Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/85512459-abab-3be9-8088-4ceb997b7bf8.roa
File:                     85512459-abab-3be9-8088-4ceb997b7bf8.roa (raw, json)
Hash identifier:          PZREXEsgMbzlh4J+RH/zSxg2j92NjSQT35jxvhLrSJM=
Subject key identifier:   0C:1E:76:77:9F:3E:2C:4D:E1:4C:D1:E6:BA:CD:A7:DD:02:1F:18:57
Certificate issuer:       /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
Certificate serial:       010D0C9F4328584B9CA23C7363C6FF7E6A323500
Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/85512459-abab-3be9-8088-4ceb997b7bf8.roa
Signing time:             Thu 23 Oct 2025 01:00:31 +0000
ROA not before:           Thu 23 Oct 2025 01:00:31 +0000
ROA not after:            Wed 21 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        160.32.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9c:a2:3c:73:63:c6:ff:7e:6a:32:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
        Validity
            Not Before: Oct 23 01:00:31 2025 GMT
            Not After : Jan 21 02:00:31 2026 GMT
        Subject: CN=8e404600-d603-4af7-a270-6bc5b75c56e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:34:ba:47:11:d6:25:0b:38:e1:d7:de:14:89:
                    5e:5f:0f:ce:ca:4a:15:6d:0d:39:01:47:0d:5c:b8:
                    c1:0a:0f:61:08:6b:e4:ae:77:7d:7d:72:57:2f:d8:
                    bd:ed:ee:b9:52:a7:38:c2:ca:a5:ea:dc:79:60:dd:
                    0d:29:99:19:5d:00:8d:7d:49:43:26:34:b5:b8:55:
                    05:cc:2b:63:6b:04:97:6c:c4:cc:34:f2:e5:33:70:
                    45:ff:7d:9e:33:93:5b:e1:47:ab:70:e8:eb:51:48:
                    7d:2d:86:0a:75:17:7e:38:d9:8c:5e:73:8a:a9:af:
                    f7:f5:73:7b:3b:a8:40:e6:e5:ba:7b:38:63:ff:bd:
                    d0:a5:2e:cb:bb:4d:80:58:78:49:e1:74:d0:e5:85:
                    8b:4a:fe:2c:a8:54:ec:6a:07:b1:68:4e:a8:c4:53:
                    3e:17:ee:84:ee:84:01:ca:05:d7:ac:81:a1:22:33:
                    db:ca:d8:db:1a:00:fe:4f:2b:a4:75:ee:30:cd:bd:
                    08:7e:8f:80:ff:2f:d8:63:63:8d:a3:21:eb:17:bb:
                    3e:95:68:a3:97:07:61:1e:bd:38:70:33:b1:46:1c:
                    53:2f:36:50:89:54:d1:79:fc:55:65:1f:1c:b2:e6:
                    63:16:ac:cd:36:c8:35:a6:4c:3e:a2:5a:c7:e3:68:
                    b3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1E:76:77:9F:3E:2C:4D:E1:4C:D1:E6:BA:CD:A7:DD:02:1F:18:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/85512459-abab-3be9-8088-4ceb997b7bf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.32.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:c7:31:cd:26:b1:da:d6:7f:25:48:22:78:19:12:02:0e:ea:
         e9:b4:45:ec:b1:b3:1d:fa:7c:30:fd:39:2d:14:46:a1:0c:26:
         b4:14:84:8a:26:79:55:e7:4f:ef:9c:fc:3f:27:9c:d8:75:8c:
         62:76:ef:59:4b:cf:61:38:e2:7d:89:7f:7f:70:bb:a1:54:3b:
         e5:fe:91:a6:22:a6:75:66:af:6a:57:6e:cc:e9:d9:d3:a0:9e:
         ee:79:49:b2:23:a3:94:ce:05:56:d2:56:49:e3:a5:97:76:81:
         2d:67:7a:c0:73:6d:02:09:fe:d0:38:05:7b:5a:68:13:3b:5f:
         aa:57:4d:8c:56:87:6d:42:63:a2:ae:94:6b:85:4c:bf:4a:2a:
         6d:84:4c:70:b7:70:65:fe:e6:9b:ba:f2:99:66:03:51:f6:0a:
         45:ac:60:c1:df:da:b1:ba:bb:e5:a8:a4:49:88:4e:77:2c:70:
         40:d2:d2:48:0e:da:cb:ff:05:7a:5f:55:8d:f7:1d:db:39:19:
         4e:e1:90:07:18:d2:10:25:d2:73:26:9b:6b:d0:43:6e:8c:db:
         a9:04:b1:f7:87:4e:18:1a:7b:96:75:82:15:f2:04:09:c5:70:
         e9:8d:79:b8:9e:12:86:a8:fc:58:bf:14:1c:88:92:77:a3:2e:
         b0:48:34:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:42:10 2025 by rpki-client