Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/52a98281-143a-37cd-966c-808bd9db6981.roa
File:                     52a98281-143a-37cd-966c-808bd9db6981.roa (raw, json)
Hash identifier:          XGS3VBvkDvfYEAUjKK0UMgJn8GLlUllXF888X4R8s50=
Subject key identifier:   90:AC:4A:53:22:31:70:E6:F7:33:96:F1:CC:A9:80:19:E7:13:DA:AC
Certificate issuer:       /CN=bbece124-3380-4cb4-8651-ad5e1e27f3f9
Certificate serial:       010D0C9F4328584B92DD919D51AE2FF00F8B4E40
Authority key identifier: 2F:61:29:72:8E:A3:B0:A9:9A:8E:D4:41:F0:3B:9C:8B:8E:65:12:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/52a98281-143a-37cd-966c-808bd9db6981.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     12099
IP address blocks:        162.82.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dd:91:9d:51:ae:2f:f0:0f:8b:4e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbece124-3380-4cb4-8651-ad5e1e27f3f9
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=0342a411-7867-4d93-baf1-f4bab08a0b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:87:3f:b5:7d:b5:0b:66:57:27:80:e9:0b:f2:
                    77:52:ff:13:95:93:ba:2c:2e:37:7c:df:e2:12:23:
                    54:c6:6e:e4:b4:af:6d:ea:f4:51:01:f5:55:e9:a6:
                    12:7c:4f:e3:0d:d2:56:f5:10:e0:ff:19:35:9c:47:
                    1e:94:5a:55:6e:8b:38:c0:17:5d:2a:f4:d9:ec:a8:
                    67:d3:be:e6:7c:c8:2b:bf:5e:5a:8a:13:89:51:fb:
                    1b:eb:b1:da:7a:10:68:c0:2d:d0:07:01:9c:55:58:
                    76:4e:63:9b:e0:de:cb:df:ca:5a:c7:74:93:e7:36:
                    09:3e:bb:c2:21:3f:98:fc:71:1b:b0:37:b5:53:cd:
                    42:63:49:09:fe:e9:53:8b:94:67:59:a3:99:6f:b6:
                    2f:5c:77:50:41:74:1c:73:c6:7b:57:f2:a2:d0:3f:
                    db:47:47:99:4f:1b:46:8d:9c:dc:6e:1a:cb:17:08:
                    7d:0c:1c:dd:51:f4:ca:3b:71:be:b0:5f:f1:2a:5c:
                    67:93:61:81:d0:e9:a5:ca:31:5d:55:4d:49:4a:33:
                    53:6b:93:2e:d0:e2:d3:e6:be:af:df:84:ed:1e:bc:
                    45:0d:2e:22:06:1e:3f:12:f2:40:7e:13:3d:12:4f:
                    ee:d9:dc:85:72:10:b7:65:20:22:db:7c:46:9d:77:
                    24:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:AC:4A:53:22:31:70:E6:F7:33:96:F1:CC:A9:80:19:E7:13:DA:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/52a98281-143a-37cd-966c-808bd9db6981.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9/bbece124-3380-4cb4-8651-ad5e1e27f3f9.crl

            X509v3 Authority Key Identifier:
                keyid:2F:61:29:72:8E:A3:B0:A9:9A:8E:D4:41:F0:3B:9C:8B:8E:65:12:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bbece124-3380-4cb4-8651-ad5e1e27f3f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.82.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:20:12:2c:08:5d:08:0f:bf:60:5e:62:fb:62:43:d5:1e:c4:
         a1:66:c0:d9:42:cf:80:bc:a5:5c:35:17:0f:70:07:5e:56:f0:
         0a:d9:08:ce:e4:b3:ae:d2:c4:68:e6:44:50:32:6a:d5:39:39:
         8f:bc:89:00:a2:ab:f5:80:4d:eb:ac:77:06:c3:bc:69:95:8a:
         53:82:be:75:d0:13:cd:4b:1c:97:92:d1:d5:0b:e4:5f:90:77:
         11:0a:7c:39:a5:50:3f:99:98:72:1a:d6:c7:a6:9f:e0:0b:4a:
         be:30:fc:cc:98:57:b3:ed:68:a8:43:05:a8:1b:e1:69:48:e1:
         85:c2:a6:80:57:27:f9:6f:82:b6:d4:21:e8:56:d9:30:d7:df:
         27:22:ec:13:c1:cc:ea:ca:50:65:e9:ee:c5:63:e0:c2:9f:62:
         c0:50:36:55:53:7f:11:44:8d:31:b4:44:a6:1f:e4:93:bd:30:
         b8:ad:1f:13:b0:cb:4a:4c:5c:3f:e7:5b:5d:0f:e0:65:68:a0:
         07:1d:5d:6a:cb:63:68:8b:61:e8:52:d0:95:3e:1c:9a:99:ad:
         e7:66:f2:48:ad:8f:61:b9:1f:4d:89:db:5a:d0:d8:fe:06:63:
         80:ad:ee:81:95:df:5f:0c:5d:8c:23:85:2e:87:f6:21:96:c3:
         6b:67:d1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:04:50 2025 by rpki-client