Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/bf44ef86-5382-37ad-a8c6-7028498f62e6.roa
File:                     bf44ef86-5382-37ad-a8c6-7028498f62e6.roa (raw, json)
Hash identifier:          d0dKTPmfNoqKpBIQ5G8GeaRwB2z9diWlwYPj5+bTAXs=
Subject key identifier:   2B:96:5A:01:95:D3:77:92:4F:D9:31:2C:35:CE:5E:67:F9:17:EA:86
Certificate issuer:       /CN=0c1ef9c6-289f-416a-97db-f9a640a2b2e9
Certificate serial:       010D0C9F4328584B891775C06782E4007C16F380
Authority key identifier: 69:39:63:95:DD:5D:34:75:A2:16:12:5A:CC:D1:89:4D:58:47:9F:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/bf44ef86-5382-37ad-a8c6-7028498f62e6.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     15718
IP address blocks:        185.115.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:75:c0:67:82:e4:00:7c:16:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c1ef9c6-289f-416a-97db-f9a640a2b2e9
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=54479904-1c8d-4533-bb87-cfcc4918607f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:30:4f:ef:d5:47:27:76:c3:cb:03:cc:d4:52:
                    0f:5d:12:77:5b:f0:85:2e:46:54:0d:44:c7:2a:81:
                    93:4f:27:e3:84:95:70:52:f6:f0:88:f8:67:ac:eb:
                    71:a0:cc:08:c7:dc:4b:ae:db:39:db:ba:ec:dc:dd:
                    5b:46:d2:b4:d3:20:7e:af:df:ad:e6:6a:20:b4:ee:
                    17:b0:65:6b:8c:a2:61:a6:62:bb:cf:f3:f1:16:ae:
                    c2:22:52:04:38:ca:8f:eb:00:dc:73:e7:4a:21:d1:
                    44:3a:98:5a:9f:89:9d:74:53:36:d7:69:cd:5d:38:
                    68:46:90:8f:86:fe:0e:a5:da:c8:90:dd:d9:f1:b1:
                    6d:ee:c2:5b:77:17:f1:66:7e:97:72:d3:bb:59:01:
                    b5:8a:e5:cf:c1:7f:8f:e0:8a:59:10:51:25:38:75:
                    64:bf:ac:78:16:f4:98:e9:83:a0:c1:65:b0:f8:be:
                    ff:93:4c:d8:04:a2:60:8a:b6:76:4d:e4:5e:54:13:
                    a1:f1:31:07:90:9c:ae:9e:46:45:b5:ce:0b:37:49:
                    74:0c:31:68:65:52:c3:95:9d:9d:1c:ee:22:0a:c6:
                    c4:80:0b:42:9f:d4:f2:f8:a1:d8:1c:09:74:62:f7:
                    37:dd:98:a2:50:a4:7e:0e:2b:43:f3:50:d3:9f:30:
                    f5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:96:5A:01:95:D3:77:92:4F:D9:31:2C:35:CE:5E:67:F9:17:EA:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/bf44ef86-5382-37ad-a8c6-7028498f62e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.crl

            X509v3 Authority Key Identifier:
                keyid:69:39:63:95:DD:5D:34:75:A2:16:12:5A:CC:D1:89:4D:58:47:9F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0c1ef9c6-289f-416a-97db-f9a640a2b2e9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.115.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:3c:de:9f:b3:38:c9:31:5b:77:76:ee:93:49:2a:f1:21:26:
         0b:be:35:16:01:ec:f5:f1:8e:bc:c4:f7:31:0f:5e:6a:dc:2f:
         ad:89:42:7e:d6:34:73:35:29:e7:e1:6c:d3:a5:80:18:0e:62:
         4b:00:46:f2:a2:5a:c9:65:c5:ea:cc:4d:1b:6f:dc:e7:fe:5e:
         2e:1a:3c:02:ce:65:94:a0:28:44:2f:6a:56:24:b3:45:03:de:
         78:86:6c:e6:55:5b:eb:62:24:90:21:2e:f2:4b:83:9b:af:3f:
         05:2e:c2:7f:48:18:02:d3:e7:8b:17:e2:20:02:18:26:9d:85:
         26:54:26:72:fb:5a:93:7a:2c:f6:85:6a:5b:f6:e7:5d:30:6b:
         c9:94:ae:b6:35:ea:79:7f:a3:10:e2:d2:a4:87:8a:8f:63:8a:
         ce:cc:09:04:d5:01:6c:5c:33:43:46:e2:c0:05:69:1b:4a:b3:
         98:a2:52:1a:b8:91:23:b2:fa:d6:12:eb:03:fa:11:bf:cc:12:
         97:db:71:c5:d7:00:1d:4a:00:03:34:d4:dd:1f:f7:5d:5a:fe:
         78:e0:73:fe:7a:82:f6:e1:ae:ac:2a:e7:01:df:fd:02:46:4e:
         0f:7e:ec:d4:78:d5:4d:a4:c8:54:dd:ff:08:ed:a9:02:7a:c9:
         5c:5c:45:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:25:24 2025 by rpki-client