Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa
File:                     bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa (raw, json)
Hash identifier:          NPo+WynGubxf/PsOa+oY4i1P405q8sUXW2kd9tSTv5w=
Subject key identifier:   DA:E6:44:A6:CB:F0:D2:2A:46:45:CE:7F:A1:89:9E:69:B0:BD:A1:C9
Certificate issuer:       /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Certificate serial:       010D0C9F4328584B79BCB8DEAA476B9CF874CE40
Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     23467
IP address blocks:        152.38.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:b8:de:aa:47:6b:9c:f8:74:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=74a7bde0-02cc-4ebe-be25-2ca86bf26884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:14:9a:aa:e3:1e:dd:1a:87:12:51:ab:af:bb:
                    6e:4f:72:cb:45:09:da:73:e7:0a:7d:8c:05:91:8d:
                    f8:9d:3d:a7:0a:4b:f8:99:2f:ff:86:17:b4:86:ef:
                    d5:9f:02:8a:60:ed:db:9b:86:b1:da:5b:d2:36:3c:
                    3f:08:c6:22:48:25:f5:13:63:d2:78:55:e8:c0:e8:
                    b2:58:2e:c9:0d:83:54:04:2b:04:7c:e9:b3:84:90:
                    77:d1:81:6a:c5:fe:67:d4:f6:6b:a3:aa:92:3f:ac:
                    8f:9e:c9:90:18:57:2a:f1:53:6e:b8:e3:b8:5e:f4:
                    98:15:72:a0:92:86:03:46:3e:d6:19:67:5e:aa:6e:
                    b6:e4:1c:9c:9e:1c:87:f6:9e:07:26:5b:ed:78:6a:
                    4a:b5:7b:aa:5d:0f:e9:5e:7f:b6:8a:41:e8:f3:fe:
                    ef:50:0b:71:1c:90:06:30:39:5f:03:ea:2d:aa:92:
                    14:b7:ae:c4:c4:d1:c5:4f:98:20:aa:14:5b:ec:81:
                    06:93:9b:6f:a8:6f:f9:fb:a4:d6:bc:f6:f1:e8:48:
                    b9:4b:3d:d9:97:6b:c5:33:e0:97:de:c5:bc:2b:d4:
                    5c:6d:a1:dc:8e:0b:0a:25:44:7b:14:dc:b5:40:54:
                    c9:9c:0a:b5:e4:82:96:35:c9:06:38:26:e7:ed:d6:
                    c5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E6:44:A6:CB:F0:D2:2A:46:45:CE:7F:A1:89:9E:69:B0:BD:A1:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/bd9cdb5f-dea7-382d-91ce-1422e8fd3c97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl

            X509v3 Authority Key Identifier:
                keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.38.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:15:24:a6:65:70:50:ef:ef:93:e5:a2:7a:de:b1:49:19:fc:
         89:ed:7f:e0:92:5f:f9:1a:ca:6a:e3:bc:e3:a9:71:11:b2:0e:
         80:ca:1a:0d:1e:f7:29:d0:b3:8d:f5:7c:52:73:b9:50:19:20:
         61:e4:18:f1:0f:10:73:62:6c:dc:12:aa:1f:d9:16:96:c3:6b:
         06:d4:b0:e7:18:3c:9a:10:27:25:6f:2a:05:db:c4:56:12:ac:
         ef:a3:44:93:8c:a7:b6:d4:26:e2:e8:4d:bf:fa:12:a9:ec:e4:
         ff:c1:04:40:80:c6:54:f8:95:5e:f5:17:15:14:6f:f6:33:30:
         4a:05:59:ae:2a:7b:82:7d:af:92:39:7c:0d:39:21:19:46:fd:
         47:b9:10:94:34:63:67:45:7e:b6:36:c4:ae:19:a3:10:2d:29:
         17:69:06:ac:07:26:59:dd:32:db:90:c3:10:1c:5f:d2:09:94:
         9d:e2:05:eb:ba:f3:e9:07:78:fd:25:f1:f8:a9:92:d9:3f:7f:
         01:f7:da:69:b1:38:41:ff:72:cf:b0:ba:5a:33:28:44:25:da:
         f7:f6:b6:b9:e8:ca:c0:2c:1e:ef:67:8c:5e:3c:45:d4:de:d1:
         62:d5:34:4d:8d:60:bd:a6:fa:7f:db:55:d3:0d:b5:05:c5:3a:
         48:f3:a5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:48:57 2025 by rpki-client