Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/fd0a4636-0f80-3f89-b8ed-97ffdecebbfd.roa
File:                     fd0a4636-0f80-3f89-b8ed-97ffdecebbfd.roa (raw, json)
Hash identifier:          c1TcQXXX26154IL4g0fDjlZ6mS5ubrD2zLuU6I4GqL4=
Subject key identifier:   45:2E:77:D7:41:D0:28:8E:D7:30:D2:7E:34:59:DB:A6:EF:2A:F4:69
Certificate issuer:       /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial:       010D0C9F4328584B823FAD7393E45A61B3048F30
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/fd0a4636-0f80-3f89-b8ed-97ffdecebbfd.roa
Signing time:             Mon 13 Oct 2025 14:11:05 +0000
ROA not before:           Mon 13 Oct 2025 14:11:05 +0000
ROA not after:            Sun 11 Jan 2026 15:11:05 +0000
asID:                     21433
IP address blocks:        170.248.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:3f:ad:73:93:e4:5a:61:b3:04:8f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
        Validity
            Not Before: Oct 13 14:11:05 2025 GMT
            Not After : Jan 11 15:11:05 2026 GMT
        Subject: CN=3102b682-a5c1-4a95-be16-c03d654534b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7c:53:ba:46:44:1d:01:6e:b5:31:d0:6c:82:
                    84:de:85:40:60:58:b9:8b:ba:6b:ba:56:c3:7c:41:
                    03:08:69:c9:84:d5:60:c1:91:9e:27:02:41:48:76:
                    24:6e:27:77:68:4c:13:cc:e2:88:90:e0:73:5e:0a:
                    0b:0b:9c:13:25:21:50:81:4e:44:45:9e:28:c7:fe:
                    aa:00:a5:85:3a:39:40:e4:97:70:2c:cb:59:2e:ad:
                    16:04:92:51:8a:11:49:de:86:de:32:85:76:5f:f7:
                    31:4b:58:9d:26:43:b7:53:c3:4b:32:52:6d:54:76:
                    b1:a2:c6:7c:e3:cd:48:35:95:0d:ef:8d:36:f7:fd:
                    81:b3:34:7a:6e:ba:f8:dc:34:07:18:25:1a:27:d8:
                    a1:77:98:c6:16:44:4b:b0:3b:8d:74:6e:a7:cc:a4:
                    b3:37:25:77:c9:a5:3a:45:8b:79:e1:2d:0d:5e:51:
                    5d:6b:91:c6:30:29:71:0c:fc:21:fe:bd:72:02:d1:
                    8a:7e:5f:dd:36:52:0b:18:d1:c4:be:de:05:bf:61:
                    d3:23:d5:2c:eb:53:a0:d3:f1:9d:03:25:71:54:22:
                    8f:9f:f5:f8:55:7c:13:ce:d0:c4:72:91:18:d5:a5:
                    8f:d8:6d:3b:82:40:66:db:60:d0:f1:c6:31:df:9e:
                    f0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2E:77:D7:41:D0:28:8E:D7:30:D2:7E:34:59:DB:A6:EF:2A:F4:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/fd0a4636-0f80-3f89-b8ed-97ffdecebbfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl

            X509v3 Authority Key Identifier:
                keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.248.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:a0:64:d2:f8:95:18:6a:77:54:9d:ee:15:f4:ed:39:34:83:
         1e:56:3d:b5:48:0d:20:d3:e2:5f:02:fd:d8:d3:f0:db:f4:e8:
         93:d3:9d:9f:92:40:d5:99:7f:e4:27:c1:68:7d:03:6b:fd:80:
         55:54:4b:09:01:02:cb:82:22:fd:94:64:1d:5a:21:96:18:56:
         2e:5e:c4:bc:91:da:74:b7:e0:c1:96:7a:db:dd:2f:6b:6b:f2:
         80:4e:33:d8:96:54:c8:92:4f:20:c8:ef:c7:13:a5:0e:f5:bb:
         5b:14:1c:6e:a6:e9:36:19:28:6d:ba:e5:51:68:5a:8c:c2:7e:
         0b:1e:7f:25:19:ed:fd:6f:69:0c:72:22:de:9f:44:3c:8a:62:
         e8:32:f9:5c:61:be:5d:56:5d:ca:c2:3a:2d:9f:d7:e4:c9:d5:
         8a:a4:4b:60:76:46:93:c6:dc:e9:9c:da:42:9b:62:8a:ca:6c:
         38:72:2f:6c:ef:1d:b0:47:de:43:a8:dd:dc:b8:e7:71:c0:a6:
         09:ee:94:6a:60:76:06:f4:22:aa:1b:be:8c:aa:4b:1e:6c:d9:
         2d:8a:59:8e:4c:ac:9e:e1:af:bc:fb:6e:1a:14:4c:13:ce:28:
         88:bb:a6:78:cc:f1:2c:aa:7e:f0:e7:a9:3a:6b:7e:a6:4f:12:
         2f:1f:13:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:18:59 2025 by rpki-client