Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/4494a79c-8607-3624-b716-5c884c4ed442.roa
File:                     4494a79c-8607-3624-b716-5c884c4ed442.roa (raw, json)
Hash identifier:          OhwimYE0R0U3xPHEF6ckUaGZNXpt75sWht8mnJ0vMA8=
Subject key identifier:   33:DB:BF:93:AC:E3:7F:63:A6:28:7F:97:4D:BC:18:AD:75:A3:8C:0B
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584B48E1C46D376F5851F40AD980
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/4494a79c-8607-3624-b716-5c884c4ed442.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     11427
IP address blocks:        134.202.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:c4:6d:37:6f:58:51:f4:0a:d9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=d33ef58d-2c5b-4811-8c17-5161a66715ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9e:b8:c3:5d:46:70:19:5f:be:24:b3:c5:a0:
                    04:d1:1f:9d:a7:05:c1:43:7a:a0:f7:36:45:2b:85:
                    5a:01:67:af:02:b8:c7:f2:05:7d:39:9a:17:74:7c:
                    ab:fd:a0:2c:4c:6f:a5:3c:0c:d7:01:0f:b2:7f:30:
                    1d:85:09:cb:c4:78:92:8b:b3:4b:d3:a8:c9:e9:e8:
                    d9:22:7a:84:c4:68:bb:0f:45:28:06:00:06:ef:b2:
                    d1:54:84:f3:5a:4d:6c:de:5d:a6:c7:75:29:8f:52:
                    6e:f5:9f:07:18:b9:8f:38:6e:89:05:15:41:2f:c1:
                    b9:a4:61:e2:54:67:8b:83:ea:f9:49:7b:8e:17:93:
                    b4:47:54:a8:d2:99:20:fc:7a:66:0e:7a:25:59:50:
                    26:7a:3a:44:2e:24:4e:51:8b:c1:dc:5c:98:70:fc:
                    9c:b2:d7:a0:35:d8:fc:fd:2f:3e:d8:fc:f4:6a:96:
                    22:2f:94:ba:d1:2c:2c:7a:92:1c:a0:de:0d:84:a1:
                    4a:1a:c0:5d:56:32:70:6c:30:0b:b6:8d:92:33:0b:
                    b3:7d:e1:71:f5:2a:71:81:ec:cd:47:2c:4d:16:3b:
                    70:79:44:e7:87:37:ea:f4:a5:8c:90:fc:70:be:fc:
                    66:44:48:b0:25:49:c6:70:f5:4a:6a:b5:20:3d:14:
                    0f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:DB:BF:93:AC:E3:7F:63:A6:28:7F:97:4D:BC:18:AD:75:A3:8C:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/4494a79c-8607-3624-b716-5c884c4ed442.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:99:3a:01:ae:db:1c:f4:4e:43:c6:fe:ac:7c:8b:81:43:4f:
         c1:5d:9e:aa:66:94:af:ac:12:cc:a1:c2:88:58:ca:6d:55:3d:
         fd:e0:f3:93:a2:96:65:8e:36:eb:ca:de:8f:85:47:8f:62:fc:
         56:01:dd:8d:9d:2a:70:51:24:cc:98:87:e0:4b:a3:a1:60:83:
         2f:77:99:11:cb:fd:8a:93:92:1d:33:42:38:8d:6d:3b:1a:9c:
         95:4b:22:09:06:4c:74:47:5b:bd:d0:11:1e:f7:1b:6a:f1:7a:
         28:ab:63:45:1e:4d:cd:b7:55:7e:59:88:3d:e7:08:a1:f0:de:
         df:db:67:49:9d:6b:42:b4:a2:fb:9d:e9:7c:d3:f6:1e:08:37:
         c9:b7:bb:a3:31:45:60:9c:32:df:64:72:d4:8a:05:d5:ac:42:
         8b:3a:f9:9b:07:d0:af:54:06:42:c9:70:0a:d7:5c:62:6c:59:
         5a:99:f4:6f:d2:e8:19:c6:11:e1:8a:89:59:e9:66:27:c3:75:
         c0:e6:62:b2:a6:17:22:9b:01:5e:21:b7:f1:c8:2d:90:1c:c0:
         b5:c5:88:5e:ff:e6:05:a8:41:d6:79:b2:f5:6e:51:25:b7:fd:
         9b:78:f8:fe:08:a9:90:ac:9a:ea:65:64:69:4c:f0:e6:fb:6c:
         6f:ba:c9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:31:09 2025 by rpki-client