Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/8e2ea041-1ead-3091-8c95-6513cd5d1e12.roa
File:                     8e2ea041-1ead-3091-8c95-6513cd5d1e12.roa (raw, json)
Hash identifier:          ZWMuv8WtF5ykSLW2ppR1MEX7n5TAYI8umn/GPK4hUEg=
Subject key identifier:   E2:F6:07:B6:70:B3:A4:E5:96:8F:EF:BE:DD:B2:89:A4:45:FC:A5:C3
Certificate issuer:       /CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
Certificate serial:       010D0C9F4328584B5B074923AF7E78BDF09A7980
Authority key identifier: 36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/8e2ea041-1ead-3091-8c95-6513cd5d1e12.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     23341
IP address blocks:        143.55.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:49:23:af:7e:78:bd:f0:9a:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b6fd262-94ea-4e33-af3e-212abe0fc628
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=6a36f997-7b13-4051-97cb-aa1358dc9fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e2:2f:7d:1c:f2:60:ec:37:0d:80:a8:f9:7e:
                    df:19:23:5b:a6:3e:e1:9a:b4:bd:c4:46:77:ba:93:
                    aa:03:ff:a6:df:0f:5d:33:f0:5c:91:09:be:d4:5e:
                    47:64:89:a0:5a:2d:e9:15:70:99:d1:e1:54:b5:4a:
                    14:23:4a:96:0e:47:1b:a5:7f:64:6f:86:53:f4:25:
                    e1:c8:d7:9d:49:c2:82:0c:48:53:03:9d:ae:6f:2a:
                    44:07:77:b8:30:1a:81:2d:e7:9b:54:99:e1:90:38:
                    ea:f3:0b:da:23:c7:27:44:ec:a3:c1:50:33:b3:5a:
                    f4:e5:b0:34:48:4f:28:ae:c2:47:ba:fd:ac:3b:2a:
                    83:11:b1:ba:05:d0:b9:ab:bc:93:c6:23:e8:63:8f:
                    91:95:05:35:77:2a:a3:5d:64:71:e4:a0:fa:bd:12:
                    3e:34:db:8d:ec:d2:e4:55:5b:df:ba:41:a1:7d:df:
                    a2:04:42:6e:07:e5:d5:36:c3:b4:80:f8:08:3c:a2:
                    88:de:38:f1:bf:bc:ce:8c:8d:66:2f:03:7b:c5:0f:
                    a5:7f:62:f8:8e:79:5e:99:1f:83:8a:26:13:ad:e8:
                    33:68:b8:87:52:ac:a3:9b:94:6f:e1:41:ba:a0:83:
                    62:ad:14:1e:8e:4e:df:52:2c:dc:f7:2d:59:bb:74:
                    85:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F6:07:B6:70:B3:A4:E5:96:8F:EF:BE:DD:B2:89:A4:45:FC:A5:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/8e2ea041-1ead-3091-8c95-6513cd5d1e12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628/5b6fd262-94ea-4e33-af3e-212abe0fc628.crl

            X509v3 Authority Key Identifier:
                keyid:36:3C:C8:50:79:A5:6C:A5:32:F4:78:54:FF:FC:3C:FC:18:F8:33:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5b6fd262-94ea-4e33-af3e-212abe0fc628.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.55.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:21:a8:82:d5:9d:a0:a4:33:81:31:63:a9:97:a7:e4:3a:c6:
         ba:cc:4a:af:7b:29:e1:6e:18:4c:06:ef:94:c5:42:85:73:27:
         89:6d:4e:a0:8c:7c:73:8c:54:c8:28:1a:6c:f4:3f:bd:35:aa:
         17:a5:17:5e:d2:a3:83:a7:5d:f5:4b:99:b2:11:2e:c1:13:a4:
         fc:71:8c:1d:fe:4c:e5:45:7d:c5:f5:d4:f8:be:c4:7d:a6:34:
         06:78:61:dc:2c:be:71:ad:0e:8e:33:ca:c7:c1:94:a8:2f:94:
         34:aa:76:c7:3d:aa:55:c6:b0:37:69:3d:44:71:ad:31:eb:6e:
         43:47:1e:b7:ad:f8:b7:55:36:3c:ac:b4:89:92:31:38:6e:98:
         fa:f8:01:e1:a8:34:23:bd:a2:6e:76:04:8d:b8:04:36:b5:a5:
         ce:35:91:34:0f:00:4e:6f:12:5a:d6:19:a9:59:0d:a8:c6:a3:
         56:98:36:1f:49:98:16:40:51:da:c9:e0:74:54:f3:90:02:b5:
         22:77:59:3d:5a:25:ec:99:22:a0:45:7e:a2:c6:ef:5e:5f:65:
         6e:63:b8:a1:d1:36:36:38:b6:54:44:e7:c8:45:21:ac:08:64:
         55:5f:67:89:b3:56:a6:14:55:68:42:a9:48:e9:ba:08:e0:d2:
         b4:e7:4d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 05:17:15 2025 by rpki-client