Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/9a588be8-1752-3937-a70f-1fcc52ed2759.roa
File:                     9a588be8-1752-3937-a70f-1fcc52ed2759.roa (raw, json)
Hash identifier:          UglmNMEG43lpqyJrAfe8qdxP37+L0hf4Jq2kscs5kUA=
Subject key identifier:   C0:5F:78:F7:71:72:63:DA:3B:74:FC:ED:1F:A7:9D:D4:3C:0C:EF:35
Certificate issuer:       /CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
Certificate serial:       010D0C9F4328584BB2F82FB75FE3713C35F54E00
Authority key identifier: 35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/9a588be8-1752-3937-a70f-1fcc52ed2759.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     14041
IP address blocks:        216.38.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:2f:b7:5f:e3:71:3c:35:f5:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=167ee89c-ae4f-43f4-b57f-678ead1c8503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:db:7f:62:75:0b:2a:0d:26:a8:b7:42:c5:d3:
                    58:3a:33:45:aa:7a:b4:38:c9:88:a3:3d:cc:26:fd:
                    36:f3:00:df:59:2a:e8:69:41:09:36:f4:21:97:d2:
                    6d:0e:23:ff:51:58:1a:56:32:cf:fb:3a:54:96:b8:
                    00:d9:ea:ee:1f:76:e1:94:f4:89:a5:6a:46:af:58:
                    dd:86:82:c8:ec:1b:34:18:02:ff:f2:32:d3:10:d9:
                    a6:d2:e4:6c:33:67:ff:24:46:5a:b5:a3:7b:5e:58:
                    ce:ef:9f:7f:87:13:06:0a:14:d9:1f:fb:a2:48:6e:
                    a2:33:09:ee:e5:7e:b9:5a:8d:4c:5b:e7:a9:e9:1f:
                    38:7a:cb:7f:ed:5a:cd:b4:1f:13:b0:c0:0f:64:c2:
                    41:ee:ed:6e:8c:6a:60:f2:1d:7a:5a:d7:76:68:3d:
                    e8:8e:cc:b7:a3:42:19:35:d0:96:0e:3d:78:5c:cd:
                    90:48:da:6d:f5:25:5a:7c:74:30:15:da:65:49:c6:
                    98:6a:c0:ba:16:7b:a1:1f:0a:a9:8e:c9:ae:bd:21:
                    a2:fd:43:52:93:47:49:af:db:ae:4a:1e:5a:ad:02:
                    a2:b8:3e:c2:f8:fc:35:9c:54:4c:9e:a4:12:cd:0b:
                    f0:54:66:73:66:7a:2d:a4:44:2c:6c:36:07:72:a6:
                    78:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5F:78:F7:71:72:63:DA:3B:74:FC:ED:1F:A7:9D:D4:3C:0C:EF:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/9a588be8-1752-3937-a70f-1fcc52ed2759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl

            X509v3 Authority Key Identifier:
                keyid:35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ec:b3:16:15:8b:4d:60:a5:00:93:07:4b:ec:7a:01:39:d6:df:
         4a:b0:a8:88:75:32:51:2c:68:28:09:ed:ea:fc:ed:47:df:62:
         6c:e9:15:39:4c:d4:56:81:eb:5b:3d:8a:52:81:ce:dc:c3:81:
         35:31:c9:dd:b6:df:61:7d:d3:29:ce:f7:32:e0:f8:2c:5e:16:
         8b:5f:f2:68:7e:d5:91:0c:02:84:40:da:67:1a:04:b4:25:9c:
         3c:3b:a9:25:a6:ed:bf:d9:ea:c4:16:13:a1:94:4a:e0:3d:3e:
         6f:e6:fd:b9:c5:16:d8:37:bd:5f:5c:10:f0:d8:5f:80:5c:42:
         e2:76:22:45:57:71:e3:cf:87:65:c8:23:2c:96:a5:ff:18:97:
         2a:8f:2e:85:16:6d:39:a3:4f:c5:2d:a6:c9:d6:18:12:1a:b3:
         78:c6:b8:0a:4a:90:5d:df:d0:19:2a:40:9a:c4:88:17:97:be:
         a3:68:65:2f:57:07:6d:78:80:97:9b:c4:fb:df:4c:3e:9b:79:
         ae:4e:5c:22:ba:2f:ab:f1:34:cd:e4:e3:48:b5:38:6f:4e:87:
         7a:eb:68:6f:b2:35:8d:05:90:b6:47:4b:31:61:14:e6:2d:fe:
         d8:0d:56:c9:48:26:cd:50:6f:9e:2c:54:5e:ec:83:21:79:09:
         49:1a:9f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:09:26 2025 by rpki-client