Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ff716936-7063-31f2-9384-008bde05ec92.roa
File:                     ff716936-7063-31f2-9384-008bde05ec92.roa (raw, json)
Hash identifier:          aDERJMus4zAlx48/PbfHyfp+g2mZ0McZ6ERJ/nNA/OA=
Subject key identifier:   83:24:7C:2D:A7:29:19:F7:8C:DF:DA:33:C1:43:27:A9:3B:C2:6D:83
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584BA7CCEFFA04C4E3BD0D0CA080
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ff716936-7063-31f2-9384-008bde05ec92.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     271
IP address blocks:        142.231.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cc:ef:fa:04:c4:e3:bd:0d:0c:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=64a36587-181c-40bb-9f5c-b6069c6dfc38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6b:66:1d:44:92:96:be:f8:bb:c6:0a:5e:b1:
                    3f:ec:d4:97:8b:d9:e4:50:17:ba:16:c0:cc:e2:e5:
                    fe:b2:d4:f2:7b:07:01:70:3e:14:bd:08:8b:ee:46:
                    25:19:cc:4c:8b:19:d3:3e:17:53:d7:3f:f6:64:a0:
                    42:82:21:c6:c2:9d:de:92:d6:57:66:bb:02:8d:41:
                    b4:bf:6e:10:de:3a:41:ee:25:b9:50:a1:ae:16:e7:
                    6b:e2:4f:c9:29:bd:3e:45:27:32:f7:92:37:5e:3a:
                    4a:f6:7a:91:d2:a4:74:6b:dc:76:a7:20:17:e5:31:
                    23:5e:f3:57:9c:b5:11:7e:da:45:b2:b1:5d:65:84:
                    37:30:6d:d4:ce:19:50:df:59:03:a1:8c:a0:9e:25:
                    08:cd:b5:f7:c5:f9:15:12:d5:72:79:38:5b:29:ed:
                    66:ec:ae:59:52:ae:6e:95:72:08:4c:d0:59:22:d8:
                    3f:77:c3:f9:d0:18:25:e5:b3:e0:85:9c:40:77:eb:
                    23:3c:8b:76:c1:c8:ce:33:64:66:4c:3d:1a:8f:61:
                    f2:0e:ae:80:90:ff:80:f3:9d:b4:28:0a:5c:9a:34:
                    c7:96:e6:f5:63:41:6c:74:c1:dd:43:a4:d8:f5:92:
                    bb:b3:e2:32:0f:92:87:c1:c3:0c:29:f7:93:ea:80:
                    e8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:24:7C:2D:A7:29:19:F7:8C:DF:DA:33:C1:43:27:A9:3B:C2:6D:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/ff716936-7063-31f2-9384-008bde05ec92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.231.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:98:43:fc:0f:01:6f:2e:95:1a:7e:59:14:51:29:81:59:37:
         e8:3f:78:2e:be:95:71:3f:31:d4:86:a1:fc:04:e6:d6:64:fc:
         21:ee:f9:94:f8:3b:2f:bb:d2:3b:9f:39:38:f9:65:0e:b6:f9:
         13:1e:35:d3:45:7f:2e:87:e5:73:b9:60:c2:46:e8:f1:7f:52:
         0b:4a:26:ed:0f:bb:a4:37:ac:41:8f:eb:5a:13:2d:2e:d2:3a:
         05:6e:a0:e8:5c:0b:12:45:f9:35:1a:06:da:cd:8b:9d:d1:19:
         f8:52:e2:cf:31:b7:0b:0e:c5:a5:c5:e3:a7:c9:71:e2:9d:94:
         90:0d:41:75:24:7f:9d:a0:bd:f0:a7:c7:89:b8:8d:16:18:4b:
         b3:d6:c7:ec:f5:e6:e7:a7:bf:3c:7f:92:6e:6d:bc:20:9d:25:
         ce:71:89:ad:51:89:1d:7b:fc:ab:8b:04:80:7a:a2:84:a9:2f:
         fb:38:ff:c4:a4:6b:00:8e:c6:8c:3a:36:da:6d:a3:6f:a6:b3:
         a5:c5:92:84:73:c5:2a:fe:54:14:d5:ef:3d:ed:28:51:2b:9d:
         8d:e8:c9:45:50:55:8d:21:d1:8a:8a:ed:24:ad:90:ef:b5:af:
         4c:d7:ea:4a:28:e4:c5:e0:90:d2:53:68:e8:38:d8:bb:09:73:
         65:c9:b5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:00:00 2025 by rpki-client