Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/c1dcd54c-383d-3372-b220-849655424f31.roa
File:                     c1dcd54c-383d-3372-b220-849655424f31.roa (raw, json)
Hash identifier:          lsKGA7mRlfFi51HQMgZa/SNX/9+AMvLrvbKQ9/1Xatc=
Subject key identifier:   EB:5C:48:0A:77:F3:D6:98:AB:AC:7C:ED:05:05:00:F9:42:D6:CD:55
Certificate issuer:       /CN=fd83f526-dd8b-4cf3-b500-0525ad5fac1a
Certificate serial:       010D0C9F4328584AAB264FA2354C3ED02D5DA680
Authority key identifier: EA:D5:99:AA:D7:81:62:8C:7F:6D:44:F6:D9:D7:B6:CD:15:5A:AE:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/c1dcd54c-383d-3372-b220-849655424f31.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     33291
IP address blocks:        162.210.243.0/24 maxlen: 24
                          162.244.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:4f:a2:35:4c:3e:d0:2d:5d:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd83f526-dd8b-4cf3-b500-0525ad5fac1a
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=2f8f9ab2-1ba9-4bbe-966a-6f6c5b736b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a7:6c:e0:a1:5e:f2:ae:79:1a:2b:0c:37:50:
                    bc:5f:37:14:96:65:dd:8b:1f:54:ce:da:e5:b3:81:
                    cf:cb:31:41:95:51:45:a5:9f:35:ad:62:aa:82:6f:
                    9f:4e:46:e1:b9:ae:be:28:16:70:b3:33:50:a1:cc:
                    50:b6:09:88:82:18:f3:e5:be:03:91:02:61:45:4b:
                    a5:83:e9:7e:3e:fe:79:03:67:d0:55:40:cd:60:a4:
                    2c:f2:b8:50:bb:5f:87:c4:05:34:bb:19:f6:ee:d0:
                    a0:fb:d3:e7:2b:ff:2b:e9:82:02:20:b2:d5:1e:87:
                    92:bd:db:15:ba:7a:d6:4e:0f:e6:24:4f:94:41:4e:
                    f3:99:a9:b0:2a:ad:8e:d3:54:d2:94:4a:5a:b4:e3:
                    14:c5:84:5b:0f:64:ba:ea:3b:f2:b4:1c:d6:15:e8:
                    6c:a1:9b:3c:25:05:e7:65:6b:c5:44:4e:03:5c:0d:
                    e6:b9:02:d5:bf:53:38:1a:13:98:b4:13:c7:f7:64:
                    ab:57:dc:6d:5b:57:5c:0d:66:c7:19:d4:d3:c6:47:
                    ec:77:3c:7d:f5:7d:bd:fb:bc:4c:b1:0c:8a:8f:3b:
                    f8:eb:19:5e:61:dc:8b:5c:a1:5b:c1:70:97:11:0a:
                    67:09:d7:b0:4e:7a:16:23:0b:2c:bf:e2:b9:4b:7f:
                    db:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5C:48:0A:77:F3:D6:98:AB:AC:7C:ED:05:05:00:F9:42:D6:CD:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/c1dcd54c-383d-3372-b220-849655424f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.crl

            X509v3 Authority Key Identifier:
                keyid:EA:D5:99:AA:D7:81:62:8C:7F:6D:44:F6:D9:D7:B6:CD:15:5A:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fd83f526-dd8b-4cf3-b500-0525ad5fac1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.243.0/24
                  162.244.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:49:48:0f:22:c1:81:4b:f6:ba:57:38:ae:b7:57:07:54:3c:
         d2:af:2b:3f:4f:41:fa:9d:37:49:95:80:60:60:6a:5b:62:ca:
         03:ec:cc:25:07:7f:b5:04:80:20:1a:af:f5:76:44:6d:c1:24:
         4e:86:05:34:44:1c:22:ae:72:43:fa:b0:e3:ef:08:13:18:7d:
         66:79:ac:7c:91:ac:0d:d3:c5:94:50:b4:f9:2e:6f:b3:50:85:
         d0:97:8f:4f:95:84:aa:08:83:b5:05:97:60:fa:4a:68:5c:58:
         ae:b9:5a:ee:3f:f4:47:f5:18:26:1d:7c:ad:7e:1e:5f:10:8f:
         a5:f7:11:3e:e4:03:7e:70:43:e8:3c:8f:db:8a:40:f2:f8:55:
         a6:3b:66:bf:3f:29:51:d6:00:1f:1c:5f:02:45:e2:31:6c:0e:
         5f:d9:96:b1:29:c6:33:80:cf:4f:ee:27:e8:e0:76:fd:ec:0a:
         e7:e7:d3:b3:8f:e4:8c:b3:6a:a8:45:0f:e3:9c:77:4a:02:7c:
         92:4a:a1:ef:3f:ad:e9:89:58:8f:31:e7:31:df:e2:3b:06:77:
         ac:77:a4:5f:b2:82:c5:e4:a0:fb:2b:ba:b4:ee:85:f4:f0:91:
         40:3e:ce:f0:52:49:74:d6:e4:fa:3e:b7:aa:f3:25:dc:11:b6:
         28:76:68:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:14:47 2025 by rpki-client