Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5b16165-c3bc-4cf0-8f84-91d78ba3e148/758501b3-445f-3830-9d3d-e2b723340bfc.roa
File:                     758501b3-445f-3830-9d3d-e2b723340bfc.roa (raw, json)
Hash identifier:          mg2zS+r3FJmjToaniXmTPKyuqaz0OzYUxpWtsH/tqnQ=
Subject key identifier:   2F:27:96:E2:88:33:CA:B9:3B:45:5C:94:41:B8:DD:75:D3:93:F1:69
Certificate issuer:       /CN=f5b16165-c3bc-4cf0-8f84-91d78ba3e148
Certificate serial:       010D0C9F4328584B77D3E058D71B3D0B28898100
Authority key identifier: B9:0C:89:D6:FB:D6:F9:31:ED:E5:7E:D6:B3:2B:3C:45:32:87:40:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5b16165-c3bc-4cf0-8f84-91d78ba3e148.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5b16165-c3bc-4cf0-8f84-91d78ba3e148/758501b3-445f-3830-9d3d-e2b723340bfc.roa
Signing time:             Thu 09 Oct 2025 20:35:48 +0000
ROA not before:           Thu 09 Oct 2025 20:35:48 +0000
ROA not after:            Wed 07 Jan 2026 21:35:48 +0000
asID:                     402073
IP address blocks:        162.142.77.0/24 maxlen: 24
                          2602:f528::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5b16165-c3bc-4cf0-8f84-91d78ba3e148/f5b16165-c3bc-4cf0-8f84-91d78ba3e148.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5b16165-c3bc-4cf0-8f84-91d78ba3e148/f5b16165-c3bc-4cf0-8f84-91d78ba3e148.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5b16165-c3bc-4cf0-8f84-91d78ba3e148.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:77:d3:e0:58:d7:1b:3d:0b:28:89:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5b16165-c3bc-4cf0-8f84-91d78ba3e148
        Validity
            Not Before: Oct  9 20:35:48 2025 GMT
            Not After : Jan  7 21:35:48 2026 GMT
        Subject: CN=2c19d4ed-db5e-4807-9beb-a013a0b91ac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:10:8c:35:46:77:e0:77:63:a5:21:9f:08:f0:
                    3a:85:8d:0e:ec:e5:e2:7c:e2:90:bb:db:da:2d:9f:
                    57:cc:33:37:35:64:40:01:68:e8:89:fa:57:e3:ea:
                    5b:f4:08:a7:49:7d:b0:d9:26:fb:c8:ae:aa:05:31:
                    28:a6:2d:35:87:2a:72:33:32:d2:cb:a0:96:31:63:
                    20:84:44:c2:b2:07:f7:bc:2c:cf:2e:5a:72:09:86:
                    d3:ae:42:88:ce:06:0a:86:f2:bb:1c:87:74:a0:b2:
                    dd:a7:ac:76:ff:11:69:0e:fc:b2:59:d3:a4:06:66:
                    97:b1:77:59:45:ab:aa:bc:ba:96:3b:65:32:78:6a:
                    96:bb:c4:c4:72:dc:07:11:8b:40:67:c4:77:50:ed:
                    e1:fd:45:ae:2c:f2:55:6d:27:e1:58:35:3a:7f:45:
                    7f:96:d0:23:e8:a4:e7:d7:82:06:cc:65:8b:80:68:
                    cb:c5:bd:74:df:b4:c2:42:bc:9f:37:7a:17:02:ac:
                    84:6c:a0:cb:17:45:f0:da:59:19:00:c9:76:18:6a:
                    f6:f9:86:65:c1:d2:2a:f8:27:87:57:58:b6:01:ee:
                    af:c6:70:df:fa:d0:54:39:89:fb:7e:36:c7:3c:e7:
                    d3:99:64:8b:00:d6:94:f5:f6:e6:b0:52:ea:37:9e:
                    bc:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:27:96:E2:88:33:CA:B9:3B:45:5C:94:41:B8:DD:75:D3:93:F1:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5b16165-c3bc-4cf0-8f84-91d78ba3e148/758501b3-445f-3830-9d3d-e2b723340bfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5b16165-c3bc-4cf0-8f84-91d78ba3e148/f5b16165-c3bc-4cf0-8f84-91d78ba3e148.crl

            X509v3 Authority Key Identifier:
                keyid:B9:0C:89:D6:FB:D6:F9:31:ED:E5:7E:D6:B3:2B:3C:45:32:87:40:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f5b16165-c3bc-4cf0-8f84-91d78ba3e148.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.142.77.0/24
                IPv6:
                  2602:f528::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:47:4d:4e:56:66:8d:be:ac:11:ff:87:f5:63:3c:16:0d:09:
         d0:8a:b7:2d:a9:87:b9:f2:de:84:e2:84:35:39:ee:e6:f0:6b:
         a3:b7:5f:ec:2a:74:48:e6:26:9b:f8:4e:5b:3d:3a:de:08:de:
         d8:77:8c:fb:c5:84:45:f6:7b:ad:b3:a2:8c:3f:dc:bd:be:83:
         12:1c:2e:cd:8b:de:80:c5:a6:05:db:55:86:5a:2d:6a:ba:38:
         55:8e:94:bd:06:40:d2:c0:07:0d:28:e4:9d:f4:f8:82:19:b2:
         4f:fa:36:d0:4e:17:89:47:89:7f:57:bf:e2:61:ed:c7:8a:79:
         1f:b1:72:fb:20:84:55:8c:15:6d:0d:de:90:10:e2:ba:50:e5:
         ed:c9:f2:92:0e:c9:82:2f:6a:3b:8c:c7:74:cf:e4:72:c7:19:
         55:9e:50:da:f2:ab:0a:a1:c0:e6:18:69:f9:d1:e5:3d:fd:19:
         db:54:71:a7:62:8b:44:8b:85:de:c0:fd:6e:05:94:90:8e:9d:
         94:ff:45:47:96:ac:93:4c:4f:01:d9:a6:c9:64:e6:4d:9b:24:
         c5:65:db:a6:91:66:16:26:30:6e:25:5f:bf:53:2e:b8:61:e1:
         19:01:93:91:a2:10:18:a6:1b:c4:c7:79:1c:d4:83:34:40:1c:
         a4:a6:d7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:58:51 2025 by rpki-client