Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b/4a5442e4-4342-3d66-a184-657b4ad68e47.roa
File:                     4a5442e4-4342-3d66-a184-657b4ad68e47.roa (raw, json)
Hash identifier:          JPxqP6fk7TAmG6GtFgq93EFBtxcVo1pGh1lpQ8nnuxg=
Subject key identifier:   BA:B0:7E:00:9C:AA:73:23:5C:E8:30:2B:71:CD:61:8D:78:34:F1:58
Certificate issuer:       /CN=b69046d2-7700-4ec6-9370-cf52edb1555b
Certificate serial:       010D0C9F4328584AE0311D9FB4178BCCC2E72900
Authority key identifier: 39:B9:E3:69:A5:4A:6E:82:66:3F:C1:53:14:3C:98:0C:0D:98:01:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b/4a5442e4-4342-3d66-a184-657b4ad68e47.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     14267
IP address blocks:        132.253.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b/b69046d2-7700-4ec6-9370-cf52edb1555b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b/b69046d2-7700-4ec6-9370-cf52edb1555b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:1d:9f:b4:17:8b:cc:c2:e7:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b69046d2-7700-4ec6-9370-cf52edb1555b
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=847135b9-25de-423a-9ebd-b34b74741dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b1:49:4d:71:d1:c5:e8:c0:b4:a5:96:16:2e:
                    44:cb:78:1f:66:be:e1:5f:e9:d7:0d:53:31:07:0d:
                    19:c9:58:ce:8b:46:ee:8b:18:47:d2:bc:9d:22:49:
                    ad:f7:95:10:c4:e5:8d:23:eb:ba:f5:79:f6:a3:c7:
                    6a:6a:b3:d9:b0:56:31:b0:da:1f:b0:0b:20:3a:73:
                    1e:41:d0:a8:60:2b:03:3f:56:b9:01:f9:73:84:48:
                    7f:e5:10:17:7f:d7:3f:7e:21:e3:f4:28:02:3b:d2:
                    85:30:e0:f2:5d:a0:a8:07:05:24:6f:fd:59:14:65:
                    5a:c4:3d:51:39:3b:6c:a5:8c:e6:3c:4d:6e:26:fc:
                    23:46:e7:78:58:20:69:61:a6:ef:2e:a5:b4:37:35:
                    37:bd:d9:b1:fe:b0:af:bc:73:5d:de:3c:7a:85:f5:
                    d0:7b:d6:b7:1c:a7:94:f3:ea:e2:a9:0f:71:b8:62:
                    51:2a:a6:6f:c9:02:4a:45:fa:23:3e:c2:4c:1e:c0:
                    23:43:e1:56:cb:91:8f:0a:f6:ea:b7:7d:f8:c5:ac:
                    b0:6b:c9:45:e9:72:c4:ff:bd:5e:e9:c0:21:b1:5b:
                    69:4b:87:62:0d:96:b0:8e:28:2d:59:4c:83:81:0f:
                    48:3b:17:86:1e:c3:18:45:85:52:0d:a6:b2:43:bb:
                    f4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B0:7E:00:9C:AA:73:23:5C:E8:30:2B:71:CD:61:8D:78:34:F1:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b/4a5442e4-4342-3d66-a184-657b4ad68e47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b/b69046d2-7700-4ec6-9370-cf52edb1555b.crl

            X509v3 Authority Key Identifier:
                keyid:39:B9:E3:69:A5:4A:6E:82:66:3F:C1:53:14:3C:98:0C:0D:98:01:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b69046d2-7700-4ec6-9370-cf52edb1555b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.253.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:9c:49:ad:48:20:94:a3:ed:1f:52:7d:c5:24:08:bb:f2:70:
         ca:23:70:e6:cd:03:b8:01:37:99:17:9d:f9:ee:0a:50:ab:5c:
         f6:a3:5f:a0:1f:50:07:a8:7b:c0:4a:a7:70:f0:7b:82:b1:84:
         d8:37:21:ee:0f:d2:40:92:cf:97:8e:76:0b:05:53:cd:34:37:
         96:5e:36:42:53:99:a1:4d:aa:7c:50:1a:06:26:3e:ec:81:34:
         d5:8f:82:f9:30:97:83:5c:0a:59:f7:e8:c2:de:cc:0b:bc:77:
         71:2c:22:10:89:09:de:fd:69:c8:cd:58:93:bc:b7:56:68:5d:
         fa:fe:2f:04:f5:1a:b5:cc:e1:d3:a6:01:26:e8:8a:1f:94:bc:
         51:99:f9:f5:5b:5c:00:a0:cc:3a:7b:90:88:22:f5:cf:1c:7e:
         a3:e6:c3:0b:9b:01:80:94:d7:f8:41:04:e8:a7:42:af:e0:da:
         22:ff:cb:b9:b7:0b:94:35:c3:b8:30:5d:2e:fb:70:ca:c8:da:
         18:a1:e5:ab:0e:c7:f9:fe:38:9a:73:dd:7e:14:4a:c1:cc:41:
         68:d2:a3:50:df:9f:24:72:b0:84:16:d7:f2:ce:5e:ea:05:e8:
         80:59:d4:d4:04:af:9e:41:82:ef:b6:f3:e8:04:5a:6e:5d:a0:
         36:44:1b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:52:30 2025 by rpki-client