Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/0aeedde8-fd15-3a5a-9586-4a7b0a7ac6df.roa
File:                     0aeedde8-fd15-3a5a-9586-4a7b0a7ac6df.roa (raw, json)
Hash identifier:          i5vXeeo3CgvFiBrMttbD5ZDyBqSTlYBL/8oDxxVLLfM=
Subject key identifier:   E4:EA:2D:EB:46:C8:FB:E0:DD:18:91:1C:A5:EF:A3:A1:96:B3:EE:E1
Certificate issuer:       /CN=2044bf03-a0f3-4eed-9707-b517f4923781
Certificate serial:       010D0C9F4328584BB88D27381FBFDDF038DCE980
Authority key identifier: 63:C9:ED:E3:0A:CB:B6:C6:A0:E8:61:F0:8B:2F:97:1D:EE:2F:AE:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/0aeedde8-fd15-3a5a-9586-4a7b0a7ac6df.roa
Signing time:             Sun 02 Nov 2025 01:00:31 +0000
ROA not before:           Sun 02 Nov 2025 01:00:31 +0000
ROA not after:            Sat 31 Jan 2026 02:00:31 +0000
asID:                     16428
IP address blocks:        162.254.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/2044bf03-a0f3-4eed-9707-b517f4923781.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/2044bf03-a0f3-4eed-9707-b517f4923781.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b8:8d:27:38:1f:bf:dd:f0:38:dc:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2044bf03-a0f3-4eed-9707-b517f4923781
        Validity
            Not Before: Nov  2 01:00:31 2025 GMT
            Not After : Jan 31 02:00:31 2026 GMT
        Subject: CN=1963f6b9-1402-4e90-93cc-f25be0e41d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:fd:4e:90:fa:e2:e1:d0:22:18:c1:f5:61:6a:
                    9d:cf:fe:fd:a9:94:56:7e:ae:54:55:42:99:19:94:
                    2e:d8:b5:47:41:40:09:be:89:8e:29:e2:d2:ee:dd:
                    99:5f:1e:26:7f:39:68:5f:f2:8f:64:12:a2:9d:35:
                    1a:4a:85:af:97:8e:65:c2:fd:64:53:01:69:9c:ac:
                    69:64:97:dd:bd:8f:ba:44:07:91:bf:9c:8a:c4:75:
                    53:c4:79:37:2f:5e:ad:7f:d7:e8:45:eb:01:6b:8d:
                    94:b6:9b:67:f4:cd:93:3b:a2:8d:7a:15:c9:59:c3:
                    d6:63:c2:07:46:fb:c3:01:ba:bb:47:f1:4f:8a:00:
                    7f:a1:ed:2e:9c:3a:40:4f:01:72:9c:76:4d:f2:c5:
                    c1:d8:29:cf:72:ff:1f:f7:8e:57:66:73:6d:16:88:
                    ab:6b:63:48:c8:21:d1:82:b6:a6:12:a2:da:ed:29:
                    e3:23:4b:ec:1a:67:28:4f:47:a7:cf:e1:25:ee:9b:
                    39:ff:af:68:5c:a4:e4:74:3e:d9:45:c4:02:e8:75:
                    a5:61:aa:77:46:a1:f4:3b:27:00:f3:2d:1d:e3:8e:
                    2f:48:4c:ff:ce:71:b7:66:1f:36:7a:a6:e4:df:8d:
                    1e:8b:5c:ed:b0:c2:36:46:29:fe:09:19:aa:1c:eb:
                    07:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EA:2D:EB:46:C8:FB:E0:DD:18:91:1C:A5:EF:A3:A1:96:B3:EE:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/0aeedde8-fd15-3a5a-9586-4a7b0a7ac6df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781/2044bf03-a0f3-4eed-9707-b517f4923781.crl

            X509v3 Authority Key Identifier:
                keyid:63:C9:ED:E3:0A:CB:B6:C6:A0:E8:61:F0:8B:2F:97:1D:EE:2F:AE:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2044bf03-a0f3-4eed-9707-b517f4923781.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:9c:d0:b3:d7:52:da:6b:b3:20:52:68:1b:86:54:de:c3:b8:
         96:da:e6:50:a8:a1:ed:13:1a:8d:b4:86:22:36:69:4e:0c:f9:
         22:0c:02:57:72:f5:05:38:bd:82:4a:40:14:11:fa:33:2e:7f:
         4a:e3:f7:f8:e7:76:1b:c7:b8:9e:16:1a:cf:99:04:52:cb:9e:
         3b:10:a6:a5:d6:2f:5a:b4:e3:72:40:9d:7f:82:be:78:b6:ad:
         90:db:c5:2c:f9:51:ff:fc:5a:00:47:52:22:d1:1c:2e:d0:bb:
         a8:7b:a2:73:e5:b7:fe:97:db:0f:fa:23:44:1c:a3:50:cc:2a:
         e1:54:fa:b1:ef:0a:d4:8b:a9:0b:81:c2:82:64:6d:e9:88:b5:
         9d:91:6a:55:32:da:4c:2c:94:55:5e:0b:1b:77:42:b7:53:57:
         62:4a:70:7d:d2:c5:8e:e2:f4:ac:4b:19:2f:87:79:bf:ae:f7:
         02:a0:e9:0c:93:a4:c6:4c:23:1b:ec:99:11:96:81:01:6c:ec:
         a2:b6:f8:4a:80:6b:b2:d3:e4:07:6f:b1:2c:dd:05:d5:f2:85:
         7c:8a:7f:51:10:57:74:6e:e2:2f:77:24:82:6d:0d:ba:b0:ec:
         d9:17:ae:f3:8a:25:8d:75:b4:4b:51:30:bf:96:5e:a2:c0:19:
         a3:cb:dc:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:38:34 2025 by rpki-client