Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/a7e1ace0-f9b8-3cbe-8ad0-84d8fdf64681.roa
File:                     a7e1ace0-f9b8-3cbe-8ad0-84d8fdf64681.roa (raw, json)
Hash identifier:          S4ppIg+cbKN1g17g7pTLJ0SXP8tO8Hlby1BtWkMTVsk=
Subject key identifier:   54:9B:AD:0D:D1:FE:7D:AA:EA:4B:B6:3B:D6:DF:1E:5C:9A:1A:FA:DB
Certificate issuer:       /CN=e44d1688-f8c8-4ce8-b494-f04bf2e3606f
Certificate serial:       010D0C9F4328584B89177EEA99C1861EA1845980
Authority key identifier: 4D:BC:22:68:EC:30:2C:65:C6:A6:D2:2F:B0:C6:12:4B:A1:AC:DA:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/a7e1ace0-f9b8-3cbe-8ad0-84d8fdf64681.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     34
IP address blocks:        128.4.0.0/16 maxlen: 17
                          128.175.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:7e:ea:99:c1:86:1e:a1:84:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e44d1688-f8c8-4ce8-b494-f04bf2e3606f
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=7656c243-dccc-4d7f-9081-a868c425726d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:37:ba:ba:dd:1a:0a:4c:b5:f6:5f:b3:60:4c:
                    d7:66:3e:fd:7d:eb:9f:c0:08:f9:ad:a7:7f:0e:7b:
                    ac:bc:e0:02:f4:56:f6:13:32:8f:d7:75:46:f2:e1:
                    fe:1b:a6:e4:08:98:90:5d:fb:92:da:41:86:04:52:
                    00:00:99:c2:a3:bb:ab:ce:41:d3:e7:b7:06:ea:05:
                    f9:0d:32:a2:4d:ee:ee:95:e3:7e:28:22:eb:25:7f:
                    c4:f4:f3:9b:d1:33:74:51:55:c3:7b:8e:55:35:ce:
                    29:63:25:5e:2b:82:79:a8:55:89:3a:ef:02:e9:7a:
                    ea:91:ec:3b:45:70:e5:99:cb:8e:e7:11:26:db:07:
                    3f:25:88:9a:65:6c:bd:4b:c4:68:97:7d:b9:f5:af:
                    2b:4b:6d:04:f6:34:ca:1e:22:66:60:e9:79:23:5c:
                    5f:6b:77:39:d1:b9:35:5f:36:eb:ba:cd:10:a2:29:
                    5a:57:7a:2f:58:a4:a1:0f:4b:f2:d2:c3:7d:ae:52:
                    41:0a:b2:58:35:f4:0c:20:eb:69:4d:01:ad:de:9e:
                    13:4a:d8:25:61:e7:29:96:8b:e8:b3:be:df:83:2f:
                    f2:ee:3e:a5:e0:d3:71:23:85:dd:1a:41:15:18:62:
                    03:5f:9d:5d:2e:13:8f:78:c0:c5:f7:a2:8e:6c:8c:
                    b9:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9B:AD:0D:D1:FE:7D:AA:EA:4B:B6:3B:D6:DF:1E:5C:9A:1A:FA:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/a7e1ace0-f9b8-3cbe-8ad0-84d8fdf64681.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.crl

            X509v3 Authority Key Identifier:
                keyid:4D:BC:22:68:EC:30:2C:65:C6:A6:D2:2F:B0:C6:12:4B:A1:AC:DA:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e44d1688-f8c8-4ce8-b494-f04bf2e3606f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.4.0.0/16
                  128.175.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:a1:aa:6e:44:67:4a:70:73:a1:99:d5:e6:9a:9a:f5:88:9f:
         a2:83:ad:0a:8b:6d:88:78:f3:f8:7f:7a:75:4f:90:b1:8b:ba:
         f2:9d:c9:e9:97:59:7d:a7:b1:07:57:a8:d6:f9:95:22:5c:97:
         78:ec:09:96:85:58:b3:1f:93:66:d3:fb:1f:ff:cc:6a:1a:71:
         10:ae:6f:7c:cf:25:7b:6a:72:f5:95:e3:62:36:93:a2:bc:9e:
         62:68:51:87:a4:3a:0d:63:db:af:08:21:89:da:4b:35:a0:51:
         d0:00:fe:60:e4:ad:e3:d2:43:cf:26:0b:ac:c6:9d:19:23:f2:
         39:86:57:cc:9a:e7:d2:24:fe:c0:91:91:f8:b2:19:4d:28:4a:
         5a:4f:0a:54:5a:5a:04:b6:48:cb:56:97:3f:91:b0:04:93:ec:
         aa:fa:dc:15:7d:8b:3c:98:35:5e:ab:5a:60:aa:00:08:6e:35:
         ef:75:65:55:7d:30:fc:00:e5:ec:ae:56:56:0d:07:d0:c3:04:
         99:99:b1:4c:25:27:ed:63:9a:ca:3c:29:a2:88:79:74:95:ef:
         c3:10:a3:38:5c:0a:38:1a:66:5b:a2:2f:89:fb:a4:08:e9:71:
         b3:8f:77:84:a5:15:d4:b8:c7:0b:77:32:a3:bb:b5:e7:dd:52:
         f4:18:52:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:22:38 2025 by rpki-client