Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/2bceb09a-8c68-38f7-9325-555d892ae3b0.roa
File:                     2bceb09a-8c68-38f7-9325-555d892ae3b0.roa (raw, json)
Hash identifier:          B4B+g21SXr9++Q7lehX7jDj2U8BBrbG111gzZOc1E14=
Subject key identifier:   71:A7:9E:9A:B4:07:4F:2C:4B:15:7E:95:44:BC:CA:D7:78:93:5B:29
Certificate issuer:       /CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Certificate serial:       010D0C9F4328584B3F1C61A846E9370E9DBA1500
Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/2bceb09a-8c68-38f7-9325-555d892ae3b0.roa
Signing time:             Fri 19 Sep 2025 13:00:41 +0000
ROA not before:           Fri 19 Sep 2025 13:00:41 +0000
ROA not after:            Thu 18 Dec 2025 14:00:41 +0000
asID:                     394453
IP address blocks:        199.253.136.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3f:1c:61:a8:46:e9:37:0e:9d:ba:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551
        Validity
            Not Before: Sep 19 13:00:41 2025 GMT
            Not After : Dec 18 14:00:41 2025 GMT
        Subject: CN=2dad05c2-3211-4e71-a7fc-68c67abfd1bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:30:ff:21:45:39:a7:97:8d:06:fc:a1:4a:57:
                    d9:66:0c:8e:8e:1f:62:a9:32:0b:20:bf:43:d3:95:
                    0f:e6:80:94:ef:3b:7d:0f:51:62:27:34:18:1d:08:
                    72:e8:a2:a0:77:8c:28:05:db:41:3e:00:f8:63:80:
                    14:b7:5c:cd:86:20:02:e0:00:c9:4b:d9:5c:a9:0a:
                    0c:21:07:61:82:20:ac:32:40:cf:7f:97:21:24:fc:
                    34:fc:c3:04:86:c7:e2:f4:94:ac:bb:38:4f:a7:34:
                    a5:53:3d:66:77:9c:8c:b3:44:32:4a:4b:ec:47:8a:
                    20:7a:25:e9:47:83:42:48:d9:be:33:47:65:f6:04:
                    9c:f9:27:04:3c:bd:35:16:be:cc:78:0e:c7:5b:2c:
                    ba:0d:e7:a7:4e:df:c4:a3:28:89:09:87:92:75:24:
                    ae:15:36:8d:58:1e:2f:63:b3:5f:05:89:e9:03:f8:
                    4e:6c:b3:9a:28:68:d0:ea:3b:ad:22:36:69:47:ae:
                    c8:77:9d:61:89:ca:86:fa:a1:82:2f:ab:ff:6f:78:
                    b2:fe:b7:82:0f:0a:ab:5e:87:31:d6:7b:22:59:07:
                    ba:04:db:1f:bc:dc:39:b1:0f:d5:a6:87:ce:8f:ed:
                    51:73:d9:75:ca:a3:0e:85:43:bd:c9:80:96:fc:ea:
                    a5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A7:9E:9A:B4:07:4F:2C:4B:15:7E:95:44:BC:CA:D7:78:93:5B:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/2bceb09a-8c68-38f7-9325-555d892ae3b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl

            X509v3 Authority Key Identifier:
                keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.253.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:2f:32:1b:5d:a7:54:44:c6:2e:a3:73:01:63:9e:0f:04:4a:
         8d:b6:ba:88:c9:e4:11:f9:2e:85:ec:9d:d1:eb:c9:46:83:5a:
         53:75:db:dc:e5:f3:07:d8:80:9b:89:86:a1:06:df:00:79:b9:
         6e:65:02:5a:2f:43:ed:12:b5:41:29:14:b4:e9:44:84:0a:c0:
         e9:d4:a7:18:74:fb:ac:6d:4b:5f:c7:cf:d7:00:0c:0a:ff:87:
         ad:76:7b:c5:f5:e3:64:90:62:83:b9:fb:54:0f:e5:2e:ee:88:
         a1:f3:e2:94:7a:41:f6:50:d8:57:53:cd:55:c5:6b:be:01:01:
         7e:b2:01:dd:cb:66:b7:43:9f:e2:3c:fa:36:af:17:d9:11:12:
         50:1b:76:e4:3f:b6:18:3b:64:a4:8e:35:10:8d:2e:c0:80:eb:
         2a:8e:ff:ee:a3:50:23:57:41:6d:ea:a3:9f:26:e9:87:04:8e:
         ba:e4:dd:e4:3c:46:92:e5:dd:79:1a:7c:da:ff:f6:fe:00:65:
         d7:65:f6:46:26:44:f7:d6:55:65:ca:d5:ab:91:ce:4b:47:ac:
         c7:a5:49:e6:28:85:86:a1:72:03:6e:e6:4f:10:ee:92:42:e9:
         cb:0e:33:35:6f:41:51:5a:91:68:76:80:7b:dd:6c:11:75:10:
         b9:09:1d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:15:05 2025 by rpki-client