Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/86496a16-88a9-3767-866b-3cfa90b5926b.roa
File:                     86496a16-88a9-3767-866b-3cfa90b5926b.roa (raw, json)
Hash identifier:          kkkQVsegfTThWhAi6IS/AtPCLSX+MRFI4nYTU/X/TA0=
Subject key identifier:   1D:0C:42:45:3B:A3:C0:9D:FF:39:98:75:C1:4D:CC:D7:9C:6C:A4:B7
Certificate issuer:       /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial:       010D0C9F4328584B7B21F76E1BDFB904FC58BE00
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/86496a16-88a9-3767-866b-3cfa90b5926b.roa
Signing time:             Sat 11 Oct 2025 01:00:30 +0000
ROA not before:           Sat 11 Oct 2025 01:00:30 +0000
ROA not after:            Fri 09 Jan 2026 02:00:30 +0000
asID:                     5662
IP address blocks:        157.166.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:21:f7:6e:1b:df:b9:04:fc:58:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
        Validity
            Not Before: Oct 11 01:00:30 2025 GMT
            Not After : Jan  9 02:00:30 2026 GMT
        Subject: CN=3a89aa1c-3c4a-4028-a125-5dda2597fd1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:28:a1:0f:d7:85:91:cf:84:3d:c7:35:82:93:
                    8c:9a:03:e1:fb:f3:11:0c:82:b8:5b:79:e0:4e:18:
                    70:f6:77:61:32:92:eb:88:c6:6d:b4:37:63:d4:e9:
                    68:29:78:ab:8d:c6:a1:32:33:0e:49:18:fc:a5:80:
                    c1:63:1e:e9:31:89:8f:c2:67:d1:bb:d3:82:22:18:
                    80:ff:75:8d:5e:a3:6c:18:36:c7:f2:88:1a:2c:e8:
                    43:55:3e:a3:d6:24:23:75:e9:e7:aa:d0:4f:4f:b1:
                    bd:8d:c1:96:5e:73:d7:73:f8:a3:42:9a:84:c6:c7:
                    80:04:04:86:f9:8a:43:d5:d7:a9:36:f7:12:40:d2:
                    64:bf:4c:f3:87:0d:20:cc:df:cb:4c:3d:fd:17:6e:
                    bd:2c:30:b3:7d:74:26:e7:32:e9:2c:8a:f9:a8:20:
                    41:9c:96:66:65:aa:a0:71:93:20:56:1c:f7:b2:e6:
                    92:06:0f:f3:18:91:41:de:fd:b3:3e:83:0d:f0:c6:
                    42:80:bf:a8:5c:19:26:09:40:8d:c8:e1:79:53:c2:
                    a1:3d:26:5f:c1:f9:42:cc:27:97:ee:47:0f:12:3d:
                    c9:a4:43:26:22:12:ca:98:f7:99:07:45:cb:20:e6:
                    03:6d:0f:b0:06:fe:1a:16:0d:66:d5:1b:37:33:0a:
                    95:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0C:42:45:3B:A3:C0:9D:FF:39:98:75:C1:4D:CC:D7:9C:6C:A4:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/86496a16-88a9-3767-866b-3cfa90b5926b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl

            X509v3 Authority Key Identifier:
                keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.166.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:50:41:4d:81:af:7d:fc:c9:4e:d9:87:d7:c9:9a:ea:1f:0d:
         f4:f9:6d:30:e2:41:e6:c7:c5:c4:78:7b:47:4d:78:3c:b4:d2:
         b2:ca:14:cc:3f:18:b3:dd:f4:3d:e8:7c:c1:34:da:f4:4b:16:
         9f:a3:85:e4:36:33:ef:3c:ff:a5:60:b4:8f:8b:b8:b8:50:70:
         d4:a7:a5:3b:68:e9:2a:3f:e3:67:31:54:ef:9c:a6:dd:ba:af:
         34:4c:2c:dd:49:35:e6:5a:70:53:79:be:24:34:61:47:b0:39:
         cc:5c:0f:2c:1d:cd:96:83:ef:59:7e:c6:93:91:af:20:bb:7a:
         5a:5d:3a:8e:89:06:8e:c5:9f:6f:e3:43:93:93:17:b4:19:02:
         5a:0a:18:0e:ee:41:77:01:ab:a3:84:46:45:80:c6:38:77:27:
         b5:d6:d4:3a:19:81:51:ff:67:d6:b9:d0:17:8e:f9:f4:41:c0:
         0b:24:32:6e:ff:e8:df:f4:e2:f1:ba:ca:90:9d:fd:27:83:6f:
         a2:91:f3:6a:0f:b8:52:e7:14:c6:e0:c6:35:13:46:3e:d2:79:
         82:66:75:fb:ba:59:2a:e0:d5:de:bc:6a:b0:07:0e:ec:85:71:
         c7:b3:3b:fa:e6:b1:2c:8b:b7:69:f2:52:31:1b:af:80:1c:ba:
         46:1a:c5:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:17:15 2025 by rpki-client