Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/21cae0da-b7d2-376a-b30e-1ce5df63fd40.roa
File:                     21cae0da-b7d2-376a-b30e-1ce5df63fd40.roa (raw, json)
Hash identifier:          o/PcxMi8BWEzle7Tcrqj4F7Acz5X63Qnzcq6Dt4WkwY=
Subject key identifier:   EF:A5:B8:74:4B:BA:00:F3:54:3A:10:EC:AF:5E:4E:EC:6A:B5:FA:74
Certificate issuer:       /CN=2fd92816-1579-4d40-9111-f86331c3fd8f
Certificate serial:       010D0C9F4328584B7DECAC6909A466CE32748600
Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/21cae0da-b7d2-376a-b30e-1ce5df63fd40.roa
Signing time:             Sun 12 Oct 2025 01:00:30 +0000
ROA not before:           Sun 12 Oct 2025 01:00:30 +0000
ROA not after:            Sat 10 Jan 2026 02:00:30 +0000
asID:                     14977
IP address blocks:        137.87.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7d:ec:ac:69:09:a4:66:ce:32:74:86:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f
        Validity
            Not Before: Oct 12 01:00:30 2025 GMT
            Not After : Jan 10 02:00:30 2026 GMT
        Subject: CN=f567e76d-cff5-4ef1-b0f9-d9b2d5f615c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d1:75:8a:30:eb:92:89:e9:05:8b:91:aa:04:
                    cc:76:09:19:1e:91:c1:c6:0a:55:57:c8:c0:fb:4e:
                    d0:b5:43:9a:13:63:da:bf:0e:64:10:f1:59:a3:6c:
                    99:c2:4f:65:33:31:4c:5f:de:6d:f3:02:96:05:a7:
                    21:d0:44:91:86:ed:5c:67:53:95:3e:d1:70:c3:93:
                    1c:d6:69:81:be:27:36:29:ef:64:87:b2:b8:e7:2d:
                    89:cd:50:63:44:37:21:e4:50:84:e0:f9:5b:49:c6:
                    38:93:57:aa:7c:11:93:86:13:77:81:d6:44:c0:85:
                    68:28:84:ff:47:d4:a8:66:1b:69:c2:9c:37:09:f8:
                    e9:be:a1:23:1f:23:36:a6:18:83:c9:e9:e5:f3:a6:
                    ff:da:f9:19:03:44:94:f7:24:e3:9a:ac:98:81:9a:
                    09:b3:51:96:7a:e3:4a:6f:06:a5:25:3f:56:dd:60:
                    9b:95:6f:55:a5:b9:54:69:46:a0:aa:7b:1d:a2:4d:
                    a7:cc:7f:c4:31:fd:b3:33:7f:e8:7b:87:b6:f2:41:
                    64:7c:b9:da:f5:87:a0:17:29:d7:ad:4b:06:34:0c:
                    ce:c3:da:5d:e7:08:9f:39:1a:77:8a:22:8c:be:30:
                    51:01:e5:08:8d:77:81:26:77:a1:06:3a:e0:6f:d1:
                    d2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A5:B8:74:4B:BA:00:F3:54:3A:10:EC:AF:5E:4E:EC:6A:B5:FA:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/21cae0da-b7d2-376a-b30e-1ce5df63fd40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl

            X509v3 Authority Key Identifier:
                keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.87.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:de:a1:64:75:08:8d:a8:d9:30:3a:b5:43:d8:5d:8a:da:cd:
         4f:a6:8e:ba:81:89:bc:8a:d7:15:53:1d:48:84:2f:d8:a5:c4:
         e6:4f:f0:20:35:be:9f:f0:d9:33:fd:f1:bf:d1:12:43:5e:d1:
         67:74:f5:72:d0:4a:a4:f0:6f:15:9a:73:a2:44:80:56:6d:8c:
         ce:0d:27:76:04:aa:07:ed:c2:9f:f9:0f:7c:13:f4:fa:7f:54:
         60:cd:c6:91:e7:b8:02:ed:48:b9:02:32:96:4b:b6:53:2a:75:
         d8:3c:e4:90:a1:bd:e2:2d:ae:d6:4d:a3:bd:c2:98:13:7d:a6:
         95:bb:05:bd:bb:20:7d:ff:74:1e:29:ed:86:c5:e1:39:9b:16:
         9a:80:6c:13:63:c8:2c:79:00:e6:5e:d5:84:51:2e:cb:17:f1:
         95:fd:fb:f3:f3:64:ec:eb:a0:b5:fe:c7:c4:ae:74:7e:1b:54:
         0e:5d:32:d2:87:b3:2f:78:60:45:bd:98:81:d5:ce:10:f7:f5:
         16:3e:a7:5d:e1:9a:b0:06:c1:f0:62:a3:ea:5a:ad:87:14:1c:
         f2:af:63:5a:53:83:1a:2e:a6:b1:95:7f:ec:55:ac:b4:40:93:
         a1:67:18:7a:d2:be:bf:93:40:6f:e5:92:08:9a:67:ed:84:1d:
         ed:98:b0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 02:24:41 2025 by rpki-client