Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/e0931627-c998-367b-977e-2116409a07e9.roa
File:                     e0931627-c998-367b-977e-2116409a07e9.roa (raw, json)
Hash identifier:          m0ZiaY8P8aqBcCa2n7UkwKkwrjYTJQJrozB5Zd0rTlI=
Subject key identifier:   F7:C9:F0:71:23:BD:99:D6:7A:76:3B:E8:6E:24:6E:9A:F1:86:2C:4D
Certificate issuer:       /CN=00fd3378-4bc3-4216-94f7-90c7efb47d80
Certificate serial:       010D0C9F4328584B715CBA5CB7D9049B457D5B00
Authority key identifier: 4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/e0931627-c998-367b-977e-2116409a07e9.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     46133
IP address blocks:        2.57.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:ba:5c:b7:d9:04:9b:45:7d:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00fd3378-4bc3-4216-94f7-90c7efb47d80
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=cb002234-e5f7-4d85-9391-e7eb2718eb4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:79:2f:75:ea:ab:5e:e1:98:40:1c:e9:10:57:
                    6c:1e:47:7d:df:47:18:54:22:8e:87:b2:69:5b:eb:
                    7c:48:a0:98:54:87:a2:04:a7:35:be:9b:d5:7d:5c:
                    c3:c8:75:78:36:41:43:da:70:15:50:b5:82:5d:45:
                    1b:bd:59:51:c3:14:4e:00:4c:eb:4a:9a:2b:8a:84:
                    d9:aa:77:a5:f6:0b:64:e5:3a:06:fa:a9:a8:45:94:
                    02:53:43:7f:c3:48:0b:9c:52:c6:70:08:a4:d9:03:
                    8a:f0:9f:59:24:d0:97:26:2a:af:11:67:9d:e2:a5:
                    28:56:ee:5f:9b:dd:50:37:99:56:11:bb:8f:08:7a:
                    f2:9b:44:48:7a:82:65:b1:99:30:87:1a:39:08:ed:
                    fe:b9:c5:6f:c1:81:7e:f1:74:7f:48:58:cc:52:61:
                    82:0e:0c:7d:c6:0e:5d:fc:42:bc:08:a5:22:e0:87:
                    20:c2:c9:1e:c1:f9:f7:b0:94:1e:38:3a:92:4d:7e:
                    52:ad:5d:55:3c:87:e7:cb:cc:79:cb:1c:63:b7:e6:
                    76:b1:78:6d:75:ad:00:61:05:e0:5a:74:66:e3:24:
                    1a:f9:fe:5c:b3:ec:39:2c:89:50:0c:12:74:6f:75:
                    86:f0:18:e7:57:b0:8e:a0:90:a0:f0:ec:2b:eb:7d:
                    0d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C9:F0:71:23:BD:99:D6:7A:76:3B:E8:6E:24:6E:9A:F1:86:2C:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/e0931627-c998-367b-977e-2116409a07e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.crl

            X509v3 Authority Key Identifier:
                keyid:4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:29:ee:32:27:b8:e5:77:c5:08:c0:c7:71:bf:57:37:aa:21:
         93:3b:29:15:0e:7c:dd:7f:c5:8d:e9:23:fb:4e:16:f1:4e:8d:
         db:50:bd:3c:a9:55:aa:5e:f0:d5:3b:07:6f:09:31:97:00:dc:
         35:3b:49:74:5c:39:5d:70:e7:bd:25:78:63:99:0b:f2:d2:c8:
         0f:9e:ee:9d:44:86:f0:a3:d4:1e:7e:7c:64:20:0e:2f:3d:9e:
         8e:07:6d:27:eb:32:92:60:5b:69:5f:06:b6:06:e7:58:2d:15:
         e1:93:18:3d:6a:22:38:70:2a:b0:25:b8:33:72:7f:93:bd:68:
         a0:64:50:48:b6:b0:aa:bb:3d:73:b2:3e:1b:87:cd:5d:01:6b:
         d4:74:08:d2:3f:bd:49:6a:4d:55:8d:53:81:fe:18:c9:55:e6:
         ce:43:83:92:1e:f2:93:60:28:bc:4a:08:ae:f7:27:52:a6:ea:
         38:e9:5c:58:f4:27:b1:27:c4:8b:20:5f:e9:4e:87:53:45:ab:
         f2:35:13:2b:8c:ec:13:96:ff:80:e5:99:6c:bb:06:85:14:70:
         c4:10:75:e6:f7:e2:7b:37:0c:74:2b:14:e2:2a:ac:de:c8:c1:
         b6:01:60:9c:c5:23:8b:cd:24:5c:74:8e:87:c1:d4:a4:70:c1:
         7f:a9:31:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 11:23:18 2025 by rpki-client