Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/cf03d614-cf19-3b6e-b2f4-8a7c2f3ce709.roa
File:                     cf03d614-cf19-3b6e-b2f4-8a7c2f3ce709.roa (raw, json)
Hash identifier:          9CBHXAoRthMFfNDoIKrftmRKzvSxPa8Ohk9SWILw3cY=
Subject key identifier:   86:11:15:90:A9:DE:11:A5:36:49:52:53:A2:14:78:F7:5B:48:E7:BF
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F4328584B9442220312B0953C3255C07C
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/cf03d614-cf19-3b6e-b2f4-8a7c2f3ce709.roa
Signing time:             Mon 20 Oct 2025 01:00:31 +0000
ROA not before:           Mon 20 Oct 2025 01:00:31 +0000
ROA not after:            Sun 18 Jan 2026 02:00:31 +0000
asID:                     215703
IP address blocks:        185.167.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:94:42:22:03:12:b0:95:3c:32:55:c0:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Oct 20 01:00:31 2025 GMT
            Not After : Jan 18 02:00:31 2026 GMT
        Subject: CN=4f851deb-7d12-4744-a050-535bc35426f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:67:c8:27:d5:a6:3d:45:e9:b2:88:7e:48:8b:
                    db:db:9b:09:47:f5:bb:58:0a:75:78:c3:e7:56:ed:
                    db:b3:49:1f:c2:18:bf:69:0f:c5:3b:80:74:88:13:
                    d5:fd:c3:ab:b9:b6:da:ed:be:f6:de:e7:b6:21:9e:
                    06:41:a0:49:dc:94:18:dc:3f:93:3c:b2:46:1d:7c:
                    5e:cb:30:2d:1a:20:9f:6b:4c:16:81:cc:c7:df:c0:
                    4d:ce:8b:8d:f3:9d:19:62:2e:5a:dc:e8:3f:c0:a0:
                    e0:eb:f1:04:3f:f3:c4:11:40:9e:48:5e:41:0f:72:
                    1e:bf:44:49:c6:a1:2b:d3:c0:43:45:71:80:68:03:
                    df:86:fd:31:d0:89:91:02:07:33:ec:c7:4d:25:95:
                    b4:3a:e2:3a:5c:02:72:0b:ab:4a:bc:ad:6a:5c:e1:
                    2f:c5:87:18:42:f1:d4:e7:21:2c:3d:1f:f8:85:60:
                    5d:94:ab:7f:d5:50:8f:6c:c3:f1:cf:fd:a2:19:68:
                    bb:6b:a4:b4:c0:fa:dc:34:b5:9a:96:2d:23:83:1a:
                    21:46:57:71:a2:07:1e:d6:8d:7a:f4:55:4f:30:ab:
                    54:f3:b3:db:3f:60:da:43:2e:93:1c:e5:74:94:4b:
                    fb:4d:b6:4d:ac:02:65:88:7a:a1:6a:05:10:bf:03:
                    f4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:11:15:90:A9:DE:11:A5:36:49:52:53:A2:14:78:F7:5B:48:E7:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/cf03d614-cf19-3b6e-b2f4-8a7c2f3ce709.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.167.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ba:d9:2d:a0:45:0a:ca:1a:67:94:a0:0a:14:aa:45:18:89:
         e0:0c:26:d7:30:0b:99:b4:d3:7f:2e:02:49:19:b0:aa:91:66:
         8e:86:e4:b5:d4:16:af:44:33:90:52:0d:6f:1d:f2:d8:ea:29:
         e5:38:67:28:d6:4d:a8:d6:fe:0e:09:b4:e6:86:fc:81:e1:c4:
         24:c9:78:cc:ba:a7:8f:36:b2:ad:bc:f9:2e:77:04:dc:f1:8e:
         a6:46:60:76:47:54:92:a9:6e:24:7e:23:b0:1f:54:01:1e:84:
         22:44:49:98:3a:74:e7:8c:32:32:d6:dc:b2:65:14:c9:30:4a:
         82:02:29:36:4f:da:f7:db:d5:5b:55:f1:52:70:48:b4:b9:29:
         64:bb:ca:e5:df:84:f6:94:63:7e:ea:2e:22:12:d2:bd:c6:16:
         05:b4:29:3e:47:35:97:e2:9d:59:3c:f2:7f:e4:35:01:6b:19:
         9c:1c:fd:5f:c8:81:61:e7:07:06:fb:e4:c8:77:0b:88:27:40:
         1c:ae:f3:4e:2e:e3:22:ef:da:41:84:1b:88:9e:c7:70:93:e1:
         e6:79:24:0d:9a:a8:41:85:4c:e0:51:a2:ff:f6:d6:f3:12:e0:
         aa:f6:7a:08:d8:c2:7a:ab:57:4f:cd:dd:b3:a1:c6:21:be:93:
         da:62:38:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:29:44 2025 by rpki-client