Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/ab2cdaa4-4180-395d-929c-3b00fc6a1265.roa
File:                     ab2cdaa4-4180-395d-929c-3b00fc6a1265.roa (raw, json)
Hash identifier:          eaFWWcZzCXekn0/s60hiShn7UVN/3pFyNTB6wIWB73w=
Subject key identifier:   37:09:FC:43:20:AC:33:B7:AA:42:4E:AB:6F:5A:55:7A:45:D1:D5:D7
Certificate issuer:       /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
Certificate serial:       010D0C9F4328584A96090365BA68E733ED95D000
Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/ab2cdaa4-4180-395d-929c-3b00fc6a1265.roa
Signing time:             Sun 20 Jul 2025 23:30:11 +0000
ROA not before:           Sun 20 Jul 2025 23:30:11 +0000
ROA not after:            Sat 18 Oct 2025 23:30:11 +0000
asID:                     26229
IP address blocks:        162.138.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:09:03:65:ba:68:e7:33:ed:95:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
        Validity
            Not Before: Jul 20 23:30:11 2025 GMT
            Not After : Oct 18 23:30:11 2025 GMT
        Subject: CN=27f4cff6-c59f-4850-9513-b2575b176fa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bb:fc:f8:38:87:ad:3e:6a:9d:b4:6f:ec:bb:
                    0f:8f:2b:8f:8b:92:6f:13:56:e6:34:e0:cc:9e:5e:
                    96:e1:bf:c2:04:3c:28:00:09:b9:ab:e6:b4:de:a6:
                    7e:60:e8:b2:92:d9:af:3f:ff:5d:31:b4:7f:e4:f2:
                    c2:b5:bc:42:0b:c7:6c:3c:78:48:f6:e7:dc:ca:f2:
                    c8:2b:12:8d:a5:3e:be:a0:27:87:da:54:f2:98:32:
                    10:8e:33:39:60:11:c6:51:1b:06:9f:7f:f4:77:e8:
                    d3:25:ba:66:94:38:7a:e4:3b:bc:7a:cb:6e:7a:cf:
                    d1:8f:37:f6:ce:d7:e8:a6:19:35:31:bb:2d:1e:8f:
                    6f:be:6f:1b:d4:f7:88:98:a6:1d:7c:71:66:3c:5f:
                    e9:8f:40:92:f4:d5:26:ee:d6:0b:9b:3f:17:fa:eb:
                    9b:ce:37:b4:31:c8:93:77:4d:43:41:ad:c8:76:60:
                    72:76:0b:10:41:ac:37:5f:31:e1:af:89:7c:64:6e:
                    5f:95:85:02:0c:f7:9f:d3:8e:48:a0:d9:60:47:55:
                    4e:2e:0a:88:92:85:a1:f6:cb:1f:6d:80:dd:0a:da:
                    77:46:32:38:61:8e:d2:36:56:0c:51:0b:cf:e7:6c:
                    74:94:39:a6:b3:70:a4:1b:b1:41:f8:83:b5:d4:16:
                    52:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:09:FC:43:20:AC:33:B7:AA:42:4E:AB:6F:5A:55:7A:45:D1:D5:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/ab2cdaa4-4180-395d-929c-3b00fc6a1265.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl

            X509v3 Authority Key Identifier:
                keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.138.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:62:6a:60:ab:7e:e7:8b:57:41:50:04:62:60:82:d3:38:93:
         b4:08:66:34:63:66:20:a1:7d:1a:93:51:97:82:9f:ca:54:10:
         b2:eb:aa:ab:83:6b:b4:c6:a2:81:d7:a4:00:db:00:60:dd:6f:
         13:3f:77:73:ff:ec:3a:e1:bc:94:db:d3:62:6f:17:f4:69:f7:
         08:c6:38:51:f4:b4:30:ef:c1:35:1c:59:a9:a6:f2:a1:78:cf:
         1a:40:79:0c:48:a5:d3:79:63:e2:a8:ed:6b:5c:d8:d1:b5:e3:
         8e:f5:22:9a:df:06:25:01:e4:5e:fa:f5:96:71:ce:3e:8a:dc:
         6c:56:55:50:40:2b:74:e9:85:55:ba:b6:01:bb:f0:ce:e0:cb:
         cf:4a:a1:e5:41:ec:fc:6c:36:38:57:1d:67:8a:e7:67:76:2b:
         8c:f3:6e:ab:cb:e8:12:55:cb:50:f5:03:9f:ed:5a:a9:12:95:
         59:4b:a8:f7:e1:1e:58:61:1d:39:44:ae:16:90:d2:f3:82:85:
         5d:28:51:65:e4:fa:11:9f:dd:f0:56:1f:b1:18:ee:fc:b0:61:
         52:f4:0e:a3:9f:bb:49:b0:c4:54:a6:c8:42:75:1f:7e:bc:9e:
         cf:71:a9:1a:ce:04:15:9c:a1:3c:c4:bb:cb:59:91:08:ad:e2:
         38:cb:dc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:21:24 2025 by rpki-client