Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/b6696447-6e07-3388-99df-856d8b12ae66.roa
File:                     b6696447-6e07-3388-99df-856d8b12ae66.roa (raw, json)
Hash identifier:          OcDk9coohn4g/yvO/45xI+rqCoIvNkxpajK8FlWFG4g=
Subject key identifier:   67:9A:20:38:CB:59:08:84:DB:97:E7:9D:B8:8D:31:54:2F:D8:88:A8
Certificate issuer:       /CN=e0927227-fbc8-4924-89af-1885637cb07c
Certificate serial:       010D0C9F4328584BA9326662453D13F92DB67360
Authority key identifier: 42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/b6696447-6e07-3388-99df-856d8b12ae66.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     16509
IP address blocks:        107.162.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:66:62:45:3d:13:f9:2d:b6:73:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0927227-fbc8-4924-89af-1885637cb07c
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=9c6f3d31-0558-41f6-88e6-3185e174e0aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4d:9f:2c:80:8e:76:40:ec:7d:ca:3e:7c:13:
                    7a:70:2b:73:42:f8:2f:e1:05:8d:9a:b8:b1:cf:cc:
                    c8:56:6c:97:5e:6d:cf:64:e5:60:fc:b3:8d:09:5d:
                    97:c8:c2:ea:0f:e8:0d:64:78:4b:eb:21:42:1d:68:
                    4e:03:64:eb:2a:e5:f3:b6:97:86:c3:bd:a6:ef:d7:
                    dd:a1:ed:ee:42:6e:8e:ef:f2:09:cd:a2:0f:95:98:
                    c8:c4:ac:8a:c5:30:55:ad:99:95:3d:8f:80:ff:50:
                    3b:cd:cd:48:1e:24:f3:39:61:dd:89:db:25:67:76:
                    c7:20:42:04:12:1b:49:ad:93:2b:b9:6f:64:d8:12:
                    02:60:5b:80:34:14:4d:22:e2:34:7f:1e:87:52:50:
                    24:9e:06:86:f0:e7:5b:c9:0e:23:8c:45:32:47:9c:
                    58:eb:42:8f:93:e1:43:83:32:63:91:56:b2:f6:54:
                    de:a3:97:5d:98:da:fe:b5:0f:25:63:ba:a6:e1:db:
                    98:ad:b3:d2:d1:60:36:a0:71:71:2f:44:9a:f3:01:
                    70:99:f3:b6:82:34:27:c4:80:64:10:f2:1d:0f:8f:
                    1b:dc:dd:01:5e:8d:87:b4:c0:0b:cf:f2:98:2f:f9:
                    fe:aa:06:9d:23:21:96:7d:dd:73:c9:c7:f3:a8:82:
                    b7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9A:20:38:CB:59:08:84:DB:97:E7:9D:B8:8D:31:54:2F:D8:88:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/b6696447-6e07-3388-99df-856d8b12ae66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.crl

            X509v3 Authority Key Identifier:
                keyid:42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.162.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:41:cf:01:84:bf:ed:54:0e:1c:3f:21:03:11:1c:65:63:34:
         45:e9:36:28:1a:86:65:05:0f:f3:8c:d0:d2:bf:68:77:aa:ea:
         e5:d1:c0:71:6d:ab:b0:66:ed:26:45:26:aa:b6:ef:31:d5:02:
         f6:d7:cd:56:9c:fb:b0:82:d3:d0:e6:5f:ea:a2:d0:da:d1:c6:
         5b:1b:ae:c1:3c:bf:14:05:36:e1:ec:69:e1:3d:ba:f5:e4:26:
         b1:cd:a3:ee:08:73:b6:bf:b1:dc:ec:d2:5a:82:ab:19:e9:05:
         5a:eb:2e:26:b2:47:2c:0e:42:71:c8:0a:a6:45:87:56:d1:fa:
         c1:c7:01:f1:f9:d6:f8:2e:96:29:67:c8:6b:12:81:0c:c1:52:
         dc:4e:51:72:66:3f:35:c0:14:8d:88:fb:bf:84:7c:b8:a7:47:
         de:bb:c8:77:26:bf:d2:bc:7b:ad:3a:d6:b3:72:ff:ba:59:4a:
         7c:d1:4b:b7:54:d4:9c:e1:9d:60:05:aa:4d:95:8b:e2:99:fd:
         be:86:d5:c5:38:fc:45:72:d9:ca:8e:84:64:33:9e:56:57:0f:
         a2:a6:5a:69:5e:ad:48:db:36:29:a7:93:23:0b:8d:d3:a0:6d:
         84:3f:6d:da:e3:ae:4a:7b:72:17:fe:32:18:c8:8c:e1:3d:b1:
         9d:97:9d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:48:58 2025 by rpki-client