Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/bc3f31a1-876e-370c-a387-1783c3edcac6.roa
File:                     bc3f31a1-876e-370c-a387-1783c3edcac6.roa (raw, json)
Hash identifier:          KE9InO8LkpoqQxOxnfxXtZ08yRbc+A5QqG/AtOolLgU=
Subject key identifier:   67:70:06:45:9C:65:9E:B3:F1:B2:B3:2E:3E:16:76:B7:18:40:B3:BE
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584B9E07C7FCB7751BEC71154EC0
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/bc3f31a1-876e-370c-a387-1783c3edcac6.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     22504
IP address blocks:        76.164.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:c7:fc:b7:75:1b:ec:71:15:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=efca07c5-10ac-473b-a7a9-6d9ac431b0e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fa:d4:55:67:92:9d:d8:25:f8:7c:8f:3d:f1:
                    d2:da:7c:50:cd:08:fd:b1:80:47:99:84:c9:e8:c7:
                    93:a7:bd:ea:cf:e9:91:24:ba:46:ed:18:f6:13:37:
                    16:b4:a1:a4:2e:b9:36:3d:8a:80:4d:31:9c:6c:22:
                    e5:09:01:1e:7c:e1:78:33:4d:23:a8:6a:78:18:90:
                    f4:2d:de:bc:bd:14:b2:72:ab:4c:77:3d:ec:e6:5c:
                    1f:2d:bd:fc:30:4f:1e:4f:b0:3f:c2:a1:50:d0:6c:
                    ed:60:8d:d7:36:c6:02:85:75:e0:5e:bf:0e:cb:37:
                    1a:96:8a:d9:c3:e5:6b:a6:1a:96:6d:a4:00:61:b4:
                    ec:7f:08:d4:b4:24:a2:bd:08:a1:61:3f:a1:dc:9e:
                    c4:14:28:07:70:d9:6e:82:8a:f1:35:25:11:bd:c7:
                    ed:92:e9:5d:f9:0f:62:07:f2:50:42:0b:bc:aa:ab:
                    78:db:1d:a8:2b:da:58:ac:62:c6:2b:0f:e5:f2:e5:
                    99:c1:96:1a:bd:78:7d:1c:d6:eb:ca:a1:fa:22:a0:
                    b4:ba:1d:77:fd:9d:58:ec:80:df:05:36:c2:2b:b6:
                    64:de:5a:8a:2b:08:45:71:46:87:d3:b4:51:b9:30:
                    6d:d6:68:18:db:60:95:6b:d7:db:3b:2a:67:0d:1b:
                    17:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:70:06:45:9C:65:9E:B3:F1:B2:B3:2E:3E:16:76:B7:18:40:B3:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/bc3f31a1-876e-370c-a387-1783c3edcac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.182.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:41:98:d2:0a:55:1e:74:05:6e:99:f3:27:b2:d9:ed:6c:42:
         3f:67:b5:ee:27:ad:30:32:e9:ef:0d:87:4a:b8:c1:a4:55:45:
         33:12:09:37:a9:33:7c:dc:3b:9a:eb:ac:43:2c:fd:12:82:61:
         4c:b0:07:a7:13:7f:9b:77:fc:1b:ce:89:ad:24:2b:cb:16:8a:
         5b:54:49:6e:49:e1:5e:aa:ce:02:6b:14:d4:77:25:0a:0b:cf:
         e9:8a:90:81:5d:91:fd:da:b1:da:c5:41:ff:89:ad:bc:74:a3:
         72:17:a6:59:0a:d1:42:60:64:cc:45:86:a4:94:18:4c:52:3c:
         e1:f1:48:39:6d:ad:61:56:a7:74:c5:3e:7d:85:f5:b9:f3:f9:
         11:26:e8:00:6a:02:b5:62:33:32:4a:d8:5f:ab:e4:18:14:d7:
         00:6c:90:96:a1:b1:8b:0f:bd:21:73:81:36:40:2e:36:68:aa:
         28:c8:52:f3:9e:91:b0:6d:f9:7b:42:87:5f:aa:5c:94:44:87:
         8a:66:bb:18:03:58:8d:ca:23:f2:2f:e8:d4:db:05:e6:ea:8f:
         16:78:32:5e:59:85:66:f8:45:95:c6:70:ac:42:cb:2c:7f:4f:
         d8:42:66:dc:2a:c3:c5:c4:bb:2c:2a:42:4b:e2:b2:73:41:d0:
         7a:cf:91:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:55:21 2025 by rpki-client