Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/948fbee0-424d-3b76-ac11-83d952eebd26.roa
File:                     948fbee0-424d-3b76-ac11-83d952eebd26.roa (raw, json)
Hash identifier:          dgJaR9GTQ3X792jacFJT8gPPNUu0vOFUBS3t86KCMJ8=
Subject key identifier:   E3:E0:E6:42:FC:4A:A8:7E:E2:82:56:EE:FB:42:A7:36:63:CF:A5:A0
Certificate issuer:       /CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Certificate serial:       010D0C9F4328584B92DCEDFF5569E7C2F2AD2440
Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/948fbee0-424d-3b76-ac11-83d952eebd26.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     14618
IP address blocks:        144.81.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:ed:ff:55:69:e7:c2:f2:ad:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=58753fe2-e2fa-4cb7-acc4-d1a6417df026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0f:2c:ae:c7:88:5d:f9:97:00:a2:d9:2c:ad:
                    e9:d0:d4:94:70:e8:56:bf:26:a7:80:1c:6a:95:51:
                    a3:2c:10:75:58:9d:19:77:f1:c4:f3:3b:b8:d6:6f:
                    39:57:c8:b5:56:1e:59:97:51:3f:fb:5f:16:34:31:
                    58:02:58:00:27:23:8e:3d:e7:d3:0d:50:d2:be:46:
                    cf:2d:6e:86:20:60:b4:9f:60:32:d4:46:d5:6d:4e:
                    1a:bb:47:38:43:db:4a:e6:e3:fb:62:ac:81:7e:41:
                    ae:aa:2f:5c:31:ee:5a:0f:2d:45:b6:d9:60:03:e7:
                    6d:da:4b:0f:99:59:35:f1:3b:08:7d:c8:a3:68:75:
                    32:2b:ab:35:fd:f0:89:6a:75:5d:fa:2b:fa:16:a9:
                    69:7b:53:72:2d:e4:1c:89:e0:e6:2c:c5:ba:70:13:
                    62:77:62:23:a1:c5:02:2e:98:bd:76:05:8b:8b:65:
                    92:33:8d:ca:89:0e:c8:25:6d:0e:c0:df:11:20:bc:
                    9c:a1:7f:91:c6:96:44:1c:84:77:45:da:9d:11:8f:
                    1e:e6:65:55:17:db:2e:83:44:5e:04:e0:6a:5d:95:
                    af:d6:9f:32:98:b6:17:d2:32:74:7f:f2:72:f0:9a:
                    08:77:11:10:34:40:10:b3:d5:11:c5:53:af:55:44:
                    f3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E0:E6:42:FC:4A:A8:7E:E2:82:56:EE:FB:42:A7:36:63:CF:A5:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/948fbee0-424d-3b76-ac11-83d952eebd26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl

            X509v3 Authority Key Identifier:
                keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.81.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:29:3b:86:b7:ec:0e:ac:0c:e9:f3:3f:9a:95:ed:c8:f9:53:
         ce:56:58:74:7f:02:b2:13:b2:4d:7b:fb:36:d1:a3:b6:44:1e:
         2f:41:ed:c3:c8:24:19:8f:c6:57:b2:58:0d:93:44:ff:af:29:
         a2:47:96:db:fd:0f:2f:c6:3a:40:be:ab:72:40:86:81:fe:da:
         bb:3d:41:2a:2c:80:d2:74:a7:9f:88:48:4c:9e:1e:1e:42:43:
         25:d6:71:61:e2:ff:2b:08:22:71:c0:aa:34:a2:08:67:0e:28:
         85:5b:6f:ab:aa:c4:e8:5f:35:a7:96:07:49:12:e5:8c:3b:74:
         2f:ba:a9:e5:67:20:06:f1:48:fb:98:b0:b8:6e:1f:f3:4f:5f:
         c2:90:4a:9a:ef:53:92:9e:ae:4f:7c:f3:b4:16:b4:da:2c:93:
         61:d1:44:db:bd:13:d7:d6:f4:54:9d:3b:3f:75:e2:c9:0f:7c:
         24:62:04:b4:23:c4:42:20:97:64:c3:b7:b0:0a:b7:f0:05:08:
         e5:75:f7:af:10:24:94:c6:d7:e0:fb:1c:14:eb:ce:30:8a:b1:
         53:89:46:cd:4b:a1:11:fc:09:b7:d1:34:0e:5d:8e:53:5d:69:
         f7:8c:40:a6:a6:1b:90:78:2a:39:3b:86:a5:55:59:0e:eb:a2:
         f7:f6:7e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:23:48 2025 by rpki-client