Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cdecc7b8-2f8b-3dd2-bb8c-5172eba0da8d.roa
File:                     cdecc7b8-2f8b-3dd2-bb8c-5172eba0da8d.roa (raw, json)
Hash identifier:          /PBzNr7Bs8hV+p5cphVGXlzYfwBEpoR4TxleAobEO7g=
Subject key identifier:   E0:2C:14:B0:A8:3D:87:12:A4:DD:9A:D6:29:67:8E:95:8A:C5:6B:D1
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB796FE9982FE0345E57E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cdecc7b8-2f8b-3dd2-bb8c-5172eba0da8d.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33650
IP address blocks:        162.151.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:96:fe:99:82:fe:03:45:e5:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=45404800-00ce-4524-b641-cd8c3e580dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4a:d6:09:04:07:b2:bb:f6:b5:51:ce:fe:7f:
                    b2:9b:a3:2e:46:dc:d0:70:fb:8e:3c:72:36:5f:9b:
                    fe:9c:39:19:ad:f2:3d:19:3d:13:8a:11:a1:30:2e:
                    56:e2:78:e0:df:51:d2:38:4a:c8:d2:1e:01:69:c4:
                    60:70:40:5f:1d:73:4f:c8:79:25:9a:2d:f7:56:27:
                    ab:9e:e9:4e:42:a4:4b:71:23:d7:3b:00:9f:28:13:
                    27:c1:8c:37:4f:cd:15:a9:59:04:3b:e8:b4:26:63:
                    15:05:67:f6:45:f9:bb:87:5f:f7:75:6a:ca:54:8b:
                    75:e6:00:e1:88:71:60:a5:62:9b:7c:c1:6f:e3:ea:
                    9b:14:24:d0:a8:b4:46:00:28:2f:ec:6a:9c:65:39:
                    9f:20:cb:e5:45:82:1e:12:9e:80:c6:49:67:f6:20:
                    ea:41:a1:fe:ff:ed:56:96:db:9d:86:e5:b9:57:33:
                    35:c4:2d:05:bc:fb:24:b4:13:02:2e:2e:0a:4a:ce:
                    a3:2b:93:c8:db:30:98:9c:41:78:09:70:94:d7:ac:
                    8b:b2:82:3d:02:0f:62:7c:48:a3:b3:70:15:7d:79:
                    2b:1b:e2:fd:31:de:c1:de:97:18:3f:a8:1c:ff:5c:
                    62:0c:72:cb:ee:fc:91:b2:a1:f0:ab:dd:ec:c7:3d:
                    13:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2C:14:B0:A8:3D:87:12:A4:DD:9A:D6:29:67:8E:95:8A:C5:6B:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cdecc7b8-2f8b-3dd2-bb8c-5172eba0da8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.151.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:56:6f:93:bf:a6:35:40:1e:85:88:61:13:0e:9a:13:35:3f:
         9c:e4:83:4a:dc:81:7c:d3:7f:c1:13:e5:76:67:88:ca:76:69:
         78:94:2e:cf:43:5f:74:69:fc:0b:b9:27:89:24:2c:6a:aa:6b:
         fb:57:0f:98:65:42:92:29:c2:d6:10:6c:1e:f1:48:33:1b:8a:
         4b:2f:ef:21:8e:07:f0:7d:90:ce:b8:f2:26:7a:f5:79:b2:ba:
         9f:a8:da:fe:c5:e8:ef:0d:45:97:08:cc:14:24:0b:15:4c:7e:
         b6:99:23:e7:ec:08:d2:73:a8:16:ed:f4:21:35:df:62:2b:c3:
         ed:6b:75:26:55:31:c7:30:72:71:a1:08:77:f1:6d:f1:d8:19:
         34:21:bf:78:15:ca:42:92:d4:7e:d1:53:1d:34:34:bd:62:84:
         83:0b:5f:3e:c7:1b:f0:59:45:84:ea:f5:b1:1b:42:54:07:51:
         48:97:88:8d:81:c2:b8:f0:8e:46:ff:7c:8e:c6:ad:aa:5a:d3:
         5f:95:da:7f:67:ff:e5:1e:fe:22:30:bd:d5:71:40:b5:a0:b2:
         b0:d9:9f:d6:66:e9:cd:d6:30:ef:b5:23:92:03:19:ad:9c:2d:
         22:93:35:88:a7:af:5a:6e:d4:a9:3e:7c:84:c4:39:d5:18:1b:
         4a:6f:84:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:12:09 2025 by rpki-client