Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/ae156139-f4cd-333e-8b6b-7a3917de5aaa.roa
File:                     ae156139-f4cd-333e-8b6b-7a3917de5aaa.roa (raw, json)
Hash identifier:          njCIIK+0hfkPTDzkWsOoQLQLjBbVPzmH72Cagsq0qQc=
Subject key identifier:   48:42:D1:06:50:64:D0:EE:2C:08:9A:BF:DA:7C:A5:F8:C0:8D:63:C4
Certificate issuer:       /CN=a78600ec-48a2-4f1a-8904-302418a38c57
Certificate serial:       010D0C9F4328584BA9325454E6BE636DE6D0F280
Authority key identifier: 01:D2:A5:C1:99:85:CE:F6:57:D4:73:D3:A7:10:72:87:1B:43:48:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/ae156139-f4cd-333e-8b6b-7a3917de5aaa.roa
Signing time:             Mon 27 Oct 2025 13:00:38 +0000
ROA not before:           Mon 27 Oct 2025 13:00:38 +0000
ROA not after:            Sun 25 Jan 2026 14:00:38 +0000
asID:                     14618
IP address blocks:        167.124.104.0/24 maxlen: 24
                          167.124.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:32:54:54:e6:be:63:6d:e6:d0:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a78600ec-48a2-4f1a-8904-302418a38c57
        Validity
            Not Before: Oct 27 13:00:38 2025 GMT
            Not After : Jan 25 14:00:38 2026 GMT
        Subject: CN=baadb659-9cb6-40d7-8514-eae70a611e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bd:22:6e:04:0e:78:dc:72:43:48:3d:21:f2:
                    c4:1b:da:ff:8b:f9:4c:25:7b:58:cd:a8:ef:72:73:
                    83:d3:12:dd:65:20:1b:83:56:e8:0d:eb:26:89:7f:
                    03:cb:9e:27:d1:d2:6c:74:9a:71:fc:0e:fd:7d:48:
                    82:a9:8b:d1:be:94:52:36:f5:e3:5c:de:c0:3f:f2:
                    e0:36:73:c2:00:30:03:40:59:43:37:25:08:a6:b7:
                    23:79:26:f1:bd:50:9e:33:38:55:b2:16:5f:d4:2e:
                    58:b2:ec:f7:bc:53:99:3e:39:12:6d:7f:8a:be:a6:
                    9c:31:1a:cf:e7:81:91:de:67:54:f2:78:7d:f6:d5:
                    d2:6a:5f:b5:84:c5:e1:05:92:3f:b1:a4:f4:e6:d2:
                    a0:ed:85:b2:77:11:06:94:a5:7b:0e:36:58:30:6b:
                    ec:d0:c0:c9:95:ea:fe:ed:9d:ad:1b:b5:5a:21:b3:
                    f2:7a:5d:b1:e7:65:69:aa:b6:c3:fb:16:9b:9e:ea:
                    a9:fd:40:1d:d7:2d:d4:7b:80:ef:93:57:a7:56:a8:
                    48:03:ed:64:4a:b1:b5:bf:21:b7:3f:8c:08:19:bd:
                    85:eb:49:65:72:1d:ab:6c:40:81:66:90:09:5b:b5:
                    32:52:69:f1:e1:c4:70:28:3a:99:13:b9:8f:04:32:
                    c3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:42:D1:06:50:64:D0:EE:2C:08:9A:BF:DA:7C:A5:F8:C0:8D:63:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/ae156139-f4cd-333e-8b6b-7a3917de5aaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.crl

            X509v3 Authority Key Identifier:
                keyid:01:D2:A5:C1:99:85:CE:F6:57:D4:73:D3:A7:10:72:87:1B:43:48:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.124.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:95:06:63:b3:4b:d8:f1:89:9e:19:0d:ed:67:40:6c:d1:59:
         3d:53:ca:e7:ad:39:bc:bd:d1:67:d9:a4:7a:09:8a:e4:b9:9b:
         1a:04:04:34:c6:63:c8:5b:b2:94:37:eb:34:95:6c:62:71:47:
         f4:18:7d:a5:71:a3:b6:48:64:58:0b:84:34:44:40:39:8a:61:
         ab:22:58:19:b3:68:ce:58:c0:31:0b:dc:40:1a:85:33:e2:0d:
         b6:ee:b0:61:53:4f:37:c3:53:06:06:6f:a6:1e:3c:98:a1:5e:
         cc:1a:9d:2f:e4:30:5a:ed:95:f4:16:5a:a9:55:3c:d3:6a:77:
         2b:25:f2:93:4e:41:51:c4:e1:bb:c5:49:1a:16:1b:1d:47:88:
         92:65:31:3a:60:2e:2c:54:d5:00:5d:12:a0:0c:ab:bf:07:f0:
         6e:e2:b3:3d:e5:eb:b1:86:57:3d:7f:76:97:3f:e2:9c:94:2d:
         0a:96:b9:ed:53:9e:9f:21:a3:69:f1:c9:b6:b2:7f:00:cf:c7:
         05:c8:51:1c:62:dc:be:d7:1f:6a:55:6a:4a:44:81:76:40:bf:
         90:4d:a8:cb:6b:bd:34:8e:61:04:05:7a:4f:f4:68:81:30:b7:
         b7:5a:c3:05:14:38:d1:52:8d:3a:6e:59:5f:a0:97:5c:42:76:
         5b:5a:c7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:41:32 2025 by rpki-client