
                    82:d8:1e:a2:19:ad:45:5e:9a:b0:20:38:c1:5c:ce:
                    69:39:7e:3b:10:0a:5a:00:10:e4:52:3b:65:88:4a:
                    40:39:9a:8c:6f:26:7d:22:e2:0b:ef:74:a5:70:cb:
                    1d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:55:3C:FD:73:E0:12:AB:DC:9D:44:26:88:48:C8:F5:5F:41:01:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/10efffec-8118-3912-b378-fa58a2bf751a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl

            X509v3 Authority Key Identifier:
                keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:03:c1:02:e9:50:68:b6:3d:ca:7f:80:72:75:c8:bb:3c:49:
         9f:d2:d1:d3:66:77:79:e5:12:e4:cd:1f:a5:9e:e0:db:92:c9:
         21:4b:8c:1b:8a:14:a8:6b:02:82:6d:7f:89:57:b0:e8:3e:a5:
         2c:68:dd:69:dc:d2:97:57:86:41:54:8f:c3:8c:8a:13:e1:ea:
         85:36:66:d2:8c:df:15:aa:eb:fe:39:c1:08:9e:69:bf:a7:ac:
         3b:eb:06:ed:39:3c:22:1b:0a:3d:57:75:ad:84:fa:8a:42:8f:
         fe:8d:cc:04:fb:ec:6f:49:8a:7a:67:8e:48:9e:27:8c:02:dd:
         20:9b:06:17:69:5b:58:59:c9:4e:f4:c2:ea:75:03:18:9e:68:
         e6:76:4a:09:bf:10:8c:77:79:20:d3:3d:bd:36:ae:79:ae:e5:
         99:ef:34:48:43:e1:2b:d0:99:0f:bb:d9:6f:fc:8e:5a:e2:8a:
         9e:55:57:c7:72:dc:7e:d2:11:8b:3a:91:e7:34:99:fe:4a:0d:
         5d:69:df:e9:b6:bf:77:d5:a1:f7:05:97:ee:c0:9a:c0:6e:72:
         0d:06:64:a7:d7:34:91:a5:c3:9b:25:c2:6f:90:b7:15:98:39:
         95:b2:71:0c:4d:e2:e8:cb:08:80:a2:de:3e:00:1e:eb:e6:ee:
         3d:f8:cb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:02:40 2025 by rpki-client