Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/52133986-3bd8-3439-83c2-831da28139e7.roa
File:                     52133986-3bd8-3439-83c2-831da28139e7.roa (raw, json)
Hash identifier:          ochgFuOD4UX3FNpScuK1DsqHhbo6nDtM1yNEYQkNwgw=
Subject key identifier:   0E:B8:E8:28:97:FC:04:2F:B4:F5:AF:CB:72:9D:E9:8D:65:40:52:4E
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584B8B24AE79E9E7FA4DB99FD100
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/52133986-3bd8-3439-83c2-831da28139e7.roa
Signing time:             Fri 22 Aug 2025 20:44:45 +0000
ROA not before:           Fri 22 Aug 2025 20:44:45 +0000
ROA not after:            Thu 20 Nov 2025 21:44:45 +0000
asID:                     19901
IP address blocks:        9.138.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:24:ae:79:e9:e7:fa:4d:b9:9f:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Aug 22 20:44:45 2025 GMT
            Not After : Nov 20 21:44:45 2025 GMT
        Subject: CN=7d5751c9-afce-4e55-96f1-ac3e4d0f741e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6f:56:af:ae:62:fd:d4:fb:27:37:37:80:d7:
                    84:ee:f6:44:08:1f:fb:c1:a7:c8:72:46:24:e4:1a:
                    d7:3c:e8:66:b7:5e:a3:34:77:f2:89:3a:96:2c:e1:
                    49:4c:59:71:e1:ab:12:47:42:9f:46:53:70:fc:9a:
                    d9:11:01:94:38:be:5d:99:cf:40:49:60:b6:7a:45:
                    7b:be:2f:80:18:70:71:5b:10:72:f3:29:be:f1:50:
                    c1:77:41:51:9a:2a:63:7b:27:b5:73:cd:6f:e2:a6:
                    1a:44:6a:d8:cc:0b:83:87:d8:03:81:f3:2e:48:7e:
                    64:15:f8:3c:1f:2a:9d:32:78:d8:33:1e:d0:d5:94:
                    15:82:40:ca:28:1f:5c:87:9e:73:b0:9b:a2:77:a0:
                    e0:2b:8a:e5:ed:a5:44:ea:84:38:98:73:de:a2:a9:
                    5a:66:54:db:ae:e5:af:37:72:1c:69:34:f0:e0:7a:
                    6e:05:7d:03:e9:24:7e:96:5d:02:13:89:7c:6b:01:
                    13:19:d0:4e:9f:cf:69:ed:c0:2a:60:b7:cd:e0:3d:
                    1d:05:59:69:f7:bc:1c:9a:74:aa:13:85:f6:b5:78:
                    76:90:36:bb:d9:b9:63:7f:ad:87:49:fb:7f:07:36:
                    24:44:fa:3f:2f:f8:5b:88:89:db:21:43:be:9d:08:
                    54:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B8:E8:28:97:FC:04:2F:B4:F5:AF:CB:72:9D:E9:8D:65:40:52:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/52133986-3bd8-3439-83c2-831da28139e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  9.138.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c8:1e:60:d3:a6:60:6a:c9:c0:1a:95:51:0d:e7:19:d2:4d:
         65:b5:02:ed:43:6a:e2:e4:a1:03:24:27:07:8c:9d:84:5c:57:
         c1:d0:32:45:07:0d:71:24:6e:4f:54:b1:3c:31:46:25:49:39:
         ba:63:f0:b3:f9:d5:1d:e0:c0:71:0e:94:ad:c4:b5:1b:ff:87:
         65:da:0e:1d:7b:3f:e1:41:9e:84:d4:62:f4:25:f1:43:9e:17:
         61:4d:8e:44:b8:d3:5f:2a:39:8a:9a:4f:c0:57:ac:da:64:94:
         09:6d:e7:e1:28:b1:b4:72:bc:f6:39:93:b3:8b:db:c3:45:1c:
         7a:6b:de:96:c2:8c:91:1f:63:eb:0e:79:6a:06:54:08:1d:4e:
         d6:08:f4:34:65:d3:54:34:4c:05:b8:f9:4f:41:fb:65:8b:73:
         f3:a1:fa:2e:09:5c:39:90:59:8e:85:02:89:79:8c:7c:bb:c3:
         49:7c:62:47:c3:c6:5e:bd:50:c7:85:43:91:7d:08:f2:2f:64:
         d8:71:46:ec:b2:9b:f3:86:c3:45:ef:16:84:e3:a5:e3:77:36:
         5a:ed:af:c5:4a:30:f3:05:0d:82:d1:9d:dc:f5:92:32:45:6f:
         3b:95:3c:4b:2e:c1:8f:77:12:ab:4c:2c:56:be:3e:45:5e:f9:
         05:ed:9b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:06:14 2025 by rpki-client