Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/94c81576-d7df-3712-8359-86dc46480453.roa
File:                     94c81576-d7df-3712-8359-86dc46480453.roa (raw, json)
Hash identifier:          /h71H8LVGcpYWx9z3Jz7aM+2wbLkegWKgd1EQOiHgoU=
Subject key identifier:   85:BC:0F:CA:16:3D:40:E8:78:EA:B3:FF:5A:CE:86:43:3F:4A:2C:0D
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584B63673B82D7CAAFFB1F99C460
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/94c81576-d7df-3712-8359-86dc46480453.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     14061
IP address blocks:        165.245.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:3b:82:d7:ca:af:fb:1f:99:c4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=7e28c44e-344f-4054-988f-84c2e470dbd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:21:83:e1:94:7b:06:68:66:2e:a6:18:a6:5d:
                    99:b4:fd:5a:d8:43:a0:36:64:dd:7e:6b:42:3e:d4:
                    01:59:ca:d4:92:88:8a:de:48:a1:42:3e:de:cc:63:
                    2f:e9:f9:80:7c:b5:b9:a2:1a:ef:99:0b:8a:31:39:
                    39:34:ab:27:69:ee:d6:74:2c:02:71:1d:83:6b:a5:
                    29:e1:54:84:ca:48:49:7b:42:1d:a2:93:fc:8c:11:
                    35:61:ab:cb:20:ca:39:1f:c1:a9:65:1d:29:d2:13:
                    1e:cf:82:6d:d3:64:a6:c4:59:98:53:b7:96:a7:60:
                    81:45:dd:e3:bb:dd:da:a3:7a:1b:f7:13:c6:ae:1a:
                    8b:9c:b9:7b:4c:36:04:22:ed:9c:a4:46:01:08:1d:
                    1a:1c:e4:62:0e:24:6d:a7:63:41:9c:62:db:6a:17:
                    d0:04:59:26:f2:08:30:2e:d2:c2:51:e7:b1:43:3a:
                    ea:cb:d9:2c:53:d4:ae:b5:59:4e:60:f9:97:54:11:
                    65:b5:cf:9a:11:54:98:4a:09:79:59:6b:bf:15:71:
                    68:52:eb:09:7d:23:fd:94:42:c6:20:2a:fc:e6:6b:
                    89:65:1b:54:48:b8:81:67:5f:82:a5:27:cb:d4:55:
                    16:2e:14:01:73:d0:47:7a:42:eb:96:7f:2d:f6:c9:
                    48:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:BC:0F:CA:16:3D:40:E8:78:EA:B3:FF:5A:CE:86:43:3F:4A:2C:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/94c81576-d7df-3712-8359-86dc46480453.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.245.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:28:1a:63:b9:62:de:5a:df:76:9c:c7:7f:73:ef:19:27:90:
         bc:44:24:e5:64:ae:b2:71:1e:07:8f:50:4b:0e:1f:22:90:40:
         38:92:69:e5:e1:22:f4:54:43:1a:a2:ed:ce:b3:3a:94:c8:f9:
         22:84:d5:12:b4:7c:07:43:fc:e0:22:40:b5:a1:af:0c:92:09:
         53:31:a1:54:57:77:0d:3e:c5:8d:31:9a:58:55:82:25:0a:93:
         b3:fb:65:d4:ed:2a:51:62:05:c0:88:e9:ba:45:9d:2a:cd:70:
         04:80:20:bd:82:12:8d:59:1f:33:59:39:9a:ab:70:77:36:39:
         f3:e9:d6:f1:b5:94:d1:2d:f7:78:1d:e5:5e:a4:96:c5:7b:57:
         af:73:70:d3:06:80:70:c4:b9:bd:02:f4:cc:e3:0b:34:04:3f:
         c7:a4:2e:9f:3f:cd:e3:02:6b:3c:9d:9b:b8:25:22:fd:16:c8:
         72:19:52:d9:30:ad:dc:fb:54:0d:f5:51:f5:4a:8f:ff:ef:f8:
         1c:c8:da:ac:5a:52:6d:ae:ef:9b:2a:bd:e3:c2:ca:03:d4:cc:
         3b:87:a8:d8:8d:50:07:11:a5:3d:52:2b:be:2d:f9:01:c6:d0:
         8d:7d:9d:bb:e0:2e:60:d8:af:d3:55:4a:9d:53:16:87:0d:5a:
         ba:5e:03:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:55:47 2025 by rpki-client