Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/50f5f642-e3d0-3945-8b0d-c4b34c78788a.roa
File:                     50f5f642-e3d0-3945-8b0d-c4b34c78788a.roa (raw, json)
Hash identifier:          Ju/3Oy06AdDSIbu0D0BskJOrr6xhV+oVV/RtVyK9tRc=
Subject key identifier:   20:48:8B:99:FE:B8:1A:84:A0:4F:2B:FF:DC:E4:81:23:69:68:A1:08
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584BC270EC03CB42ECC75E0F2380
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/50f5f642-e3d0-3945-8b0d-c4b34c78788a.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     7122
IP address blocks:        207.161.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:ec:03:cb:42:ec:c7:5e:0f:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=20edb3ff-5a9e-4443-b539-78e3ab6828d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f1:ca:c3:5c:3c:8c:a7:97:de:fb:58:da:f9:
                    e6:61:a9:68:34:3d:e0:77:b7:33:3b:9a:73:a2:ce:
                    4a:6e:5b:46:85:2c:67:70:a3:fa:09:16:c7:97:dc:
                    df:a5:34:82:4a:93:85:ef:cf:5b:cb:fe:66:d4:79:
                    30:e4:93:e8:87:a9:1a:54:1f:a5:f7:2e:a6:bd:b7:
                    8d:b0:e8:24:d8:e4:4e:4a:4c:4f:67:dd:bf:9f:18:
                    b6:4f:10:02:d3:2b:e2:89:b8:f1:3b:04:cb:68:6b:
                    c9:10:4c:b0:37:d1:91:0d:e6:f0:62:75:e0:f2:07:
                    4e:a6:97:bc:cb:c6:a2:17:2d:ec:55:e0:04:b8:9e:
                    69:12:86:71:80:aa:e4:11:c6:c6:34:68:73:6b:d2:
                    9b:09:80:7b:97:db:54:df:2f:7b:31:fd:ff:f2:cf:
                    e8:99:67:40:64:a5:45:0e:11:ae:0c:eb:3f:26:c5:
                    7e:c0:e9:7d:c1:cc:28:6b:61:07:bc:82:df:88:06:
                    58:40:66:b4:80:85:71:5e:53:64:54:42:25:b3:82:
                    47:c0:58:f8:b9:9b:a6:93:24:e1:f5:3f:1d:c1:44:
                    8b:63:39:a5:0a:c3:68:33:9d:61:9d:56:80:65:bf:
                    ab:8c:55:0e:96:9a:31:34:46:31:5d:2d:8e:8d:76:
                    ba:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:48:8B:99:FE:B8:1A:84:A0:4F:2B:FF:DC:E4:81:23:69:68:A1:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/50f5f642-e3d0-3945-8b0d-c4b34c78788a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.161.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:35:fe:81:6c:42:c6:57:4c:fe:49:98:a0:9b:3b:27:aa:77:
         5f:d1:24:34:c1:b6:ac:d2:3e:85:48:f5:0b:c2:21:39:c5:66:
         45:81:81:4a:98:fc:91:ab:c3:3e:1e:1f:2d:ac:ad:da:74:d3:
         4b:ca:a9:a9:06:a7:02:7d:dd:db:37:2d:2f:74:62:18:aa:f0:
         d9:cf:e5:fb:6a:09:08:3f:63:a9:43:dd:02:14:e3:a7:41:8e:
         44:91:19:89:61:90:21:21:d0:5e:62:a6:31:22:c2:71:f7:6d:
         57:52:fc:c0:ae:8c:77:e6:af:30:86:31:d7:b3:4b:b1:60:91:
         5f:60:56:00:71:40:b8:9b:2a:1b:99:12:bb:bd:4f:1b:27:ee:
         97:31:10:d8:9c:f9:6b:ad:e3:91:a5:aa:9d:d4:d0:a3:4a:a0:
         c7:58:66:6e:6d:7c:fc:9f:7b:ed:c2:b7:24:4d:32:e1:b3:35:
         f3:c4:0a:85:7d:72:dd:cf:77:34:8e:a8:7c:52:ab:3e:02:3f:
         fd:75:f2:1e:db:7d:d9:3e:b6:a2:aa:03:01:94:77:e2:3e:86:
         d1:cf:2a:ff:56:83:21:ff:49:9a:b4:b1:73:1c:ba:83:a3:02:
         83:6b:54:7f:fe:a8:70:ec:05:89:90:d8:a8:15:24:ad:6f:51:
         9f:ae:40:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:07:24 2025 by rpki-client