Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/471534a4-8e54-3d56-a8d8-cfce3ffed4a6.roa
File:                     471534a4-8e54-3d56-a8d8-cfce3ffed4a6.roa (raw, json)
Hash identifier:          A8qrSy2ltwp8Vg8zXQUIbtBqiZ3iGy1wOIHg0oufDfQ=
Subject key identifier:   74:B4:35:77:AD:B2:7F:B0:55:AF:09:D9:D9:0D:3A:A4:CB:37:7D:6D
Certificate issuer:       /CN=209f0328-0af3-4de3-a043-8072346acdf7
Certificate serial:       010D0C9F4328584B8EACCA00146221EC66913C80
Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/471534a4-8e54-3d56-a8d8-cfce3ffed4a6.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     7782
IP address blocks:        162.218.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:ca:00:14:62:21:ec:66:91:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=baf0090e-2180-4f6b-abf3-1df6e9fc375e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:80:56:91:7f:b4:02:c9:ba:a7:91:38:ee:9e:
                    7a:d4:5b:ad:af:0b:21:ed:a9:63:84:67:82:5b:c3:
                    54:1e:33:02:8b:e3:1b:f7:71:20:d0:85:d6:3a:b4:
                    e1:66:60:90:31:03:5f:bf:ce:a4:77:99:7c:96:e6:
                    6c:8b:c6:19:4f:85:7d:cf:27:6a:f8:16:8a:ab:04:
                    6b:b7:78:13:8d:01:aa:35:37:91:92:5b:aa:78:d4:
                    dd:ff:30:e1:38:44:16:09:9c:02:22:1e:4d:b6:27:
                    6a:c2:5c:e6:67:1a:44:fb:0e:58:bd:86:06:62:3a:
                    a9:18:4d:0a:19:68:f1:b6:44:e1:2a:62:86:32:7b:
                    e6:26:e0:a5:42:e0:6d:ef:f4:d9:2a:8e:ac:d1:e4:
                    7f:78:c5:22:ac:ef:ca:e2:82:aa:40:8d:24:bd:0c:
                    5d:76:7e:ac:23:10:c7:d3:0f:b4:a3:00:3f:80:b8:
                    94:87:4a:cf:91:3f:02:9e:57:18:02:2f:e1:e6:fe:
                    3a:dd:a8:10:75:f1:2c:dd:a6:4a:72:5d:8a:50:16:
                    2d:e4:c1:5b:9f:d6:53:31:3e:0c:56:cc:b2:5e:47:
                    81:17:5c:db:b6:30:9c:1f:5c:3b:9e:51:3b:78:49:
                    16:e8:2b:31:56:f6:a2:7b:cb:bb:d9:48:8f:3e:f2:
                    83:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B4:35:77:AD:B2:7F:B0:55:AF:09:D9:D9:0D:3A:A4:CB:37:7D:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/471534a4-8e54-3d56-a8d8-cfce3ffed4a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl

            X509v3 Authority Key Identifier:
                keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:08:c5:07:50:37:59:f3:06:06:a5:ad:f3:25:8a:f9:a6:43:
         4c:c8:9c:a7:20:9a:18:53:ee:3a:ae:dc:a1:3d:22:3a:5d:69:
         18:f4:c8:4e:ae:cc:b4:88:4f:b5:a9:d3:ad:e8:c3:ce:19:d4:
         d1:fb:7b:d9:99:6d:d9:cc:7a:c5:0e:c2:74:ba:6e:23:6b:c7:
         14:4d:fa:47:d6:a2:59:58:a4:36:71:35:fc:f7:bb:0e:9e:a9:
         7a:b0:fa:06:1d:bb:66:16:ef:1f:56:2f:c6:3e:76:b0:5e:67:
         33:0b:ec:89:e3:cd:2f:32:c8:bd:fd:83:5a:e2:12:99:9d:aa:
         11:5a:ea:f3:13:19:36:31:9d:17:87:d2:f4:66:48:74:24:4c:
         9f:19:18:24:23:33:43:6f:98:eb:80:cc:57:8a:09:29:98:6b:
         f2:18:82:3c:8d:68:3a:60:45:37:16:d4:8a:3e:e7:49:70:83:
         9d:81:72:16:f8:91:3c:c3:1e:ca:33:dc:55:32:76:22:02:31:
         1d:d1:e3:97:61:84:d9:48:d4:8a:80:d5:b4:2f:68:79:bb:89:
         05:e4:66:d6:ef:b7:33:c9:cb:87:fd:fc:5d:b5:f7:ef:db:0d:
         a0:b0:d4:cf:85:6b:68:69:e4:43:64:b7:55:ad:62:1b:53:57:
         45:be:e9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:19:28 2025 by rpki-client