Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fbed26b5-4c6e-3228-b11d-f20b5b22ee95.roa
File:                     fbed26b5-4c6e-3228-b11d-f20b5b22ee95.roa (raw, json)
Hash identifier:          VVSE4DxsLjrA3Xrt/fbiJgR3PhZApk8Hn/vpfKk9oYg=
Subject key identifier:   07:F9:C4:D0:2C:A9:4B:DB:75:6E:DB:90:96:3B:27:DF:BC:E6:0D:6A
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584ACF71036AE1025B2F7451F300
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fbed26b5-4c6e-3228-b11d-f20b5b22ee95.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     54113
IP address blocks:        131.125.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:71:03:6a:e1:02:5b:2f:74:51:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=27ea00dc-72ec-489d-acc6-217f5b7cab42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:17:b0:bb:42:66:70:69:7f:98:86:ec:f3:e8:
                    01:1b:36:a0:02:09:ad:25:23:ad:d4:5b:b5:f4:61:
                    2e:10:6e:e8:9e:91:28:d4:74:70:2c:7a:a2:66:c2:
                    31:a5:31:ca:33:32:e1:8f:7d:3d:51:80:5c:b2:48:
                    06:2e:bd:ef:62:ac:ac:d8:0c:e0:b5:46:65:38:48:
                    c2:28:9c:2b:6f:3a:55:6d:64:65:c5:18:aa:54:22:
                    fe:14:55:fd:cf:59:51:82:70:a8:8e:c8:9d:95:93:
                    a9:20:20:fc:b7:db:43:c5:72:15:30:09:37:1e:79:
                    c4:5d:e2:86:6e:62:01:16:5c:e3:49:c6:36:54:a0:
                    54:19:67:cf:38:fc:c2:6f:3f:a1:38:38:fe:e0:45:
                    63:c6:8f:c0:cd:f0:54:b8:6f:22:f8:05:40:f1:41:
                    9f:29:1a:f1:51:bc:ea:65:24:ae:28:b2:de:dd:8e:
                    15:68:20:93:62:73:aa:8e:57:29:53:8b:79:d0:68:
                    1a:57:29:0b:ba:fb:ad:8a:83:32:e6:ef:07:70:a2:
                    2e:b9:cb:f0:1c:51:82:fa:6f:5d:20:2f:94:2f:2c:
                    73:d6:6f:23:c3:07:34:85:b4:ab:08:be:e8:37:0a:
                    61:ef:c7:d1:2a:8d:4c:3f:98:4c:c1:c5:04:1d:e9:
                    54:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F9:C4:D0:2C:A9:4B:DB:75:6E:DB:90:96:3B:27:DF:BC:E6:0D:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/fbed26b5-4c6e-3228-b11d-f20b5b22ee95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:a2:65:12:53:1b:50:f5:79:9b:7f:2d:14:e2:f7:f7:a3:1b:
         54:04:f8:a9:a5:46:55:41:f8:c4:9d:89:6d:eb:29:26:af:29:
         83:4e:98:92:44:6e:6a:55:c1:7f:97:ed:de:b7:58:f8:fa:ab:
         b2:af:b0:eb:f3:6d:da:60:52:4d:53:cf:ff:3b:a7:76:4d:73:
         b7:b4:0f:fe:95:06:f0:d8:7e:be:99:98:e2:06:d7:e0:09:66:
         72:df:64:d8:e6:7e:3d:86:31:a4:90:c6:38:b5:a6:6c:ca:2f:
         70:9c:7f:fa:d0:07:c6:a4:8d:1e:1c:ab:02:48:1a:b2:04:99:
         df:d9:d9:7e:3b:8d:65:21:a3:01:97:26:01:89:76:d9:ac:55:
         f7:49:1c:d8:a3:2e:c2:81:23:50:fa:34:73:1d:86:35:c7:12:
         43:bc:3b:ef:f3:0a:c6:f0:1d:f7:e9:9e:81:cd:b1:e6:2c:dc:
         f2:c0:ba:6b:bd:0e:ff:2d:44:cc:ef:58:18:80:9b:95:6b:53:
         23:94:63:2d:70:cc:4d:8c:45:2d:4d:b7:48:60:83:3f:4c:59:
         31:e4:19:2f:b9:d9:b7:9a:91:17:26:7d:c6:69:55:b6:e1:a1:
         56:11:4c:35:57:87:89:8e:f7:36:cc:e0:d4:43:81:a6:60:a9:
         67:ce:03:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:17:11 2025 by rpki-client