Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/cf9e080d-5220-3f48-8b51-39615620115f.roa
File:                     cf9e080d-5220-3f48-8b51-39615620115f.roa (raw, json)
Hash identifier:          4LHNj4HtFCf44VcIq0TLb2/Vppiw7fvcy5sMxq3goZU=
Subject key identifier:   92:99:80:13:31:7E:6C:55:5A:7F:0C:15:13:F5:B0:59:F8:E0:C1:C6
Certificate issuer:       /CN=af93a26c-49ee-415a-bda7-07e781689339
Certificate serial:       010D0C9F4328584BB02D02AAC4B78953738F2100
Authority key identifier: 72:18:91:9C:01:35:B0:EA:B0:B4:37:68:2F:D6:BD:33:B1:86:9C:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/cf9e080d-5220-3f48-8b51-39615620115f.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     33191
IP address blocks:        208.103.161.0/24 maxlen: 24
                          2602:f79a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/af93a26c-49ee-415a-bda7-07e781689339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/af93a26c-49ee-415a-bda7-07e781689339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2d:02:aa:c4:b7:89:53:73:8f:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af93a26c-49ee-415a-bda7-07e781689339
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=fac5ba04-000b-4682-a4a2-b3e8e0e74e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:46:ba:88:24:5a:dd:a2:60:3e:4f:c0:23:f0:
                    a8:5e:12:cd:b5:05:52:74:c4:f9:34:ff:ac:6c:b9:
                    6a:7b:69:22:9c:89:6d:15:d5:90:d3:b5:6a:b0:5c:
                    bd:6b:1f:5e:d2:e9:fe:0f:9f:bc:c1:14:85:76:11:
                    b9:f4:63:8d:ae:23:37:29:03:5e:0c:2a:13:27:f7:
                    50:a4:0c:ec:84:05:54:c3:c1:0a:02:3f:7e:4f:35:
                    c4:29:84:f1:44:b4:27:42:4d:e3:c2:c8:59:50:59:
                    d9:48:e3:39:c7:ad:94:8d:f5:73:b9:79:27:38:f1:
                    f3:94:e3:3a:00:7d:15:57:94:9e:46:ac:8d:7d:6d:
                    9c:6d:39:cf:a6:d5:26:66:b8:b1:78:0c:b6:65:94:
                    e9:28:23:33:cc:07:c5:49:e1:30:3b:79:22:22:ac:
                    c4:1e:19:57:60:84:7d:4b:2e:08:46:f6:b8:86:fe:
                    25:e3:79:be:04:6f:c6:8a:fd:89:d3:49:58:30:ff:
                    ad:f9:92:7f:53:14:93:51:5f:e5:ff:ad:24:5d:a0:
                    90:f8:b8:d5:3d:3f:59:83:84:66:1c:69:a5:a1:ce:
                    e9:81:8c:84:1e:28:54:9d:20:36:a6:2f:84:ac:9f:
                    b6:fd:a3:7a:da:e7:83:f4:43:09:75:76:7b:9e:53:
                    6b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:99:80:13:31:7E:6C:55:5A:7F:0C:15:13:F5:B0:59:F8:E0:C1:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/cf9e080d-5220-3f48-8b51-39615620115f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339/af93a26c-49ee-415a-bda7-07e781689339.crl

            X509v3 Authority Key Identifier:
                keyid:72:18:91:9C:01:35:B0:EA:B0:B4:37:68:2F:D6:BD:33:B1:86:9C:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/af93a26c-49ee-415a-bda7-07e781689339.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.161.0/24
                IPv6:
                  2602:f79a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:6a:5b:e8:ca:44:2b:8d:8e:83:fa:bb:d5:95:16:be:2d:f1:
         cd:22:45:99:88:02:1a:e1:1b:0b:c8:e3:8a:ab:a4:c8:60:07:
         db:a4:de:3d:96:ab:c5:b3:1d:f1:51:5f:03:9a:c3:d2:7a:43:
         2d:8e:a5:8c:95:bd:ac:5c:3b:ed:90:40:57:e3:43:7f:1b:a6:
         d9:63:df:be:ce:cd:4b:67:c7:f0:21:e0:a4:ae:ff:e2:56:f8:
         9f:13:8b:26:98:62:18:ff:a1:85:e2:32:a8:ff:33:1d:27:ff:
         5a:73:b7:b1:5d:78:64:da:78:4c:9e:4f:15:48:e8:20:d7:b9:
         cb:60:48:ca:18:a8:19:96:f6:79:ae:ec:33:f3:13:f6:35:e6:
         ae:96:ca:90:6a:62:f2:02:17:b8:7d:01:25:60:7a:15:4e:7c:
         bf:b6:0a:fd:76:34:e0:6c:8b:25:ea:84:18:55:09:41:89:d3:
         19:1a:67:22:65:56:de:d1:57:11:ff:4d:cc:18:78:ee:fb:28:
         8f:4f:b5:b2:10:58:b3:0f:75:4f:ab:ab:c8:63:90:d3:fa:a1:
         70:46:4e:af:43:b3:e3:c4:e9:41:10:34:dc:25:15:8a:83:a2:
         9b:64:84:cd:c5:34:5e:a5:e0:11:b4:a9:69:0c:9e:f2:c6:38:
         0e:6c:0f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:05:45 2025 by rpki-client