Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/f4f92239-0f35-32a3-8dc4-79ea4b08bcf1.roa
File:                     f4f92239-0f35-32a3-8dc4-79ea4b08bcf1.roa (raw, json)
Hash identifier:          g94i/BHkF0yaPB8S5PuK6gh/qImkMoY8mbqUkwBqRhY=
Subject key identifier:   18:B3:BA:2C:20:DD:68:3A:AD:4B:A9:7D:B9:56:6A:5E:31:2E:49:07
Certificate issuer:       /CN=c8bca10d-6445-4407-bd16-6d0c90e9bfd5
Certificate serial:       010D0C9F4328584B7A2C861FA26FCBD2BB8AACC0
Authority key identifier: E9:6F:EF:D0:13:5C:EE:7D:99:FC:6E:21:46:72:23:EF:BA:A0:75:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/f4f92239-0f35-32a3-8dc4-79ea4b08bcf1.roa
Signing time:             Fri 10 Oct 2025 16:46:02 +0000
ROA not before:           Fri 10 Oct 2025 16:46:02 +0000
ROA not after:            Thu 08 Jan 2026 17:46:02 +0000
asID:                     16509
IP address blocks:        130.12.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/c8bca10d-6445-4407-bd16-6d0c90e9bfd5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/c8bca10d-6445-4407-bd16-6d0c90e9bfd5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:2c:86:1f:a2:6f:cb:d2:bb:8a:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8bca10d-6445-4407-bd16-6d0c90e9bfd5
        Validity
            Not Before: Oct 10 16:46:02 2025 GMT
            Not After : Jan  8 17:46:02 2026 GMT
        Subject: CN=1ee67774-0ad9-4020-ae38-0e317352bd92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:44:ff:84:80:c4:7b:e3:66:a5:59:97:64:c1:
                    cd:dc:2d:1b:b5:dc:18:f2:5e:c9:de:ac:5f:71:42:
                    38:c3:84:51:53:a5:e7:85:3f:e8:cf:ae:ec:61:ac:
                    ce:2a:93:5a:d8:2d:b3:41:00:58:f0:08:68:d6:44:
                    7d:04:13:16:ac:1c:b1:fc:14:a5:df:05:6b:df:40:
                    10:1e:3c:ed:29:b1:13:ef:b0:9e:7d:21:0e:90:e2:
                    43:2c:8a:ce:b4:88:56:90:02:66:70:ed:c4:bf:dc:
                    95:f9:83:f8:7f:d6:5e:48:56:1c:ef:90:91:cc:8c:
                    49:46:82:b5:8d:b5:09:c2:98:38:ad:cd:24:6a:1e:
                    cb:8d:80:fe:68:20:59:61:57:b8:67:94:7c:93:bb:
                    26:fe:21:2c:e7:bf:d4:50:4b:8f:dd:84:63:c0:85:
                    66:f3:6b:51:53:af:f6:06:4e:34:8b:94:1d:7b:ff:
                    b9:df:30:59:96:7d:cd:ce:36:6c:bc:2e:d5:7e:43:
                    43:dc:72:78:c0:5a:a8:cb:33:73:93:25:56:88:65:
                    cf:45:4c:b6:88:28:f2:c0:be:2e:f2:cf:ce:33:93:
                    1f:da:a5:17:0f:8e:72:70:03:4b:e3:d1:0b:3c:5a:
                    45:88:ed:54:e4:f6:6f:c5:86:fc:0a:50:17:7b:f6:
                    1a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B3:BA:2C:20:DD:68:3A:AD:4B:A9:7D:B9:56:6A:5E:31:2E:49:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/f4f92239-0f35-32a3-8dc4-79ea4b08bcf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5/c8bca10d-6445-4407-bd16-6d0c90e9bfd5.crl

            X509v3 Authority Key Identifier:
                keyid:E9:6F:EF:D0:13:5C:EE:7D:99:FC:6E:21:46:72:23:EF:BA:A0:75:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c8bca10d-6445-4407-bd16-6d0c90e9bfd5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:70:33:bb:56:02:20:43:9f:8c:80:87:cd:88:0d:0b:de:4b:
         c6:64:2f:57:c7:f9:7c:d5:a1:e4:5d:0e:17:17:17:7f:2c:73:
         b5:f7:4a:a7:a6:ea:ed:b6:c6:07:14:f2:65:8a:b5:76:98:47:
         66:26:e0:cf:3c:55:78:ae:76:24:f3:fc:d4:90:10:e3:57:88:
         23:da:3d:f5:1c:fb:e9:23:1d:b9:ac:a0:88:f8:19:0d:4e:6f:
         27:0e:25:2a:a5:9f:8f:32:5b:fd:e0:c2:59:8e:67:0a:cc:da:
         fe:51:b6:79:9b:66:66:cb:17:02:96:2c:16:3b:14:52:25:25:
         ef:a8:d0:7e:fb:18:dc:36:1e:36:37:a3:40:cf:cc:29:84:5b:
         87:9b:c5:72:f7:45:1e:42:89:64:ef:da:72:41:11:2d:ee:68:
         ee:58:df:8a:b5:41:39:3a:f9:d4:8b:56:55:de:d6:09:f8:62:
         8b:ae:00:17:83:fb:ce:2b:b8:4b:9c:65:df:7e:64:f8:4f:be:
         30:01:ef:94:56:e6:85:f8:0d:57:0b:f4:36:e4:29:57:d6:ba:
         00:cf:1f:ac:be:91:28:8f:b8:0f:bf:45:79:fa:32:7a:22:7a:
         bc:68:00:66:51:04:38:3d:53:ae:bc:90:16:a9:cb:0a:b2:73:
         04:9a:20:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:58:51 2025 by rpki-client