Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/de681975-275a-3fad-948e-5407a8665b68.roa
File:                     de681975-275a-3fad-948e-5407a8665b68.roa (raw, json)
Hash identifier:          Mc+QivK91fyDfKWt1sAn8LAekgbZI0X62bo/caxGh4c=
Subject key identifier:   AD:09:52:0E:40:CC:BA:CC:83:7D:EE:1D:86:1F:D1:7F:1E:F6:29:EF
Certificate issuer:       /CN=a78600ec-48a2-4f1a-8904-302418a38c57
Certificate serial:       010D0C9F4328584B99D78B07BA743A9913085880
Authority key identifier: 01:D2:A5:C1:99:85:CE:F6:57:D4:73:D3:A7:10:72:87:1B:43:48:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/de681975-275a-3fad-948e-5407a8665b68.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     11379
IP address blocks:        167.124.96.0/24 maxlen: 24
                          167.124.97.0/24 maxlen: 24
                          167.124.98.0/24 maxlen: 24
                          167.124.99.0/24 maxlen: 24
                          167.124.100.0/24 maxlen: 24
                          167.124.101.0/24 maxlen: 24
                          167.124.102.0/24 maxlen: 24
                          167.124.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:8b:07:ba:74:3a:99:13:08:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a78600ec-48a2-4f1a-8904-302418a38c57
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=ae919828-edca-4835-b515-6c20b492f7d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7f:e0:0b:0e:66:2b:49:8f:14:7e:b6:bc:bf:
                    46:1c:25:27:2a:a3:4c:6b:de:97:4f:f2:30:77:d2:
                    bc:94:ed:e4:e6:de:19:e1:04:26:f7:4f:b7:81:85:
                    f2:1a:a1:07:51:a4:cd:15:d7:71:45:35:8f:3d:fc:
                    a3:2e:ba:b6:c4:11:70:b0:27:d4:5e:88:1a:f1:51:
                    a7:a4:b2:f1:0d:cc:04:b5:f8:8f:f3:81:02:96:42:
                    9e:a7:06:7e:db:c5:3f:9c:c5:05:0f:d7:5a:c2:b9:
                    48:52:55:64:51:aa:cc:78:ec:0b:8d:8e:a0:be:7c:
                    67:81:85:1c:a8:7f:df:cb:63:28:f3:76:58:02:a0:
                    78:53:0f:ed:be:d7:92:4f:41:8b:15:71:d2:74:46:
                    06:f7:15:20:d1:d6:c9:01:1f:b9:cf:50:1c:2d:4a:
                    9c:03:9b:d7:6f:0c:14:08:9d:1a:4c:5f:b0:5a:2b:
                    7a:86:b0:2d:f8:a8:ad:f4:6d:4c:09:99:64:1b:e0:
                    4d:f7:3a:7f:95:a1:82:fa:31:f3:04:60:28:08:b5:
                    84:fb:4f:75:04:20:20:a6:31:e7:bb:e6:86:fc:ef:
                    a8:71:2c:14:00:75:0e:21:b4:99:34:f3:50:dd:d7:
                    d2:47:29:6b:66:8e:91:a7:20:9c:9d:a5:26:22:05:
                    75:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:09:52:0E:40:CC:BA:CC:83:7D:EE:1D:86:1F:D1:7F:1E:F6:29:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/de681975-275a-3fad-948e-5407a8665b68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.crl

            X509v3 Authority Key Identifier:
                keyid:01:D2:A5:C1:99:85:CE:F6:57:D4:73:D3:A7:10:72:87:1B:43:48:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.124.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:2b:2e:70:bc:77:a9:30:dc:33:49:99:4c:49:93:6b:22:85:
         8c:fc:c7:f3:81:c5:0b:f5:dc:bd:de:eb:56:27:95:77:96:c0:
         51:0f:b4:22:b3:66:03:4e:41:56:75:7f:e9:40:12:b9:1b:e0:
         3f:ba:48:4c:ec:07:63:e6:af:04:a2:f4:e1:f5:e3:0b:ad:12:
         82:60:84:7f:f4:68:08:e5:1e:0d:f2:0c:7a:41:1b:37:63:d7:
         71:cc:2e:d1:2a:e1:74:53:de:95:98:d5:02:47:6d:c8:19:d0:
         92:64:20:3b:f0:22:be:c5:52:2a:aa:24:20:72:98:42:0d:3e:
         b4:e4:51:52:94:d6:13:06:35:0f:1b:89:63:e0:b5:52:b6:9f:
         d0:99:c8:a1:79:0e:3d:e5:21:6e:4a:00:b9:2d:24:63:6e:67:
         3d:4d:c4:65:dc:df:bc:02:95:85:cf:b8:17:f4:7c:94:36:43:
         f8:cd:fa:dc:f9:b0:e7:82:6a:98:dc:8f:40:9c:bd:9b:79:0c:
         4c:ef:b0:6f:cc:3d:22:74:d0:52:35:4f:c8:40:93:42:0b:ac:
         27:82:f6:f6:52:91:18:22:68:18:2a:10:33:d7:3d:91:9e:82:
         e6:4c:c6:a0:6a:0c:6c:41:60:ed:43:47:23:b2:6b:f8:40:9a:
         07:05:66:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 07:31:19 2025 by rpki-client