Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/f4097a7e-a971-32e5-9878-831870153f57.roa
File:                     f4097a7e-a971-32e5-9878-831870153f57.roa (raw, json)
Hash identifier:          yE88Jb10+n/Es3t/Ldy0vFqGc8bcpoHvGaaScC7VeLE=
Subject key identifier:   DC:CE:42:B3:04:08:85:C7:08:08:40:1E:CD:30:A8:83:D0:F9:C1:DA
Certificate issuer:       /CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
Certificate serial:       010D0C9F4328584BB45D44E84E0665A413FF4180
Authority key identifier: FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/f4097a7e-a971-32e5-9878-831870153f57.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     26229
IP address blocks:        162.138.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:44:e8:4e:06:65:a4:13:ff:41:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09f9e8b-9307-4eb0-ba77-9b14169bbeba
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=3b64efd7-5466-48ae-8de9-9d782e96a090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e2:ea:e3:f5:32:56:80:3a:ab:06:51:36:9a:
                    b9:ec:06:c9:5e:48:da:61:eb:c3:fb:b0:66:e2:48:
                    2b:8d:65:03:47:9e:80:cf:e6:85:93:8e:53:26:de:
                    7e:5d:b5:c9:76:22:1f:3f:91:f2:74:e5:e1:84:f4:
                    d2:cc:3c:0d:d9:9e:cd:f5:43:75:11:13:43:af:c3:
                    44:f8:c9:dc:9e:b9:89:c9:4f:14:c6:6d:3b:05:96:
                    fd:83:a2:cf:e0:cc:1d:7b:01:ed:ac:01:f3:27:f0:
                    44:ea:19:36:5e:64:8f:78:e0:16:cd:20:a1:e5:5f:
                    07:e2:dc:6b:0c:a9:9d:0c:b8:42:cb:84:1e:8f:5c:
                    7c:84:04:67:4b:db:6f:a1:72:1d:f7:51:d0:0a:6c:
                    7e:58:fd:59:4b:2e:e4:84:db:3e:4c:4b:ef:47:90:
                    11:25:80:96:66:35:ad:aa:bf:3f:ac:54:85:47:f9:
                    1b:d0:bb:44:c6:ec:89:d0:a9:d9:7a:b5:a2:20:36:
                    c3:0d:99:9d:f4:cf:9c:66:75:f4:d4:64:d0:c0:94:
                    5b:20:5c:b7:69:e9:8e:08:9a:3b:3c:e5:2c:64:f5:
                    6d:51:81:5a:d3:5c:7f:d3:9f:35:b5:ef:0f:f6:c1:
                    9e:aa:06:42:01:56:9e:72:67:09:ae:4d:44:25:fd:
                    99:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CE:42:B3:04:08:85:C7:08:08:40:1E:CD:30:A8:83:D0:F9:C1:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/f4097a7e-a971-32e5-9878-831870153f57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.crl

            X509v3 Authority Key Identifier:
                keyid:FD:92:A8:82:AE:7B:D3:DD:3F:46:51:91:9A:A3:0E:9F:A9:2A:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c09f9e8b-9307-4eb0-ba77-9b14169bbeba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.138.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:9c:5a:b5:9b:12:4a:18:41:8a:84:53:74:1e:ca:47:89:a5:
         9e:16:d1:ec:78:a6:6e:a5:fd:3b:a3:a9:2f:16:55:c3:35:f6:
         68:c9:0c:52:b2:81:b0:c4:81:d9:bc:1e:6e:89:a3:e7:0a:2c:
         e4:37:06:7b:6c:b3:88:34:3a:e3:9b:7d:4e:df:bb:02:1c:a4:
         b2:5e:20:70:e6:a6:dd:8a:d8:58:f3:63:83:3f:33:81:86:40:
         a8:e3:2f:16:ab:c3:e4:b9:01:f7:d1:d2:be:97:6f:3d:58:d5:
         c6:81:e4:ad:60:0f:7a:dc:8d:da:14:4c:6f:0e:4c:97:1f:70:
         cb:78:70:ae:9b:27:7b:9d:04:8b:1f:42:bc:80:b5:fd:a1:34:
         26:f2:fe:17:a0:71:42:ac:6a:58:c8:2f:ae:22:0b:ab:64:68:
         82:2f:25:ba:79:9e:07:4e:d1:b4:76:b6:45:1e:af:5f:c3:ec:
         47:50:64:ff:88:cd:22:ad:74:87:9f:d5:c4:da:69:3e:5b:eb:
         0e:b3:d3:ac:ae:88:a5:42:fd:79:39:ab:29:fa:c6:70:21:a2:
         b9:0d:3c:3d:b6:f0:4e:41:73:a5:cf:59:8a:55:39:c6:e5:b6:
         59:41:42:fa:fd:15:72:3b:c5:30:f9:53:17:d6:12:51:df:fc:
         89:8f:6e:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:06:02 2025 by rpki-client