Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/25f35c41-ca21-39f9-896c-ab19dfbb8475.roa
File:                     25f35c41-ca21-39f9-896c-ab19dfbb8475.roa (raw, json)
Hash identifier:          aeQHvv/LidBGGw4mH5ly7yD6jAz2PoZrnQbJa2UdF2Q=
Subject key identifier:   B2:D0:51:A4:4A:77:8C:29:15:6C:7C:B1:45:4A:D8:08:0F:A9:2A:2C
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B7A0C699507106C4566691580
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/25f35c41-ca21-39f9-896c-ab19dfbb8475.roa
Signing time:             Fri 10 Oct 2025 15:41:20 +0000
ROA not before:           Fri 10 Oct 2025 15:41:20 +0000
ROA not after:            Thu 08 Jan 2026 16:41:20 +0000
asID:                     81
IP address blocks:        152.22.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:0c:69:95:07:10:6c:45:66:69:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 10 15:41:20 2025 GMT
            Not After : Jan  8 16:41:20 2026 GMT
        Subject: CN=5ec13a96-d581-4dd6-b150-cc6c36da49ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4d:6b:67:2e:40:da:e2:19:79:9d:2b:97:64:
                    ea:29:3b:42:80:5c:d1:d6:15:6e:e4:2e:11:a9:56:
                    72:f1:93:ba:9d:3f:a9:82:7d:3d:b3:24:f1:19:eb:
                    5c:26:24:d4:67:ba:d4:23:65:2b:a3:a9:cb:c7:d3:
                    fb:56:01:69:ac:fb:5f:f7:8f:95:4e:0b:6d:0d:7b:
                    0e:4d:2c:cf:75:c1:fb:2b:d3:36:28:26:8f:82:1a:
                    8f:95:a9:68:51:0a:7d:47:ff:67:59:7f:ea:54:a8:
                    b2:b2:37:c8:27:c1:31:ab:a6:19:cf:2b:75:95:3f:
                    ed:01:d5:ba:6a:ad:b5:23:22:74:85:d9:74:d7:d9:
                    74:e8:3a:d2:b5:7e:5b:17:1f:ab:1b:f7:6e:89:4a:
                    17:e7:b1:e7:a6:3b:67:8b:13:fd:b9:a5:0d:6a:36:
                    9e:e2:09:61:83:57:86:f1:99:34:b7:43:19:c0:03:
                    44:f3:03:f4:dd:72:a7:a2:5d:41:6a:3c:ec:ae:61:
                    47:0e:5f:7b:ba:1d:17:5f:fc:92:45:f5:34:9a:81:
                    a0:62:70:90:ce:83:b0:90:5d:c0:21:eb:e3:02:c3:
                    17:f5:f9:47:ba:63:84:0a:09:78:67:ad:16:57:0e:
                    83:df:6b:51:e8:3b:93:7b:a2:e4:2d:45:08:58:07:
                    ae:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D0:51:A4:4A:77:8C:29:15:6C:7C:B1:45:4A:D8:08:0F:A9:2A:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/25f35c41-ca21-39f9-896c-ab19dfbb8475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.22.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c5:a6:ee:d2:e0:1a:5c:9b:b4:16:c3:d5:5a:87:ae:4a:b3:
         4f:2f:08:14:eb:03:bd:50:fb:e6:d4:93:b4:cc:de:1d:f4:04:
         4f:15:fc:4f:ca:39:02:65:dc:ea:d6:d5:cf:52:93:d1:90:4d:
         33:cc:4c:75:c8:e0:3a:55:ae:e4:df:e8:8e:56:f5:6e:ce:05:
         d7:b7:8c:ec:a2:62:4b:75:35:fa:9e:6e:6d:56:09:83:f9:91:
         41:b8:31:98:51:57:d5:2a:dd:16:9f:90:b8:94:6d:3c:fb:58:
         45:18:6c:be:18:4d:7d:d8:36:06:05:85:9b:2c:09:89:3c:a7:
         b9:f1:ed:02:3f:6d:1b:9e:1c:c9:2b:43:7c:62:ea:3d:71:9b:
         d7:5a:85:d7:ca:e6:a3:e7:13:a3:6d:7a:25:46:d8:75:47:d1:
         84:a4:de:66:f9:4d:e4:3e:ff:c9:2f:e8:73:e5:76:f8:e6:7a:
         b5:80:7b:2d:b0:79:79:15:d7:ce:47:97:85:86:39:93:61:bf:
         30:be:ff:8a:2a:ca:ea:aa:b2:60:f1:1b:26:be:8e:5c:bb:e1:
         b5:71:5f:2a:25:d0:8b:41:f7:a6:7c:22:a1:56:77:da:e1:9d:
         24:d4:14:51:99:5a:38:d7:25:ef:cc:d5:8d:37:35:81:b2:28:
         39:f7:0d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:27:03 2025 by rpki-client