Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/1e413a1a-5431-33a4-918b-b141173b37d2.roa
File:                     1e413a1a-5431-33a4-918b-b141173b37d2.roa (raw, json)
Hash identifier:          s/GoYKjVOL+u1nI2J23YfXYJ/y9PdPpcLenhTjgDXEI=
Subject key identifier:   12:0D:91:51:D4:FF:98:18:14:46:AB:81:F2:7C:C2:31:57:0F:7E:C5
Certificate issuer:       /CN=a6ba0fd2-b526-4985-9314-bf6485056a64
Certificate serial:       010D0C9F4328584B8BE21DE9FBEFA8438C3A2C00
Authority key identifier: CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/1e413a1a-5431-33a4-918b-b141173b37d2.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     2552
IP address blocks:        128.252.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:1d:e9:fb:ef:a8:43:8c:3a:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6ba0fd2-b526-4985-9314-bf6485056a64
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=07d8cd2c-01f7-40b1-baf8-33aef88a406e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:23:a3:b6:00:47:00:f0:b7:8a:01:ed:70:7e:
                    8a:e1:4b:c7:a5:91:21:0a:3f:9d:24:6c:ce:ae:2a:
                    2b:2d:7a:98:ad:08:f6:74:e8:61:b0:bf:60:20:8a:
                    21:f5:df:15:9c:7e:cc:c5:b9:47:90:c8:8f:b7:07:
                    3a:0c:60:ca:84:03:47:80:cc:13:58:03:2f:4c:92:
                    b7:9d:f8:44:af:d3:0f:1b:6b:35:2b:09:69:e1:94:
                    22:5e:0a:36:56:50:ad:d7:30:71:9e:c3:f3:36:aa:
                    d7:68:c3:74:cb:0b:2a:1c:96:79:5c:6c:9e:22:b5:
                    41:7e:3e:d6:7d:e0:64:5b:30:cb:79:ab:fd:a9:f9:
                    0c:7b:db:76:c2:28:1c:46:6f:07:3b:49:b9:25:c0:
                    be:53:71:59:53:ed:c2:1a:86:4d:1c:b8:39:b7:e0:
                    05:b6:7c:8e:c4:8b:fc:5b:5a:5e:6e:97:bf:16:0e:
                    1c:90:7b:34:11:8a:80:c3:ec:05:03:bc:49:14:ed:
                    12:37:ec:b7:bb:97:3d:ea:ee:b5:c9:87:2c:9a:48:
                    16:fa:5c:73:ab:8e:19:94:c0:80:78:bd:52:c4:fb:
                    90:a3:a7:22:f5:13:4c:e3:8b:2d:e5:04:70:b3:b3:
                    8c:9c:7f:79:0e:62:69:57:76:92:4e:51:ed:06:f0:
                    5c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:0D:91:51:D4:FF:98:18:14:46:AB:81:F2:7C:C2:31:57:0F:7E:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/1e413a1a-5431-33a4-918b-b141173b37d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64/a6ba0fd2-b526-4985-9314-bf6485056a64.crl

            X509v3 Authority Key Identifier:
                keyid:CC:23:95:78:8D:02:B3:B1:39:3C:D8:49:09:D0:31:6B:4F:1C:A6:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a6ba0fd2-b526-4985-9314-bf6485056a64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.252.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:4d:01:16:39:83:d2:2b:d7:01:59:e4:2a:da:ec:ab:22:e7:
         3b:5b:0b:8e:f2:ce:ce:40:ed:be:a6:81:4e:08:42:eb:8f:5f:
         16:99:95:40:3a:fd:f3:21:dc:22:27:26:50:4f:54:65:b5:02:
         d1:e1:f5:3e:61:cf:91:68:97:9c:d6:17:17:67:95:90:b2:54:
         fb:b2:f7:9f:b6:90:b7:4c:55:66:0c:48:f4:1c:36:53:c0:bf:
         24:2e:ea:e4:1d:1b:6f:43:a0:33:51:0d:9c:9c:a1:d7:70:00:
         16:f4:7d:cb:7e:2d:30:48:de:09:10:57:24:b6:47:ef:93:8b:
         8f:68:fe:1c:f2:f6:b5:b1:9f:8c:70:38:12:3a:ed:40:16:fb:
         e6:73:b5:17:e4:9b:32:d6:55:71:40:f1:9f:a5:89:e1:e2:e3:
         16:01:89:5f:a7:57:17:b4:95:0a:fd:47:95:c4:b7:6b:f0:a8:
         46:f6:a5:e1:43:41:bc:e1:c8:1b:4c:82:6d:0e:f1:3a:d5:f8:
         a5:85:85:99:57:a6:88:bd:26:de:c5:bd:41:6f:37:08:86:c0:
         61:23:d3:8a:a2:58:79:5b:06:84:f6:c4:3e:c5:30:b5:79:f0:
         a0:5a:e4:b1:c3:56:74:7e:dd:ce:e7:d5:09:22:95:8a:67:16:
         80:7d:41:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:51:53 2025 by rpki-client