Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/5676a646-c349-37ae-be20-5bbe556b7f08.roa
File:                     5676a646-c349-37ae-be20-5bbe556b7f08.roa (raw, json)
Hash identifier:          OS+pN3ozcimpyUz1RGemFNWNnZmac+z+dPgbv4XZ0oM=
Subject key identifier:   2C:A2:DE:07:8C:E8:EC:03:1C:0F:1F:FC:0E:95:FF:DE:7A:66:DE:31
Certificate issuer:       /CN=80688222-2583-4dac-a7df-1d78925c7b53
Certificate serial:       010D0C9F4328584BBE403CED29C16CB16B7A3200
Authority key identifier: F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/5676a646-c349-37ae-be20-5bbe556b7f08.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     1640
IP address blocks:        162.221.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:3c:ed:29:c1:6c:b1:6b:7a:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80688222-2583-4dac-a7df-1d78925c7b53
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=48d2b3c0-3754-48e1-8980-fa51acec7893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:44:38:69:be:78:37:6e:29:60:eb:7f:51:c6:
                    c8:c0:cc:28:d3:2d:80:a2:8f:7b:cb:b0:8b:4c:64:
                    0e:6e:07:ba:d5:7b:f7:1b:24:61:d6:c8:d0:89:db:
                    41:83:8c:65:d1:98:d3:1c:39:50:26:9d:29:a9:44:
                    6e:20:d5:03:34:4e:31:c6:44:4e:f9:5d:92:9c:d7:
                    5a:9f:d0:b1:e5:a3:09:94:f0:cc:80:f5:56:67:fc:
                    20:16:5c:08:f3:27:5a:77:1d:6c:94:1d:e5:43:b8:
                    ba:b9:c6:99:35:bf:27:1c:9b:54:66:58:0c:45:56:
                    c9:42:de:33:82:9b:90:52:1a:2b:a6:e9:38:c1:f7:
                    d5:dd:9c:fb:0e:48:96:a7:b9:ee:1f:44:aa:1c:63:
                    c4:2e:11:54:46:b4:24:17:72:8a:d8:d0:3a:89:43:
                    b3:e5:da:14:7c:14:b4:b8:7d:08:c8:b7:8f:9d:ea:
                    38:d0:e8:21:f2:71:ee:04:15:59:b4:b0:49:c1:a0:
                    a9:cc:17:7a:f3:62:01:59:00:72:66:ee:da:e0:ef:
                    96:b4:eb:32:16:ed:dd:f3:40:40:be:8f:46:60:80:
                    30:e4:da:8b:05:74:c6:f4:2f:8a:50:8e:84:e8:14:
                    91:c7:fb:4f:03:90:cf:96:5e:22:7e:eb:ee:53:3c:
                    6c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A2:DE:07:8C:E8:EC:03:1C:0F:1F:FC:0E:95:FF:DE:7A:66:DE:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/5676a646-c349-37ae-be20-5bbe556b7f08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl

            X509v3 Authority Key Identifier:
                keyid:F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:2b:7b:52:04:01:b2:ac:b8:69:d7:e0:df:36:ce:9d:55:13:
         e3:ce:2f:16:b2:1f:9c:5c:86:33:7e:2d:7a:42:f2:ca:a4:7e:
         93:46:da:0e:6a:a6:ca:6d:16:13:b7:74:47:1a:b7:fc:2a:9c:
         fd:8f:d5:55:14:af:75:d0:63:ed:03:fa:e7:1b:c5:8d:be:17:
         cc:43:a7:30:3d:b4:ba:a9:49:03:96:12:3a:f6:d5:2b:e5:66:
         b5:f1:5d:9c:6a:70:9d:2e:69:30:1f:df:31:e5:3d:4f:45:87:
         76:34:44:0f:2e:23:90:25:ba:98:d4:79:8d:49:2e:6a:f9:65:
         0a:b3:6d:c6:99:65:c0:f9:af:42:c1:21:6f:02:4b:10:2e:09:
         20:98:d5:f5:ea:a6:3d:dd:a3:e2:32:51:99:34:d7:f7:42:f1:
         60:40:7a:a6:0d:6a:da:1f:b5:25:ae:ff:91:d5:03:6f:86:84:
         ed:11:88:c3:38:06:b0:1d:04:14:a7:bc:5e:d9:69:f8:2e:15:
         62:6b:67:4e:c1:a6:50:f0:b9:fa:50:a6:41:e5:66:96:58:a6:
         3b:90:23:92:35:df:a8:5d:67:e1:2f:a5:f0:37:bd:02:1b:de:
         ca:6c:86:26:ea:d7:c5:15:93:0a:63:91:12:d0:32:7e:f8:b1:
         06:fe:25:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:59:23 2025 by rpki-client