Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f016cdd3-f47d-3ee5-b70c-efb1b8bf43d0.roa
File:                     f016cdd3-f47d-3ee5-b70c-efb1b8bf43d0.roa (raw, json)
Hash identifier:          ZOufh49/DBsxGl2smwTzcpAX/ICniwQLi0ECyecNesQ=
Subject key identifier:   2E:60:98:37:56:CD:6D:C5:32:92:32:45:38:15:78:70:37:16:51:97
Certificate issuer:       /CN=209f0328-0af3-4de3-a043-8072346acdf7
Certificate serial:       010D0C9F4328584B8EACD6F39AB1DDA6D3424A00
Authority key identifier: B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f016cdd3-f47d-3ee5-b70c-efb1b8bf43d0.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     7782
IP address blocks:        198.163.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:d6:f3:9a:b1:dd:a6:d3:42:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209f0328-0af3-4de3-a043-8072346acdf7
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=ec0b14bc-17dd-476a-9a26-387d0e1c9886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0d:20:43:0d:b5:37:df:69:b1:5b:6f:be:da:
                    84:48:ac:59:2e:b0:68:e6:65:ea:ef:92:05:d6:f5:
                    f7:16:44:f7:ca:5f:1b:e9:ff:fd:f1:92:9e:96:03:
                    0f:82:2d:bc:d9:ea:fc:b4:6e:1f:13:ad:7b:28:9d:
                    2b:5f:d8:b0:7d:2d:b3:7f:c3:22:e3:0b:3e:e5:e7:
                    b1:86:72:db:8d:ad:75:6a:f0:85:4a:b1:2f:cb:66:
                    b9:1e:20:06:4f:3c:1f:35:54:8b:cb:8f:cf:cc:35:
                    37:a5:6c:b2:22:d2:c2:c7:c3:6c:49:10:a4:b1:f2:
                    4c:ce:fb:9c:06:43:78:0f:5c:00:41:0d:bf:63:46:
                    85:06:53:23:e2:8d:07:5d:17:fb:cd:82:26:37:ca:
                    49:c9:dc:f8:9b:55:71:bb:61:d9:87:6d:7e:e1:eb:
                    ed:a2:bf:77:b9:8d:c9:a3:32:e7:15:0b:fd:90:f9:
                    c6:ac:83:22:4d:b6:d9:df:a7:41:41:99:38:22:f9:
                    92:41:65:04:62:26:be:6a:6d:fd:b7:4d:5b:9c:98:
                    0e:25:69:fe:b2:cf:0c:cf:71:5c:72:38:b7:8a:20:
                    9a:b9:c7:8d:44:87:d2:ef:05:45:cd:77:9c:f1:38:
                    ce:2d:72:f0:03:2f:19:63:9d:86:9a:f4:0a:f8:28:
                    89:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:60:98:37:56:CD:6D:C5:32:92:32:45:38:15:78:70:37:16:51:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/f016cdd3-f47d-3ee5-b70c-efb1b8bf43d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7/209f0328-0af3-4de3-a043-8072346acdf7.crl

            X509v3 Authority Key Identifier:
                keyid:B2:82:2A:D1:B2:36:29:4D:B4:48:4F:CE:41:CC:7A:22:94:4B:64:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209f0328-0af3-4de3-a043-8072346acdf7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.163.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:15:e4:71:1c:15:a8:52:44:f8:03:2e:33:20:34:a8:67:15:
         6b:b3:6b:b2:1b:b8:6b:7b:07:5a:76:75:3c:5b:c0:25:c9:81:
         98:b2:24:45:08:3a:0e:0f:c6:2a:d0:e2:aa:9d:7e:8b:9d:35:
         f1:22:f5:40:f2:15:e4:41:dd:af:37:bd:f2:fc:58:ac:5c:be:
         74:9a:82:b4:dd:10:11:1b:ee:04:1d:fa:43:c7:3e:8c:03:19:
         a9:fe:96:0c:62:e6:c9:85:31:b3:a2:e8:81:55:27:da:1e:42:
         c8:ae:8d:8d:b2:68:cf:9f:9a:ed:16:b0:c3:1b:c7:9b:ed:5f:
         60:29:49:d6:b8:34:68:e5:67:d1:f1:45:80:bb:57:17:95:0e:
         4f:28:10:29:86:8a:f5:72:d1:a2:78:b9:2f:68:07:1e:d3:66:
         d7:1c:8b:c1:89:f1:be:4d:ce:e7:94:5e:fd:9d:7f:47:1e:e4:
         a3:f3:49:00:24:1f:86:6d:fe:70:1e:64:c3:02:d2:f5:34:27:
         b7:47:79:2b:b6:d8:3e:66:aa:85:3b:74:a8:62:6e:97:3f:8a:
         d0:47:4e:d3:42:d4:2e:d9:f0:e0:5a:e6:a1:01:d9:b4:de:df:
         04:28:2e:54:f0:c4:2f:13:ce:1c:71:d2:a5:1a:5e:9b:3d:b2:
         7e:e0:fc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:34:53 2025 by rpki-client