Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647/53d1981f-7671-3de0-ad5e-7716d805a3ba.roa
File:                     53d1981f-7671-3de0-ad5e-7716d805a3ba.roa (raw, json)
Hash identifier:          gDu8b3bxMBVUSNyMRxj/tRzB6J1n3NvU80smNqX0PLs=
Subject key identifier:   BA:35:E5:15:8F:7B:BD:5C:DA:D2:04:60:32:E4:50:2E:BA:96:68:4F
Certificate issuer:       /CN=9becea05-974b-43e4-a04f-198402715647
Certificate serial:       010D0C9F4328584B0CDC11C97E385EAFB323C780
Authority key identifier: CB:0C:CF:2F:01:59:5E:BE:15:54:B8:D3:88:5E:C6:E3:E5:BF:A2:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647/53d1981f-7671-3de0-ad5e-7716d805a3ba.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     13760
IP address blocks:        165.140.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647/9becea05-974b-43e4-a04f-198402715647.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647/9becea05-974b-43e4-a04f-198402715647.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:11:c9:7e:38:5e:af:b3:23:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9becea05-974b-43e4-a04f-198402715647
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=2cf9f07d-02ca-4774-9509-6db9f90fcd15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ff:42:67:b8:cf:9a:bb:39:9a:27:e7:b4:d0:
                    77:5f:12:0e:77:74:1d:ff:5c:23:9b:0e:4a:c1:c3:
                    9c:ff:15:e5:8e:55:d7:b9:dd:65:6b:a7:fb:0e:dc:
                    cb:c3:f3:71:94:74:f1:e4:6b:27:9c:51:d4:15:a0:
                    84:eb:c7:30:0a:72:c2:0e:c3:bf:bb:6c:97:92:6c:
                    2b:39:88:69:29:7e:66:e7:94:c5:78:51:b2:9e:74:
                    d7:5f:66:3b:9a:2e:7f:4c:1e:9a:a2:6c:e7:c8:91:
                    23:f2:0a:50:a6:49:04:6f:c2:ad:28:b4:11:c4:99:
                    5c:b3:74:0f:d8:59:db:23:37:5f:c3:25:29:29:a1:
                    be:17:b8:5c:a1:71:da:c0:b4:9a:29:6a:64:27:cf:
                    d8:53:5f:37:ef:a9:bb:2e:e0:03:95:b3:cf:a4:52:
                    45:04:94:4b:52:f9:97:8d:6c:e1:b4:f1:3e:46:0f:
                    6b:25:68:c5:cc:ab:4e:91:cd:bd:37:bc:a6:e3:c0:
                    76:6f:31:0e:51:c6:fe:15:74:2c:c4:02:f6:b3:ad:
                    4e:5b:b1:a4:b3:c8:2f:e0:33:55:71:b3:7c:7c:dc:
                    b3:04:cd:9e:87:2f:dd:61:7a:89:01:e9:b5:e3:e3:
                    b7:1a:d6:4c:9d:a2:17:35:2d:58:28:0e:80:e7:11:
                    9a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:35:E5:15:8F:7B:BD:5C:DA:D2:04:60:32:E4:50:2E:BA:96:68:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647/53d1981f-7671-3de0-ad5e-7716d805a3ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647/9becea05-974b-43e4-a04f-198402715647.crl

            X509v3 Authority Key Identifier:
                keyid:CB:0C:CF:2F:01:59:5E:BE:15:54:B8:D3:88:5E:C6:E3:E5:BF:A2:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:93:bd:97:05:84:3a:b8:1a:fd:44:8b:f2:46:d3:ec:d6:0d:
         38:11:71:24:81:af:5a:e6:72:35:55:7b:f5:90:9d:aa:8c:2e:
         0e:26:ad:b1:53:9e:5a:d6:17:a8:ac:fe:81:9d:a6:6a:76:3d:
         67:1e:b4:77:0e:cd:fa:20:f6:5a:44:2e:ee:c8:6e:a4:4e:4c:
         4f:2c:27:3e:35:d4:ac:07:70:2b:62:cc:05:ad:07:86:94:5d:
         44:16:e4:04:8c:66:72:7c:07:66:0b:11:85:a9:d9:7c:a1:ad:
         a1:3f:cb:15:e7:f0:47:10:aa:60:d6:00:75:b4:81:20:29:e7:
         81:49:8b:45:34:49:ce:e8:56:98:de:52:c6:3d:8c:2c:8f:f4:
         a0:81:67:ac:5b:cd:72:96:59:8e:6f:56:62:9c:b4:5a:b3:1b:
         1a:ff:0f:90:7f:32:dd:7c:85:84:a2:04:3e:90:b4:e7:5b:a1:
         2f:3e:85:e1:45:6b:c7:70:a6:0e:90:bf:68:44:63:8c:bf:e2:
         d6:29:75:aa:52:c3:cf:8e:65:b9:60:16:78:d1:c6:38:e8:50:
         28:65:fb:55:b7:b9:46:ac:10:58:6a:80:f6:f9:2c:c1:0d:8d:
         a2:86:45:ec:23:9e:94:a6:d6:b0:67:13:f7:59:18:15:9c:e2:
         09:2e:d6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:36:46 2025 by rpki-client