Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12d31d19-5e21-37fa-8988-325ddd71cbd9.roa
File:                     12d31d19-5e21-37fa-8988-325ddd71cbd9.roa (raw, json)
Hash identifier:          jKIs3F8M0BGtR7N3JJL8EmLF6vt+nWyC8t0kBjDRE5c=
Subject key identifier:   1B:58:57:96:44:B5:CB:01:40:0C:85:6F:30:3F:D5:93:2F:D8:4F:A1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB9AFD1878A9D2FD9EF1560
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12d31d19-5e21-37fa-8988-325ddd71cbd9.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     13367
IP address blocks:        76.113.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b9:af:d1:87:8a:9d:2f:d9:ef:15:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=0adca5a9-52f9-4a0c-a808-01ad62b4a60a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:93:87:15:7e:74:cf:4f:7b:e0:c1:d3:7c:3e:
                    a9:22:4b:57:94:ce:96:73:6b:8d:b3:5a:95:55:58:
                    6a:69:82:a5:d3:43:3f:a4:69:38:d0:5c:01:ad:46:
                    57:a2:f3:4f:84:51:63:e3:be:a5:bb:7c:a3:d4:38:
                    ff:ef:f7:28:83:74:78:09:12:76:95:18:83:ed:ef:
                    aa:e8:d1:67:05:65:3a:d9:1c:44:34:5c:e7:82:5e:
                    49:6f:09:92:af:d6:67:99:0c:e0:8e:a4:22:a5:04:
                    aa:26:f9:ae:71:06:4b:d5:22:54:31:cd:5f:34:5b:
                    70:11:ab:9a:a0:c0:50:60:d7:dd:a0:11:51:aa:b9:
                    57:d1:e8:0e:63:fa:89:da:6b:80:68:17:b9:a3:3e:
                    bf:f8:80:be:8b:53:56:6d:a7:83:26:8d:29:cc:0d:
                    49:68:bf:ce:78:a4:8e:47:2e:d0:43:ac:e7:fd:8e:
                    c2:2c:e9:5d:73:08:a5:3e:da:6a:56:72:eb:a3:fb:
                    ab:21:45:fb:70:88:07:d1:1f:3f:5e:2b:ef:7d:f1:
                    80:0c:0e:f7:20:a9:f4:1e:e5:b1:0f:16:87:81:eb:
                    e1:02:a3:99:80:81:97:fa:7f:8c:3a:6e:85:48:f2:
                    1a:4c:8c:85:73:89:10:ce:a0:10:92:49:fb:41:e6:
                    79:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:58:57:96:44:B5:CB:01:40:0C:85:6F:30:3F:D5:93:2F:D8:4F:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/12d31d19-5e21-37fa-8988-325ddd71cbd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.113.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:38:71:43:29:13:82:ed:ab:12:37:11:89:2b:5c:1d:77:40:
         bd:f2:46:b0:77:75:30:ca:fa:ad:16:6e:da:22:61:06:d0:c8:
         ca:cd:6e:bc:66:61:46:58:98:94:83:e8:82:73:c5:f7:b9:b7:
         23:9c:a2:db:a6:b3:de:26:9c:10:70:e1:cc:8d:79:a3:fb:10:
         b9:ec:6d:83:26:22:8a:f3:e9:17:53:e4:5a:d2:c9:a2:77:0c:
         f3:96:ec:01:77:ed:41:d2:42:48:72:62:2e:18:0c:47:ce:41:
         3a:c3:7c:04:2f:68:48:e5:fe:c8:34:4a:70:49:2d:a8:da:c1:
         da:78:0d:ce:c3:f5:f2:9d:da:d3:47:55:81:bf:45:f7:5c:6d:
         42:98:75:ad:0b:ff:6b:5c:e4:f4:8b:dd:b2:b5:3e:f1:c5:78:
         18:df:b9:c2:26:0b:6d:28:78:db:44:44:43:4d:d9:5c:b8:80:
         08:c8:57:7f:2a:cb:b7:c2:f0:6e:ea:3c:87:a8:8f:18:1f:f0:
         e6:06:a4:a8:54:8a:ae:e1:c6:32:bf:e3:e4:07:29:cd:fa:82:
         de:10:6b:32:d4:58:c0:c3:20:1d:b4:e5:03:99:c8:ed:b1:fb:
         b3:89:6a:e0:f8:fd:a7:eb:68:34:aa:29:0f:b6:0e:ad:8e:9b:
         f0:85:db:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:10:33 2025 by rpki-client