Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/12a1fd27-4a44-3df7-87d6-9aac44cf6dfa.roa
File:                     12a1fd27-4a44-3df7-87d6-9aac44cf6dfa.roa (raw, json)
Hash identifier:          dL5gxgLQjif6nv1Jpv22FHc9z287GRcpiCBtv5/KwY4=
Subject key identifier:   EC:0C:D5:79:58:8A:AE:CE:C9:08:00:BF:58:E4:16:CE:0E:DD:13:F4
Certificate issuer:       /CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
Certificate serial:       010D0C9F4328584BA0D26D46AE5F69C5FE239580
Authority key identifier: BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/12a1fd27-4a44-3df7-87d6-9aac44cf6dfa.roa
Signing time:             Fri 24 Oct 2025 13:00:38 +0000
ROA not before:           Fri 24 Oct 2025 13:00:38 +0000
ROA not after:            Thu 22 Jan 2026 14:00:38 +0000
asID:                     14434
IP address blocks:        162.253.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:d2:6d:46:ae:5f:69:c5:fe:23:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
        Validity
            Not Before: Oct 24 13:00:38 2025 GMT
            Not After : Jan 22 14:00:38 2026 GMT
        Subject: CN=b6b1d6c1-7046-4332-8462-04fa40a0845e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:24:d4:e6:9d:39:3a:c8:52:c8:58:8c:e7:3e:
                    ad:bf:7d:a4:9c:6a:5d:0f:7e:fe:fb:48:86:80:e9:
                    12:72:81:64:0a:c7:ab:58:b8:dd:d3:d3:95:47:78:
                    02:4e:fb:58:9a:d8:14:f5:45:9e:b9:cd:d4:3d:78:
                    c9:2f:40:8d:66:53:0f:e3:36:c9:3f:1f:0a:65:3d:
                    b3:14:83:e7:bd:e7:6e:7b:76:74:ac:78:45:50:0e:
                    4c:4f:8d:83:80:37:11:82:d2:c4:55:1e:0c:c8:7e:
                    46:6e:94:ba:a1:ae:7a:46:4f:4a:8e:26:37:17:8e:
                    23:ed:9f:4e:a3:7a:6a:54:15:64:2b:9d:9e:9e:63:
                    b5:aa:72:88:3b:78:63:08:71:fb:57:a6:3b:dd:1b:
                    8a:24:aa:c0:73:b1:63:94:fb:cf:a2:ee:de:c2:58:
                    c8:3f:2f:1e:5c:58:14:b3:10:40:45:53:f3:01:e8:
                    26:70:6e:c7:83:12:be:57:a8:d7:d7:9d:8f:48:1a:
                    ac:ed:63:9d:7e:4e:d5:08:e5:95:64:aa:a4:d7:cd:
                    b5:46:49:ae:19:d5:1c:ae:7e:95:ff:48:e7:4c:d2:
                    c2:cf:43:00:b2:a9:b1:77:f9:3e:10:59:f1:e7:4c:
                    48:91:aa:23:c0:be:03:dc:6d:71:d0:53:a1:65:ae:
                    de:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0C:D5:79:58:8A:AE:CE:C9:08:00:BF:58:E4:16:CE:0E:DD:13:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/12a1fd27-4a44-3df7-87d6-9aac44cf6dfa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl

            X509v3 Authority Key Identifier:
                keyid:BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.253.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:4f:0c:ec:6c:94:f4:56:46:6a:a8:7e:d3:8d:30:98:24:47:
         ef:d4:52:90:fd:da:e0:a8:ec:db:d5:cb:be:40:d5:43:a8:2c:
         12:6f:11:56:86:fd:8b:b4:50:85:4f:5e:c9:f7:8b:0d:97:22:
         40:07:dd:01:1c:60:73:1a:35:76:9f:ed:bd:1b:12:19:d9:36:
         c5:0b:a5:9d:36:41:4f:ed:6a:fa:cb:d8:4f:a0:ea:b0:ca:ba:
         09:e3:c7:23:50:dd:e7:54:ae:96:eb:24:19:4b:3b:c6:24:cb:
         32:2f:d5:93:4c:f8:42:93:87:94:6d:9d:c5:0a:c8:e1:97:b3:
         17:0c:98:6d:c4:1b:cc:8a:60:b1:72:0e:54:c4:08:bf:74:fb:
         32:72:0c:63:76:bb:22:40:81:36:c8:37:d4:d8:18:71:53:f5:
         08:70:72:ef:e9:db:34:cb:cb:a9:f9:ef:de:d3:e9:44:2e:98:
         93:8f:dc:ed:32:3b:86:21:af:88:7e:56:6f:5f:f7:4d:ec:68:
         c8:a6:0d:b7:e4:64:be:0e:d4:bb:dd:ae:88:d5:dc:7b:79:71:
         d6:f6:40:40:04:71:7c:43:b3:c0:93:7d:30:2d:d6:27:29:d7:
         0c:8a:56:af:65:f6:56:cc:f1:cc:20:0f:6f:2c:91:31:69:03:
         ae:2a:ae:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:49:30 2025 by rpki-client