Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/7ebd9933-9bdd-3240-86bb-2e7546bb4173.roa
File:                     7ebd9933-9bdd-3240-86bb-2e7546bb4173.roa (raw, json)
Hash identifier:          VSc1x4+NPPYE6EgB6rmtHzfn6avmrRsMWXw63+rbpJI=
Subject key identifier:   9D:C4:1A:83:F0:71:7D:AB:A3:29:DE:22:9B:31:5E:6B:E7:93:0B:11
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584B96697130F748411366B27080
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/7ebd9933-9bdd-3240-86bb-2e7546bb4173.roa
Signing time:             Sat 11 Oct 2025 13:00:38 +0000
ROA not before:           Sat 11 Oct 2025 13:00:38 +0000
ROA not after:            Fri 09 Jan 2026 14:00:38 +0000
asID:                     19901
IP address blocks:        143.103.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:96:69:71:30:f7:48:41:13:66:b2:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Oct 11 13:00:38 2025 GMT
            Not After : Jan  9 14:00:38 2026 GMT
        Subject: CN=2892452f-b925-410d-ae93-4a40ed593a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:80:8d:ac:85:9f:f6:89:cc:55:4d:8e:24:71:
                    05:6c:eb:08:b6:7f:2d:9a:cc:75:ce:83:9d:06:19:
                    47:83:86:16:ea:fc:0a:69:0d:ab:2e:94:86:28:20:
                    55:fe:c1:ea:63:ba:99:bc:c9:bb:cd:33:c9:41:01:
                    4c:5f:08:68:e2:93:86:29:75:60:0c:1f:3a:9d:d2:
                    aa:84:ad:6e:cc:98:2a:81:b4:94:3a:c1:e7:82:24:
                    5b:44:5e:c0:64:73:e5:42:0c:fd:72:0a:53:4f:6d:
                    f3:3d:e9:2d:87:3f:a9:7d:00:1f:45:77:01:42:52:
                    2c:a6:0e:94:b6:e2:40:04:61:a1:ac:ef:5f:68:d2:
                    91:36:19:e5:d6:b5:5a:0a:da:12:7d:1e:5e:e0:11:
                    90:67:2b:21:8b:32:ff:43:f7:39:96:e8:b3:1d:5f:
                    62:f3:0a:ab:de:bb:32:56:33:25:bc:05:71:69:24:
                    e1:46:6e:33:5d:89:33:67:0d:20:2d:2a:43:99:01:
                    72:a0:d6:1d:d5:79:03:00:0f:c0:8e:f4:b9:50:4e:
                    27:fe:1b:10:67:ae:cf:fa:05:cc:ef:cf:21:1a:03:
                    0d:e9:a1:2e:06:c5:3f:0f:fc:0a:92:29:4c:3d:29:
                    b5:6b:42:9e:0a:71:e3:67:33:ce:cf:8a:8f:fe:71:
                    3e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C4:1A:83:F0:71:7D:AB:A3:29:DE:22:9B:31:5E:6B:E7:93:0B:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/7ebd9933-9bdd-3240-86bb-2e7546bb4173.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.103.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:80:32:f3:a3:1b:2a:90:cf:55:5c:a2:de:1a:9d:f7:e2:53:
         32:23:12:17:c7:68:81:29:ea:d4:69:ca:03:8a:0f:4b:4e:75:
         f1:01:60:b2:a1:e2:5a:62:9a:35:e2:43:69:19:22:88:7e:7d:
         bb:a5:60:98:4a:1b:cc:78:fb:70:04:1f:25:e9:0d:cd:02:fb:
         61:9c:aa:ba:d6:04:8d:76:4e:60:a7:22:de:e2:da:59:e2:04:
         42:ab:94:f6:aa:97:f1:bc:93:7e:30:97:16:9b:5a:67:ae:a8:
         df:e0:36:e3:a0:e7:e7:e5:75:5a:97:00:44:57:f7:27:c6:ca:
         5e:92:a3:09:9f:28:4a:ee:96:e2:e5:c5:75:b8:fb:87:5f:84:
         44:5f:8f:20:61:87:22:cb:c0:4c:31:d6:7a:93:d9:e1:87:59:
         fe:19:a9:35:c0:ed:7c:9e:b8:8e:c8:fe:3d:87:0c:55:53:0e:
         1f:9f:fc:47:e2:f7:5e:fa:ab:ff:f4:2d:74:ae:d4:2d:dd:43:
         02:8a:11:c3:b0:ee:23:98:4f:5c:17:31:35:af:7c:25:36:fa:
         11:80:60:51:8e:13:3f:6c:ce:2b:2e:92:ba:2b:18:81:87:37:
         45:ba:a9:7a:d7:b7:04:c5:70:a6:41:9a:2c:9a:84:0b:eb:b0:
         83:31:b4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:53:20 2025 by rpki-client