Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/3ff2d6f9-c66c-3621-92df-b8eb3ed0a323.roa
File:                     3ff2d6f9-c66c-3621-92df-b8eb3ed0a323.roa (raw, json)
Hash identifier:          bUYhd9YcczNBqhE71hmxLEcVLdgpZq7dGt1WY2OPZ8E=
Subject key identifier:   DA:E5:15:82:50:EC:41:D0:38:52:8A:E7:6B:BC:D7:07:5E:17:37:C7
Certificate issuer:       /CN=09c51633-340e-4eac-820c-a36b33746085
Certificate serial:       010D0C9F4328584B477C7C8F4225CF5936291BE0
Authority key identifier: 58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/3ff2d6f9-c66c-3621-92df-b8eb3ed0a323.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     13928
IP address blocks:        199.21.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:7c:8f:42:25:cf:59:36:29:1b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c51633-340e-4eac-820c-a36b33746085
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=c5c6971f-ffb1-49bb-9603-aafa48bc7e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:06:de:c4:99:f4:f4:59:bd:bc:97:7d:80:88:
                    67:12:4d:45:6a:a1:85:26:32:31:55:71:d6:d8:42:
                    e9:0c:72:cf:2b:8d:77:be:4c:f0:f3:aa:33:c3:81:
                    59:1b:b8:d1:73:ce:80:27:33:6e:4b:99:ac:53:06:
                    fd:34:60:6e:cf:dd:fe:e3:86:92:88:b8:99:42:63:
                    2f:06:47:01:c2:fe:bf:28:4f:73:1c:78:58:e2:ac:
                    51:7e:4a:fe:14:bf:d5:84:cd:60:5a:42:13:90:dd:
                    d3:d4:6d:b4:ae:31:d1:16:20:1b:c4:0b:c2:2e:f5:
                    64:4e:a1:36:0b:3e:b7:52:fa:98:52:c1:41:17:e5:
                    74:49:00:6a:10:c7:52:1f:7f:00:c5:d1:dc:1b:8b:
                    79:6d:db:9a:d2:e0:55:03:63:75:33:2d:50:92:c6:
                    4f:81:2f:e7:74:61:37:b3:87:f9:33:f9:b3:40:ad:
                    02:4e:aa:ca:96:fc:08:c7:58:9f:13:89:a8:95:1a:
                    71:88:e1:37:ed:96:2f:50:f9:5a:c4:35:a8:98:a0:
                    c9:20:0b:b1:ea:35:81:40:f3:6c:a0:13:dc:9d:8a:
                    f7:a5:3d:93:e8:bd:c9:08:61:d9:44:fc:d7:9f:de:
                    9e:27:fa:fc:3e:a6:c4:a6:b9:50:67:3c:d5:bf:b0:
                    94:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E5:15:82:50:EC:41:D0:38:52:8A:E7:6B:BC:D7:07:5E:17:37:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/3ff2d6f9-c66c-3621-92df-b8eb3ed0a323.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085/09c51633-340e-4eac-820c-a36b33746085.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:44:5B:64:54:08:69:7A:39:63:68:B1:69:F1:A2:F8:8A:C1:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09c51633-340e-4eac-820c-a36b33746085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.21.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:bf:67:0d:af:49:ac:d0:d4:2b:3c:85:46:fc:f1:6e:3c:a7:
         c8:5d:e7:7b:62:2e:89:30:68:69:25:e8:3e:6b:e1:c8:44:58:
         67:7c:61:b4:5b:14:c9:b8:d2:c7:02:dd:80:b1:26:e8:b4:15:
         ab:1e:2f:33:cd:94:d3:83:7f:e3:99:e0:b6:b4:03:46:e5:d0:
         f6:7d:3b:b2:36:86:ee:ec:a8:4c:e7:81:1c:7d:23:1b:7f:84:
         c7:bf:73:43:8a:50:c5:6b:b3:f3:2c:11:60:c0:d7:ad:e8:b2:
         b4:af:b8:e0:45:14:1a:cc:41:39:91:be:d3:2b:d0:35:3a:de:
         f2:b3:b6:9c:45:9a:db:3d:13:eb:14:f5:ab:00:26:6b:8f:fa:
         57:b8:01:16:ae:1a:58:3f:64:5b:50:bc:2f:ae:09:8f:dc:b2:
         d8:4d:e9:4d:a3:55:df:c3:70:24:bb:a5:bf:0a:3c:b0:bc:47:
         10:0c:b0:05:c4:7b:a7:7d:a4:3d:2d:29:51:36:77:ef:e6:0b:
         f4:7b:78:42:da:6a:8b:23:e2:8f:c6:c3:b3:45:ca:0f:23:df:
         f0:87:4c:fc:e1:74:6a:fd:60:38:58:5f:a9:1a:c4:95:28:1f:
         92:6c:3e:46:1f:66:2c:99:36:1e:db:b6:60:5f:f3:7c:34:f1:
         4b:9b:e1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:15:31 2025 by rpki-client