Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/7813dccd-5825-39ec-b55e-6e52b46b3fc7.roa
File:                     7813dccd-5825-39ec-b55e-6e52b46b3fc7.roa (raw, json)
Hash identifier:          EMJuE3VB6PYDzhRDLg6U/eg2dI09tnvtkr7csudV/Y8=
Subject key identifier:   88:0C:9C:35:36:E3:0C:89:74:C1:F2:D8:3D:F9:E5:99:07:AC:AF:F5
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F4328584BA0D2486F36DFB9E6CB160080
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/7813dccd-5825-39ec-b55e-6e52b46b3fc7.roa
Signing time:             Fri 24 Oct 2025 13:00:38 +0000
ROA not before:           Fri 24 Oct 2025 13:00:38 +0000
ROA not after:            Thu 22 Jan 2026 14:00:38 +0000
asID:                     11127
IP address blocks:        207.241.160.0/19 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:d2:48:6f:36:df:b9:e6:cb:16:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: Oct 24 13:00:38 2025 GMT
            Not After : Jan 22 14:00:38 2026 GMT
        Subject: CN=e08dabe6-c73b-4861-a132-98c4653ba772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6a:23:49:29:51:7c:07:a3:c3:c9:67:4f:c6:
                    16:78:5b:70:44:a0:05:5b:d6:d0:ff:94:df:c3:57:
                    45:b0:d8:5d:d3:c5:6d:11:fc:84:8e:77:7b:9d:6b:
                    27:90:68:c5:b5:70:77:a2:f6:2a:bb:99:c7:20:92:
                    c8:8d:1c:13:f2:40:ed:80:b8:54:42:ab:64:31:00:
                    d0:9b:0a:f0:44:50:06:f5:bf:78:ce:8b:de:5a:e5:
                    db:7c:e8:ed:3d:df:dd:68:ac:68:70:75:0e:23:c8:
                    cd:b4:75:06:60:21:d3:db:84:c7:dd:85:0b:e8:3a:
                    b3:be:cf:29:df:c6:94:96:01:f6:9c:93:4c:77:b8:
                    64:fd:5f:eb:6f:bf:b5:0c:7d:70:34:87:be:ee:a8:
                    94:b4:6a:c1:e0:5b:d2:b5:e6:13:2a:0f:0d:cb:90:
                    35:6c:1d:b5:fe:9e:0d:89:36:c0:86:66:46:aa:fd:
                    e3:ef:e7:89:e9:cd:f8:c3:1a:bd:35:cb:d9:5f:cf:
                    e1:c9:08:5d:5f:56:36:0f:ea:4c:8f:3a:03:21:0a:
                    a3:f3:b3:c1:3f:9c:1a:46:d0:87:14:89:83:cf:fd:
                    39:58:4c:de:66:5f:36:22:a8:12:a6:19:19:bc:45:
                    1a:2e:3b:23:e6:85:c5:a8:6b:f0:5c:3b:79:a8:45:
                    2e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:0C:9C:35:36:E3:0C:89:74:C1:F2:D8:3D:F9:E5:99:07:AC:AF:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/7813dccd-5825-39ec-b55e-6e52b46b3fc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.241.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:db:80:76:b4:04:78:b7:27:b4:29:ed:70:6c:e5:86:15:49:
         fd:66:0b:67:f4:7a:83:ec:15:7b:65:43:75:9e:3a:f4:bc:bb:
         3f:9e:92:b3:cc:e2:24:fd:16:26:2e:20:52:7f:b3:ed:00:70:
         e9:78:ab:61:f4:37:22:a6:df:e7:52:4e:0f:5b:14:30:0c:fa:
         46:09:08:9a:81:1f:8d:87:20:be:17:9f:89:1a:2d:c6:f7:3c:
         76:06:37:3d:73:e1:e3:bf:f2:55:0f:f0:70:07:5d:c5:76:b5:
         9e:66:42:c1:ac:30:40:49:0d:4b:41:51:1c:78:0b:9f:e8:77:
         49:a1:31:d6:06:1b:60:24:2e:07:6b:2d:10:7b:b6:4d:da:c6:
         a8:e9:77:8f:09:e4:62:00:4d:e1:1d:e8:65:8f:ea:b6:08:81:
         41:e7:5d:df:25:f3:18:45:d7:50:4a:79:34:0b:0b:7c:86:a8:
         65:e5:84:aa:66:2d:4f:2a:7b:d4:03:7c:9c:23:21:ad:c9:fc:
         4b:98:0f:5a:37:49:33:76:d1:62:04:45:18:61:94:69:9b:a6:
         65:ea:91:c7:f7:b4:92:82:2c:cd:a3:fe:be:bc:28:89:51:6a:
         3d:21:2c:30:54:5c:f1:6c:28:65:96:82:60:d5:a2:3b:5f:c8:
         68:cc:99:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:06:07 2025 by rpki-client