Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/95265782-205d-35fe-82b5-76121c64abf5.roa
File:                     95265782-205d-35fe-82b5-76121c64abf5.roa (raw, json)
Hash identifier:          aCcfUDOo+xhWzqeD1owVQ763Hr+rE+mcESMLlJAL0qQ=
Subject key identifier:   59:BE:9A:EB:BE:45:12:81:3D:BD:0B:97:26:96:CF:0B:AE:74:23:AF
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584AE5CB32EACB35D5ED26FA2900
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/95265782-205d-35fe-82b5-76121c64abf5.roa
Signing time:             Mon 18 Aug 2025 13:10:18 +0000
ROA not before:           Mon 18 Aug 2025 13:10:18 +0000
ROA not after:            Sun 16 Nov 2025 14:10:18 +0000
asID:                     13737
IP address blocks:        162.255.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:cb:32:ea:cb:35:d5:ed:26:fa:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Aug 18 13:10:18 2025 GMT
            Not After : Nov 16 14:10:18 2025 GMT
        Subject: CN=a3800a10-5a64-4ee2-9868-47becd002376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:27:15:7f:65:2a:9e:ea:0b:ad:d7:4f:37:2a:
                    86:8c:13:37:96:fa:a5:2a:6b:00:be:13:7f:4b:da:
                    35:2d:22:23:b3:5f:0a:c1:ef:30:f9:4f:8b:f7:fe:
                    11:eb:f5:7c:e3:a0:59:d9:82:93:79:86:d1:53:e8:
                    2f:6b:d7:c5:cf:f0:cb:90:9c:e6:86:18:95:6a:c0:
                    49:b7:d9:00:48:77:ab:f9:77:d4:b6:9c:db:73:ad:
                    b8:8b:f5:87:92:9c:bf:46:6a:c0:f8:89:a7:a5:3f:
                    a2:8f:44:8f:07:e1:7c:87:43:b6:0d:f0:a5:5b:71:
                    3d:c1:c0:b4:50:43:3c:72:13:23:43:13:30:07:81:
                    fe:15:d0:f1:b5:76:aa:2b:c5:ff:69:f9:0c:d1:38:
                    9d:66:dd:ff:a1:74:6a:03:f2:a3:3d:ad:42:33:63:
                    c4:7c:b5:b3:c8:4e:19:36:c1:c2:53:89:c8:43:22:
                    5c:d8:1a:b5:a4:7a:56:ab:9a:c0:19:07:88:8f:2f:
                    a4:71:e7:a6:ec:65:c3:5b:27:06:cf:21:5a:6e:f6:
                    70:f3:48:15:87:1b:70:eb:cf:49:d5:5b:56:da:74:
                    65:3f:af:22:0b:aa:ad:fd:9c:1a:73:75:82:d4:8f:
                    67:5e:41:61:9a:85:32:7c:e8:77:45:5d:9a:89:b8:
                    a3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BE:9A:EB:BE:45:12:81:3D:BD:0B:97:26:96:CF:0B:AE:74:23:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/95265782-205d-35fe-82b5-76121c64abf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:08:3f:b5:c7:c0:95:5b:ee:80:3d:91:98:2c:1d:40:90:9d:
         a5:8f:c7:d3:e5:f1:2f:1a:60:03:d7:19:d5:de:c7:2d:3f:30:
         a4:68:31:cf:a1:48:6b:d7:8b:da:e2:1a:f1:d5:9c:64:3b:48:
         1d:e5:a0:bd:80:01:cd:65:11:73:4b:98:bf:a2:a5:bb:a3:cf:
         f5:cd:9d:6c:82:38:6e:da:d1:aa:08:97:cf:10:a7:8c:75:cc:
         0c:2b:01:41:c7:80:7f:59:35:24:a8:68:89:b1:d1:fe:0b:b7:
         38:12:70:89:ce:86:95:e6:bd:ed:77:51:df:03:a6:f1:93:40:
         c9:09:31:09:47:ed:34:d3:52:c7:21:81:7b:72:aa:c0:3b:93:
         2e:fc:27:70:1d:12:d8:ee:48:28:0b:9d:7d:b1:25:37:59:2f:
         5d:01:00:72:63:42:6e:e4:db:b4:e2:c8:c9:a2:b8:e0:a2:7a:
         36:0c:a8:14:e0:9b:71:1c:7a:72:24:cc:e8:ab:64:42:4e:7f:
         f1:e3:ee:5e:0a:5e:d2:5f:e6:ef:50:00:99:ef:9e:33:c2:d6:
         41:84:98:f8:7a:26:80:cf:07:6e:cc:1b:ec:dc:ff:6e:1e:b3:
         38:c3:83:68:4c:57:c4:a9:ad:f9:06:ef:d1:b5:d5:4d:88:c3:
         29:e5:5a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:16:28 2025 by rpki-client