Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/c29d35c5-5b67-36c7-8a5b-e6b1f3b82db7.roa
File:                     c29d35c5-5b67-36c7-8a5b-e6b1f3b82db7.roa (raw, json)
Hash identifier:          OcO9K6RmA2qkTpF9ut0yP5WesUasvDIwx9VoOKjJq/M=
Subject key identifier:   34:76:C9:EB:05:50:CD:7A:74:F3:26:54:BB:21:58:5B:59:D7:94:AC
Certificate issuer:       /CN=f9c367c2-ae39-45af-aac9-ca536571d493
Certificate serial:       010D0C9F4328584B95A79641DB69D531DCB8E0C0
Authority key identifier: 32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/c29d35c5-5b67-36c7-8a5b-e6b1f3b82db7.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     7381
IP address blocks:        142.0.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:96:41:db:69:d5:31:dc:b8:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9c367c2-ae39-45af-aac9-ca536571d493
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=76a712f1-df4c-4dfe-ad88-f9aba853882c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a5:b4:25:e3:56:f8:db:c2:9a:17:f2:f4:ca:
                    6b:03:f4:8e:0e:a4:97:9b:cf:f5:e0:7a:86:d0:e9:
                    c6:93:ec:0f:44:f7:62:74:1d:04:3e:1b:e7:91:2a:
                    fb:41:63:ab:3a:d8:b2:8e:f6:cf:e4:75:42:72:ac:
                    5f:49:16:46:f2:44:2e:ae:ad:98:c0:86:54:ef:fa:
                    e5:2d:12:c4:9b:9f:1a:30:c8:2f:b7:74:58:b8:67:
                    89:6f:cb:30:21:da:52:fd:27:af:fe:c3:3d:c6:dd:
                    78:cf:38:c1:38:08:2d:0e:9b:6c:08:0c:98:78:58:
                    f3:68:5b:fb:4d:a8:16:6f:0d:f4:0b:7a:b9:26:4a:
                    f3:2c:2f:60:a4:a0:d8:2f:58:ee:45:82:15:5e:0e:
                    85:b1:13:15:e6:95:0e:ae:a8:53:27:b2:ed:ae:9f:
                    51:24:9c:f5:df:48:11:82:16:7d:4f:9b:73:d2:53:
                    d5:92:8e:07:4f:68:c0:72:8d:af:14:97:72:6c:a4:
                    7e:c7:61:11:38:e3:14:7a:88:b9:dd:4e:db:29:a9:
                    4e:fa:ba:cf:82:5e:46:fa:2c:c8:89:75:e7:bf:85:
                    80:00:f3:1d:79:5b:94:e1:fe:09:4b:bb:98:e7:30:
                    03:da:25:62:7a:d7:58:5c:39:57:fe:f2:bc:3a:d2:
                    6c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:76:C9:EB:05:50:CD:7A:74:F3:26:54:BB:21:58:5B:59:D7:94:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/c29d35c5-5b67-36c7-8a5b-e6b1f3b82db7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493/f9c367c2-ae39-45af-aac9-ca536571d493.crl

            X509v3 Authority Key Identifier:
                keyid:32:99:71:66:3A:30:11:A2:F6:49:50:5B:33:D3:87:DA:7F:38:BD:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f9c367c2-ae39-45af-aac9-ca536571d493.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.0.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:94:a5:68:07:60:70:00:15:0c:07:dd:98:39:7b:c8:97:ff:
         02:61:33:34:ba:d4:88:a3:c2:76:18:e5:e4:e6:22:a5:1d:d3:
         dc:91:b7:98:0e:bc:65:61:f9:3e:a6:1b:a8:9d:ea:01:d6:c7:
         f8:81:61:75:1a:33:e7:aa:63:d9:e3:bc:fb:11:e1:91:83:01:
         04:fb:45:e4:77:53:77:b3:27:eb:9d:23:3c:ee:21:b2:6f:c8:
         fe:f7:f8:2b:b0:8a:6a:57:07:5e:bf:fe:52:2c:48:06:5e:26:
         3e:61:e2:a4:8f:96:c3:c2:22:b9:17:65:74:6f:6d:72:c0:9b:
         e1:3a:55:6a:5f:6f:77:38:3f:3d:fc:fa:1a:59:fe:ab:fb:24:
         c5:53:5c:df:92:35:27:3e:1d:7d:a5:d5:ca:48:7c:58:36:8f:
         37:12:b1:3f:d7:8d:07:a1:f5:42:44:bd:15:ea:13:d7:48:93:
         f1:e8:a1:61:9b:f3:37:5b:1d:55:6e:f2:7d:92:3d:4c:d3:fd:
         d7:2a:a2:57:92:cb:30:45:11:54:fe:60:6e:ff:60:b5:27:3e:
         99:a3:21:85:99:bd:d9:ce:e9:e7:c2:13:77:0e:9b:6b:8b:e8:
         5a:37:b8:a1:e8:0f:dc:e9:d3:d5:a9:ab:8b:ba:3d:46:54:22:
         85:ed:03:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:18:39 2025 by rpki-client