Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/292a1027-f298-3007-b93d-c51e00d0e2c4.roa
File:                     292a1027-f298-3007-b93d-c51e00d0e2c4.roa (raw, json)
Hash identifier:          DvEMjWKMq3gwnOxPpGv30FuuoYopHm2/y4h2lct0qOA=
Subject key identifier:   F9:51:BD:90:2E:1B:21:30:9E:15:9A:41:F1:04:2E:48:75:73:DA:0A
Certificate issuer:       /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
Certificate serial:       010D0C9F4328584ABBE640BE6B99A82C0E422140
Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/292a1027-f298-3007-b93d-c51e00d0e2c4.roa
Signing time:             Sun 03 Aug 2025 13:00:40 +0000
ROA not before:           Sun 03 Aug 2025 13:00:40 +0000
ROA not after:            Sat 01 Nov 2025 13:00:40 +0000
asID:                     16509
IP address blocks:        160.32.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:e6:40:be:6b:99:a8:2c:0e:42:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
        Validity
            Not Before: Aug  3 13:00:40 2025 GMT
            Not After : Nov  1 13:00:40 2025 GMT
        Subject: CN=0d7e7dbd-921f-482f-8bb2-1209ac48cc8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2a:cc:38:a9:44:69:59:2d:0b:7f:89:ba:0b:
                    61:52:c7:2a:b1:ef:d6:8c:b0:16:52:ab:04:f9:17:
                    e9:0d:0a:e0:17:4e:8e:34:1c:d4:0c:7e:3d:71:bb:
                    81:af:75:5f:d2:a1:dc:f0:ef:84:c5:ae:dd:92:cb:
                    7a:25:dc:61:0f:8b:ac:a2:11:2c:57:4e:f9:84:6a:
                    ae:06:cd:91:dd:41:41:8c:3d:1a:63:7a:f1:6e:8e:
                    b4:c4:d0:3e:9f:74:2d:d0:a1:4a:f3:65:8c:6f:9c:
                    e6:a1:78:4c:ad:f4:bd:2b:7e:f5:6e:6d:b3:fc:63:
                    7b:7e:a3:f8:ed:32:91:4c:6f:49:04:15:af:2e:d1:
                    78:aa:d9:82:c4:a5:07:a9:68:0c:18:5d:2e:58:ec:
                    2e:b9:a6:01:f4:a8:7d:07:0d:da:57:b2:01:74:b6:
                    f9:81:37:3b:01:13:61:f0:57:4c:b0:c5:ac:c2:f3:
                    79:ec:43:36:72:14:2d:ed:d1:55:f6:fc:f6:c9:f7:
                    ed:dd:35:64:d6:f3:fa:33:18:7e:59:25:05:0e:f4:
                    91:b4:33:cf:b6:0d:73:b4:d0:64:02:42:40:49:f1:
                    ec:ff:08:e6:f6:4a:24:2e:7b:68:01:67:32:f5:ea:
                    92:21:10:a9:b6:29:cf:e5:7e:27:22:0d:82:02:3a:
                    13:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:51:BD:90:2E:1B:21:30:9E:15:9A:41:F1:04:2E:48:75:73:DA:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/292a1027-f298-3007-b93d-c51e00d0e2c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.32.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:fe:91:e6:99:39:39:05:ac:ed:97:7b:f7:8a:c4:4a:be:ee:
         ab:06:bd:ef:43:5a:4c:d0:6a:fb:a7:50:a8:cf:a7:ac:19:fe:
         3e:06:d7:ea:60:57:d1:73:b0:1b:19:17:4a:36:0c:a8:ea:ad:
         d8:0f:b4:1f:4a:c3:5d:28:16:8c:61:ca:77:12:b9:6f:b8:bd:
         04:b4:7b:d2:18:82:5d:9b:d6:d7:9c:02:70:f9:ac:fe:cd:0c:
         2c:3a:02:37:c2:54:9f:10:9b:8e:5a:6c:c1:d2:90:0a:20:94:
         8e:bb:e8:3e:e5:f4:fe:b3:5d:73:df:4a:28:b6:a5:0b:28:75:
         38:7e:d4:87:eb:12:59:e7:0b:75:67:da:99:06:a9:6e:93:b1:
         cf:6d:a5:34:df:25:ff:28:c4:5a:09:ba:ff:1f:19:f0:bf:98:
         cf:0d:36:8c:3f:d4:45:fb:97:61:02:0b:25:77:36:18:82:0e:
         73:6c:d6:2a:49:52:20:04:48:eb:6f:dd:fd:a3:73:3a:14:91:
         e6:2c:5d:b7:15:6c:c0:26:5f:40:9e:13:59:4a:99:f8:18:4c:
         28:51:9c:bc:e7:78:21:93:2e:19:fc:72:6a:62:f2:ab:dd:84:
         45:d8:33:89:45:43:2a:99:4d:5f:6a:68:96:ee:78:95:8c:bc:
         4c:79:70:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:15:05 2025 by rpki-client