Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8c44cdbd-722b-311a-aa4d-0c79c7e4acd9.roa
File:                     8c44cdbd-722b-311a-aa4d-0c79c7e4acd9.roa (raw, json)
Hash identifier:          9p4nzXvS9VjMuYoSqBF2S3oQvPMg6VcnfkcskvZfiD4=
Subject key identifier:   82:54:88:F2:D9:D9:A5:A1:59:AC:A2:DF:56:D7:DF:63:EE:04:A2:01
Certificate issuer:       /CN=8d3868d4-1e91-4773-9cef-51b84f43c20e
Certificate serial:       010D0C9F4328584ABD4B7F21696C09A5278E8D80
Authority key identifier: C3:DF:6F:43:BC:75:17:4F:09:0C:CD:BE:AF:B3:84:F4:AD:CD:F6:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8c44cdbd-722b-311a-aa4d-0c79c7e4acd9.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     16509
IP address blocks:        162.213.126.0/24 maxlen: 24
                          162.213.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:7f:21:69:6c:09:a5:27:8e:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3868d4-1e91-4773-9cef-51b84f43c20e
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=c1ce7d8a-4cd6-40a6-b17f-12a79ff0a84f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ed:a6:a5:c4:13:67:83:b3:0e:46:5e:5c:ce:
                    1e:f8:e0:f6:d6:22:0c:6d:61:0f:2d:00:5d:76:c3:
                    b4:40:f5:74:91:9f:44:e2:c5:f8:c8:d2:eb:d1:6e:
                    69:b6:47:a5:a4:fd:d2:58:91:8b:fa:1f:c7:d0:c8:
                    38:6b:63:65:7e:4d:a2:67:59:e8:e4:83:65:46:6f:
                    d2:c2:87:bd:c8:de:a4:a7:dc:fe:e4:7a:f8:f6:c6:
                    e5:46:1a:8c:1e:51:46:0a:05:cf:a1:b0:3e:9c:61:
                    9c:39:78:a5:9c:6c:0a:8b:b1:44:0a:40:df:c8:4b:
                    48:e3:a3:ef:fd:53:ef:cf:11:9d:20:ce:49:70:cb:
                    a7:42:7a:0d:a8:3d:41:26:9d:0f:83:f7:83:de:a9:
                    bd:eb:01:8d:a0:3f:35:79:68:42:5c:f6:cf:2d:a6:
                    86:06:fe:f0:af:02:50:3d:90:16:86:e7:5e:d6:b3:
                    78:ef:97:08:15:53:5a:4f:8c:29:a0:da:97:e6:0a:
                    ed:cf:e4:59:33:48:fb:d7:36:af:9f:b2:9b:d1:5a:
                    d3:87:84:0e:b3:8e:7b:e4:72:22:03:c9:e2:bf:d2:
                    e9:ef:5a:92:ee:49:9b:ab:e2:29:c8:7c:5f:76:a5:
                    e7:31:9c:f4:9f:d6:e5:b4:1d:d4:4c:26:09:e0:b6:
                    d5:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:54:88:F2:D9:D9:A5:A1:59:AC:A2:DF:56:D7:DF:63:EE:04:A2:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8c44cdbd-722b-311a-aa4d-0c79c7e4acd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.crl

            X509v3 Authority Key Identifier:
                keyid:C3:DF:6F:43:BC:75:17:4F:09:0C:CD:BE:AF:B3:84:F4:AD:CD:F6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:5d:ff:20:ea:9c:ec:62:cb:d6:3a:4b:72:1e:ce:f6:1c:e1:
         ce:20:46:2d:89:b1:cd:53:cc:03:39:c2:dc:5c:9c:2c:82:62:
         8f:76:dc:7c:a7:05:67:c5:99:64:4a:09:e2:01:34:62:84:ac:
         e3:26:11:9c:1c:00:92:63:1b:86:b8:71:21:c9:ba:73:49:21:
         07:a4:8a:dc:29:5b:b5:f4:2a:f4:8a:29:65:5f:be:ae:2d:cb:
         78:10:25:4a:77:ab:95:a1:fe:65:2a:5d:b9:86:41:73:b8:37:
         a3:c6:3c:29:e9:81:c7:06:ef:fe:c4:ea:09:65:e5:51:8a:32:
         2d:19:07:c7:c5:04:0c:8c:c3:41:5c:79:28:be:d5:51:82:df:
         05:76:29:14:04:c5:0b:29:05:4e:c8:c3:81:fa:77:fd:a4:88:
         cf:c8:97:4c:fd:25:7a:8a:da:ee:53:68:0d:67:7b:1c:64:69:
         c3:d1:ca:a2:21:1a:b6:85:df:ab:2d:d4:21:83:77:bd:b6:50:
         cb:88:94:23:f8:13:de:26:6c:59:4c:65:3f:2c:be:39:a8:00:
         a3:0e:be:51:48:00:de:bf:b7:55:37:42:22:ea:b7:22:fc:11:
         7b:d0:22:fe:93:06:dd:02:2b:02:e1:77:68:aa:f8:30:8d:78:
         53:d6:c7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:15:36 2025 by rpki-client