Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/f1518e60-c475-3f73-9434-16c8301c3714.roa
File:                     f1518e60-c475-3f73-9434-16c8301c3714.roa (raw, json)
Hash identifier:          4W2gYoxdbsDs7Z4CzpmdqVpCtZb/8OnhvgtgMDAY2ZA=
Subject key identifier:   85:ED:52:B8:F4:15:A2:0E:F1:11:C4:04:78:39:ED:CE:37:C3:E0:21
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584B59A1C6D442C324F573C7F6C0
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/f1518e60-c475-3f73-9434-16c8301c3714.roa
Signing time:             Mon 29 Sep 2025 01:00:33 +0000
ROA not before:           Mon 29 Sep 2025 01:00:33 +0000
ROA not after:            Sun 28 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        152.39.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:59:a1:c6:d4:42:c3:24:f5:73:c7:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Sep 29 01:00:33 2025 GMT
            Not After : Dec 28 02:00:33 2025 GMT
        Subject: CN=50b914a5-3ca1-476d-ac51-d0a173b6b40b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7d:41:0a:e3:80:4f:8f:ea:0a:87:83:24:7e:
                    ba:89:f4:51:cc:47:8c:e9:4a:07:c8:fa:9c:a0:62:
                    f6:fc:26:84:26:a0:56:de:09:22:1f:75:84:61:b3:
                    0c:36:0a:cc:cc:6b:7a:62:17:19:1c:fa:fc:2e:a9:
                    d4:d5:57:07:6b:5f:d3:56:24:34:8b:b0:e4:11:67:
                    09:e1:12:d0:c2:01:82:41:eb:64:b5:72:ab:6c:b4:
                    f1:15:65:82:9f:d7:d9:f8:d9:c9:ee:e4:7e:38:98:
                    fb:57:1c:a5:61:7b:a4:09:1a:a4:af:80:1a:d4:02:
                    fd:9c:9e:a5:02:77:bf:12:82:7e:b7:a6:5c:88:1b:
                    79:7b:f7:da:1b:14:24:2d:8c:f4:c4:7f:ae:e5:6f:
                    3d:2f:03:7c:b5:98:32:21:11:5b:40:28:ab:de:c5:
                    a1:18:0f:29:cd:94:e1:9c:05:0b:56:23:31:57:04:
                    cf:f5:79:f1:30:9d:1d:dc:6d:16:02:94:c2:54:eb:
                    67:a3:a5:45:07:9c:69:2e:7d:2d:f9:97:38:13:a1:
                    33:a5:70:80:41:64:0e:b0:32:c5:67:8a:8e:be:3d:
                    cb:d7:39:14:5f:e6:41:e5:70:1e:37:59:96:93:cb:
                    53:3b:f9:6f:eb:0c:d0:d3:15:b5:62:44:92:5f:24:
                    5b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:ED:52:B8:F4:15:A2:0E:F1:11:C4:04:78:39:ED:CE:37:C3:E0:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/f1518e60-c475-3f73-9434-16c8301c3714.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.39.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:f0:5c:94:65:7f:8b:d7:be:16:30:03:01:13:ed:0b:0c:5e:
         c0:be:dc:06:e2:07:7c:5b:00:e2:78:b0:11:dc:f9:ec:1d:f3:
         93:6e:03:74:af:be:27:4a:56:61:39:dc:4c:01:2d:1f:08:79:
         c7:f5:f9:1e:e6:e8:16:dc:34:2d:4c:ad:8f:e3:7b:bf:6b:50:
         32:75:9f:c1:42:f5:42:a3:db:75:d5:0c:7d:9e:3c:1e:e8:58:
         5c:29:cb:66:5a:50:6d:a8:0c:ea:4c:cb:9a:d2:9c:0d:f1:e1:
         ce:81:97:15:7e:b3:52:00:cd:91:70:e3:5e:01:5b:ae:16:5e:
         53:2f:7d:c4:d4:73:26:fe:b4:cd:49:a4:a3:60:7f:f4:50:7b:
         50:e8:ed:13:16:e2:2b:91:4c:37:15:bd:35:f2:82:f1:73:e9:
         fb:0e:7e:0e:12:17:f9:a0:c0:7d:c6:b2:63:62:1f:39:5d:49:
         21:1d:91:9c:b1:29:98:01:35:51:32:ce:aa:d0:1f:a9:09:e9:
         ba:f0:79:86:84:69:fa:5e:46:2f:f3:57:bb:1b:59:ad:bd:a5:
         df:e7:1d:df:88:58:35:71:b5:75:79:0c:63:df:db:3c:65:60:
         f8:b4:3f:21:98:bf:1d:c4:26:65:7f:72:8d:3f:1b:d6:f2:ba:
         54:62:47:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:13:17 2025 by rpki-client