Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/c4106caf-a2e7-3e4c-91b3-b1e887c6a9c7.roa
File:                     c4106caf-a2e7-3e4c-91b3-b1e887c6a9c7.roa (raw, json)
Hash identifier:          n00UzwQLdV0P9YnKs5R+kXE/t644AlGMP6svQYbUAaY=
Subject key identifier:   29:9C:B2:C0:BC:3C:22:AE:6C:73:B6:57:4B:7A:A8:97:EC:F8:6C:F9
Certificate issuer:       /CN=21adcbb8-b500-460f-90cb-bca0525aabcb
Certificate serial:       010D0C9F4328584B3C51AA5760C4FA1521980110
Authority key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/c4106caf-a2e7-3e4c-91b3-b1e887c6a9c7.roa
Signing time:             Thu 18 Sep 2025 13:00:41 +0000
ROA not before:           Thu 18 Sep 2025 13:00:41 +0000
ROA not after:            Wed 17 Dec 2025 14:00:41 +0000
asID:                     396982
IP address blocks:        170.176.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3c:51:aa:57:60:c4:fa:15:21:98:01:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21adcbb8-b500-460f-90cb-bca0525aabcb
        Validity
            Not Before: Sep 18 13:00:41 2025 GMT
            Not After : Dec 17 14:00:41 2025 GMT
        Subject: CN=36f68a07-b380-4092-8ae1-a22c29a29573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:83:46:b3:ac:7b:9a:fd:e7:1a:ac:0d:b8:84:
                    df:f1:91:2b:ec:c4:54:f3:86:f5:0c:1c:01:cc:77:
                    90:7d:d3:12:f9:37:d2:ae:98:f6:58:fc:4c:b1:82:
                    1a:b1:76:22:03:c1:11:2d:06:14:bd:de:e0:47:f6:
                    20:27:9d:05:db:a3:7f:4a:0f:f6:fc:17:2b:24:72:
                    51:b1:9b:c7:fe:a0:91:cb:41:eb:53:e4:07:93:92:
                    bc:5d:88:55:b6:d9:d7:a1:58:7b:f8:9d:62:20:87:
                    aa:3d:22:79:f2:8c:03:42:7e:1e:bc:e9:b5:70:9a:
                    c3:c3:e6:a8:83:42:ad:af:27:30:7d:7a:1c:6c:46:
                    d0:af:1a:73:49:3c:18:9a:0e:10:e6:3b:5c:64:b0:
                    56:7d:0b:68:10:2a:98:7c:1e:66:89:35:07:89:a0:
                    07:83:6c:03:34:9b:8b:5e:49:03:01:2b:7d:2e:49:
                    2c:b3:03:7d:85:db:b8:5a:e6:c5:96:81:7f:99:ce:
                    fb:54:43:78:d9:2f:8d:38:8e:17:fd:d5:85:42:22:
                    76:3a:6f:35:94:dd:35:e2:57:21:a2:c4:cf:48:c2:
                    e8:09:fd:bb:d4:3c:52:86:93:d8:e4:55:54:3e:e9:
                    78:54:ee:4c:b9:6e:f5:a4:e6:33:8c:ff:d2:e7:1e:
                    5b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9C:B2:C0:BC:3C:22:AE:6C:73:B6:57:4B:7A:A8:97:EC:F8:6C:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/c4106caf-a2e7-3e4c-91b3-b1e887c6a9c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl

            X509v3 Authority Key Identifier:
                keyid:62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:e0:6d:b0:ec:c7:41:52:d7:2d:85:f0:a6:71:21:18:31:73:
         2d:da:cc:e6:46:29:f0:46:95:3f:93:ec:28:b3:eb:6d:1f:ae:
         cd:d1:4c:d7:bf:fc:2b:77:76:4f:60:e6:fc:ed:49:72:77:40:
         57:b0:ca:3e:be:e9:0c:33:e3:6d:f6:a7:2d:1b:1e:61:a2:32:
         a2:4e:56:c3:47:98:66:8e:a7:9e:e1:c6:06:43:76:e5:87:db:
         4d:0b:42:98:9a:a6:f1:12:7a:af:9c:74:3d:65:fa:57:b3:0c:
         33:0c:f9:ef:50:0d:4f:3d:da:98:1d:99:da:dd:c1:d7:1e:53:
         93:1a:fd:e7:ea:4a:7d:6b:93:c9:8e:79:2b:54:54:b8:82:c0:
         44:80:f3:15:4d:83:78:22:e4:ba:83:fa:c6:0b:53:5f:41:ce:
         ae:03:8d:6e:1d:a6:94:07:fe:80:a3:83:cc:f5:c8:ca:fb:21:
         78:b3:a3:1c:ff:fd:ec:71:09:4e:ee:ae:5f:50:4a:d6:bf:25:
         7a:7f:81:91:e6:31:fd:b5:b6:06:9d:5a:ca:54:25:03:68:59:
         fa:aa:a6:f6:cf:5a:cc:e8:11:92:a3:86:b5:e5:5f:3d:01:6c:
         24:1d:0f:5d:a3:9f:93:13:b8:e6:da:c1:f6:a4:25:a6:9a:94:
         db:42:91:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:58:59 2025 by rpki-client