Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/14b1ca4a-ee6e-3bf5-8b62-0b17ad8e7c56.roa
File:                     14b1ca4a-ee6e-3bf5-8b62-0b17ad8e7c56.roa (raw, json)
Hash identifier:          JHN1hlgEGE+cBldsufEG3X4dzkanfV9JracaNG10gL8=
Subject key identifier:   BD:5C:68:1B:C0:EA:B9:5B:79:73:0F:B9:62:E8:3F:D4:95:53:7F:EF
Certificate issuer:       /CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
Certificate serial:       010D0C9F4328584B8EACCF397717D32F9E235000
Authority key identifier: E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/14b1ca4a-ee6e-3bf5-8b62-0b17ad8e7c56.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     14618
IP address blocks:        152.129.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:cf:39:77:17:d3:2f:9e:23:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=30d5f07a-3fb7-4289-ac46-7e586b058e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f1:ed:8c:47:e8:7f:d7:1e:50:bd:93:59:97:
                    43:2c:e4:8b:e9:9e:c5:0d:2e:ab:cd:7d:08:dc:4f:
                    c0:96:20:5c:52:e3:56:c7:9c:02:56:e2:80:6b:dc:
                    30:e8:22:17:c5:4f:33:76:b2:4c:5a:28:f8:0a:1d:
                    da:0a:16:80:5f:e1:73:6e:f1:06:b4:14:d1:aa:22:
                    48:b6:0d:03:bd:62:95:bf:32:44:a3:cd:f9:78:b8:
                    fc:62:94:4b:27:6e:cc:30:89:20:1a:17:1b:3c:ec:
                    ea:ab:4a:15:68:3d:ef:f8:60:96:60:92:0e:bf:8e:
                    93:72:4a:db:e7:79:d9:7c:c3:ff:a7:3b:6f:43:46:
                    1e:20:00:8c:d8:bf:e7:aa:79:a5:14:9c:ae:6b:89:
                    5e:42:f4:59:99:9e:37:ce:ce:80:ef:2b:4b:7f:41:
                    95:6f:5a:fe:92:b4:a1:39:ca:d7:af:8b:29:17:df:
                    07:83:b0:af:47:be:04:22:bc:81:e2:e5:89:55:00:
                    8a:62:d3:75:73:9e:e0:93:af:fd:6e:2a:a7:cc:3e:
                    64:d6:06:9a:28:cd:3c:94:bd:cd:99:f7:31:78:a7:
                    ea:08:c0:15:af:29:7c:d4:cb:0d:86:5a:68:a0:36:
                    93:a6:1e:5a:23:f7:aa:b6:eb:6e:17:27:bc:d4:cc:
                    e9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:5C:68:1B:C0:EA:B9:5B:79:73:0F:B9:62:E8:3F:D4:95:53:7F:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/14b1ca4a-ee6e-3bf5-8b62-0b17ad8e7c56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl

            X509v3 Authority Key Identifier:
                keyid:E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.129.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:75:47:50:2a:0e:fb:b1:f4:66:96:b8:32:ad:ce:99:52:0f:
         ce:f2:8d:38:90:be:e2:29:a5:3f:ca:08:5f:57:83:f7:d4:87:
         19:ef:a0:37:31:d3:a6:8f:ce:a5:75:4b:9d:ec:c9:5e:f6:36:
         ca:0e:27:01:ba:ef:86:c4:c3:cb:3a:d3:9f:4e:e7:9b:ac:05:
         b9:02:77:cf:0f:d3:1c:33:85:a5:76:b5:5a:e8:67:9e:8b:5e:
         9a:af:5f:1e:95:41:ba:f5:9c:e0:1b:0b:8a:82:dd:e6:08:19:
         f4:47:e9:df:55:d2:98:0f:00:af:3e:43:7e:31:3d:0f:54:1b:
         52:5c:fe:a4:8b:27:81:2f:b2:f3:e1:38:84:53:6b:47:4b:04:
         1d:7e:5c:f0:8d:09:84:14:ed:34:34:df:df:95:af:37:24:82:
         d8:7c:a4:42:29:19:80:be:27:0a:5e:c6:92:97:1f:23:ba:bf:
         b0:9d:cb:74:4a:d6:74:cb:95:13:08:73:9c:f2:29:b9:d0:81:
         44:34:50:96:68:d9:53:1f:73:81:1d:7e:a9:a6:94:e7:04:d9:
         80:33:0a:b8:71:65:5f:4c:7c:1d:22:3a:95:30:58:e1:cd:93:
         25:b8:e1:99:66:76:71:04:fc:20:ee:be:95:98:c3:f3:d6:42:
         eb:0f:a1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:08 2025 by rpki-client