Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/93515cc1-0efc-389a-9320-231ccb8f7fc1.roa
File:                     93515cc1-0efc-389a-9320-231ccb8f7fc1.roa (raw, json)
Hash identifier:          uxNphc5uPLS0P5ST5zgMjBBMdqHfhU00eQ8kYDmqq2o=
Subject key identifier:   38:BD:A3:90:71:78:77:B4:2A:14:44:E5:9E:2C:70:61:B9:C3:45:93
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584B8B2732C51044B8C872171C00
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/93515cc1-0efc-389a-9320-231ccb8f7fc1.roa
Signing time:             Sat 11 Oct 2025 13:00:38 +0000
ROA not before:           Sat 11 Oct 2025 13:00:38 +0000
ROA not after:            Fri 09 Jan 2026 14:00:38 +0000
asID:                     19901
IP address blocks:        143.103.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:27:32:c5:10:44:b8:c8:72:17:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Oct 11 13:00:38 2025 GMT
            Not After : Jan  9 14:00:38 2026 GMT
        Subject: CN=e4c379f2-0733-4769-8cac-9fd107b4ddf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:70:3f:2d:89:b4:5f:5d:a8:af:e5:c4:ea:a4:
                    c2:66:d0:16:22:be:af:62:b3:c3:ba:02:f9:46:92:
                    21:9d:23:9e:73:04:cb:60:76:d3:27:8f:03:e2:7a:
                    84:8d:75:83:64:aa:13:75:33:02:ad:74:9f:c6:0e:
                    24:c8:9a:84:1c:3b:a1:25:b7:f3:21:7a:52:41:7e:
                    9e:60:a5:7f:7e:da:05:8b:de:94:39:ad:45:5a:db:
                    95:0e:23:e8:ae:75:33:44:0c:a6:da:79:d0:dd:2c:
                    5b:6e:8e:a8:25:a6:44:d9:be:cc:a2:8f:2e:88:6c:
                    b2:0f:15:ce:5d:7c:55:87:8b:47:95:d4:ed:2c:20:
                    77:37:e9:c3:26:cd:f2:93:cb:6f:69:b2:e0:da:2c:
                    32:2b:77:af:48:db:30:a9:4a:ff:af:39:36:83:ad:
                    a9:46:f8:0f:39:df:5e:12:e0:bd:35:ee:46:7e:51:
                    05:dd:ac:5e:be:7e:62:c0:aa:ad:f9:3c:be:c4:37:
                    5e:14:19:f1:3c:a4:03:0d:39:9f:bf:fa:5a:9e:d3:
                    75:42:24:0b:18:54:55:4c:7c:a1:63:62:38:01:2f:
                    f0:2f:1c:1d:bd:fa:34:73:5f:4c:2d:bd:32:5d:98:
                    10:5d:08:f6:39:03:41:e0:8b:48:b5:c5:ea:c2:75:
                    7e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:BD:A3:90:71:78:77:B4:2A:14:44:E5:9E:2C:70:61:B9:C3:45:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/93515cc1-0efc-389a-9320-231ccb8f7fc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.103.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:62:69:c1:a2:b2:2a:77:13:2f:b4:4d:96:9a:df:5c:6a:ba:
         84:80:2c:c3:2f:cd:41:50:d9:3e:8f:2d:18:ae:89:2e:f7:e5:
         b2:f8:92:ad:cb:64:32:ce:66:26:d3:54:0f:b3:77:4b:61:93:
         59:8c:f6:63:f6:8b:38:5e:c4:60:77:08:ed:18:02:02:c1:fa:
         05:60:16:98:2b:7a:f0:e2:b1:45:35:7f:90:12:11:ba:4a:ac:
         b1:eb:4d:c9:76:f8:8f:b9:38:8b:38:90:07:e5:c9:b5:52:60:
         c5:2b:e8:56:66:93:8d:37:84:6e:76:3e:77:e8:75:fa:6e:02:
         e0:f2:1a:ee:6c:bd:50:a1:44:a5:f6:9d:5c:98:28:f9:1e:81:
         f5:c8:69:68:a4:d9:23:c0:3a:55:80:05:bd:29:ba:b8:b6:9d:
         d6:06:9b:c3:79:85:e2:1b:7b:43:3b:0a:1b:d3:b7:13:52:3b:
         0e:9b:2a:ae:e0:0d:61:92:35:62:b2:a5:f2:c5:72:b2:af:f4:
         ac:79:79:bf:03:8f:ba:92:0f:f0:af:d0:8c:82:9c:85:7f:2f:
         37:bb:6f:53:48:15:8e:88:9f:f3:69:58:37:b8:da:80:e4:a0:
         a2:45:fd:34:4d:7c:46:71:ef:2d:8b:35:ea:7e:2c:b4:4a:14:
         d4:b6:b4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:38:48 2025 by rpki-client