Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/2782020a-b333-378b-976a-19c150b5397c.roa
File:                     2782020a-b333-378b-976a-19c150b5397c.roa (raw, json)
Hash identifier:          pWm2Wd1SI2WF/1HDFsK/OA2srk8fI6HmOe9qKUFQtVY=
Subject key identifier:   D6:35:74:86:93:16:15:50:6B:9C:3C:2D:13:18:1E:00:27:FC:1E:E7
Certificate issuer:       /CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Certificate serial:       010D0C9F4328584BB2F7B2BFD37118459D7F6780
Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/2782020a-b333-378b-976a-19c150b5397c.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     8075
IP address blocks:        161.221.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:b2:bf:d3:71:18:45:9d:7f:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=c40faf27-8953-4498-bf54-ed9769fba709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:41:e8:88:3c:ce:59:8f:2e:1f:97:ca:76:63:
                    48:1d:58:ca:c5:43:97:80:c9:ed:b1:59:67:1c:cb:
                    ad:0f:02:bf:76:a1:60:50:43:08:e3:c5:bd:00:00:
                    2a:47:41:b4:ac:d8:03:dd:d1:55:c7:c7:e7:a7:d7:
                    0c:91:e6:54:ce:ee:99:6a:7d:ec:49:18:de:63:9a:
                    da:3b:d9:d7:e3:c0:c5:c8:67:77:4b:5f:65:aa:2f:
                    48:df:d5:e4:70:5c:87:38:27:2b:62:b4:f6:50:05:
                    ae:4e:9d:86:4e:cf:43:3a:ea:4c:10:aa:20:eb:c5:
                    62:29:92:6f:51:7b:15:d8:cf:e1:86:10:80:48:e1:
                    52:3b:25:29:1c:ca:62:4d:f5:59:5b:82:d3:f0:36:
                    23:f2:93:50:24:6a:e5:b2:a2:1c:cc:9b:db:2c:c3:
                    da:c1:45:ca:b9:44:e8:e0:bc:d1:d8:bd:d2:f9:3f:
                    c9:39:77:0a:42:db:ff:d8:88:06:53:14:ac:a1:f2:
                    f8:e2:7f:4b:cb:17:04:64:b9:55:10:b8:1a:4c:4f:
                    a8:d1:6d:d6:8d:ba:1b:13:97:be:e1:96:65:f3:05:
                    d4:48:aa:1e:7e:57:0c:75:55:8d:cd:7b:b9:37:6d:
                    69:9f:6e:94:02:36:d5:eb:de:84:b3:49:fb:5d:94:
                    2a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:35:74:86:93:16:15:50:6B:9C:3C:2D:13:18:1E:00:27:FC:1E:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/2782020a-b333-378b-976a-19c150b5397c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl

            X509v3 Authority Key Identifier:
                keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.221.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d1:ed:e1:87:0a:e2:d2:2d:33:8f:7a:ec:8e:d8:9f:ec:af:cb:
         6d:c3:c1:a0:8c:da:c0:bc:82:84:47:05:c7:dc:e5:03:a4:ae:
         b0:9d:86:b1:01:b1:de:50:7f:e3:c4:73:b5:d4:15:de:7c:1b:
         c4:9e:af:2d:1f:4f:0f:b0:ef:4b:87:71:3c:39:d1:de:20:5a:
         63:92:57:50:b4:62:57:03:97:1b:eb:b7:9c:d2:34:03:7e:a5:
         38:81:fe:74:11:8d:82:ed:3d:70:73:fc:37:13:23:d5:3d:b7:
         d9:ab:e4:9c:9a:8c:19:85:47:dc:40:f7:ee:ab:d5:71:6f:29:
         f4:f6:c3:f4:ef:07:41:42:e9:b0:32:fa:27:3e:78:6b:10:9a:
         80:98:6a:70:8a:b6:28:06:1b:a6:66:f2:c4:a8:c6:e3:13:27:
         da:4c:7b:0a:55:b5:b9:6b:53:52:22:fc:b7:32:ee:09:bd:45:
         65:c8:f4:84:7e:af:c2:a4:76:47:2a:ef:bc:29:82:b3:46:9d:
         86:18:4a:5a:81:e3:06:d4:67:4a:5b:b9:72:80:e3:48:2c:89:
         df:e0:41:75:a7:80:9c:7e:06:83:54:a4:1c:3f:c7:d8:45:f8:
         41:09:67:0b:ca:fd:67:f2:9a:53:6d:f3:81:e3:c2:54:5d:1f:
         5b:62:b9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:59:21 2025 by rpki-client