Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/8c3741f9-53db-35d8-a767-d9a9be50f130.roa
File:                     8c3741f9-53db-35d8-a767-d9a9be50f130.roa (raw, json)
Hash identifier:          QtNQwgm9CjP61ytDXM9vqEAOH9v/HGGVK32J7fIPVfw=
Subject key identifier:   52:9C:C0:0F:43:68:81:98:48:24:2D:D0:C9:23:D1:5F:DB:9E:16:EE
Certificate issuer:       /CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
Certificate serial:       010D0C9F4328584B8EACCF13848390A57CD8D880
Authority key identifier: E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/8c3741f9-53db-35d8-a767-d9a9be50f130.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     29992
IP address blocks:        152.124.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:cf:13:84:83:90:a5:7c:d8:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=15bb1843-00df-4762-a277-d6123c2e7a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cb:81:54:e8:46:11:ec:d5:21:d7:aa:95:de:
                    4e:64:9b:47:50:c6:1d:82:70:ce:1e:ad:8d:2e:b8:
                    b4:54:d5:31:34:97:c0:b8:52:d1:3b:5f:0d:a2:42:
                    19:24:27:07:72:25:7d:dd:93:53:f1:c6:01:90:08:
                    ed:2f:f4:7d:bd:46:44:30:4e:ba:c5:a9:cf:59:60:
                    7a:57:b8:13:18:63:44:16:d5:e2:e7:36:c2:00:75:
                    78:9a:5e:d0:fc:0f:67:e7:3e:ba:e2:be:74:e9:6e:
                    f6:39:9b:8c:c5:d0:8d:b7:32:a6:f2:5d:04:96:fd:
                    75:85:a3:01:04:5b:85:ba:92:01:52:1e:76:d7:d6:
                    71:3a:a4:10:44:92:01:e2:8a:02:0b:4a:fd:b6:80:
                    05:37:1a:34:31:fe:74:05:c9:71:76:69:47:20:c1:
                    49:d1:fb:a4:11:fa:d5:64:17:bf:c3:40:5c:b9:9f:
                    b4:ac:07:79:b7:31:00:9b:4a:0c:e3:ff:86:f1:3b:
                    7e:17:df:f2:50:1b:8a:60:33:d8:18:5f:9c:a1:1c:
                    72:4c:86:11:f8:4b:ac:60:6b:39:ce:45:59:00:31:
                    5c:06:73:3c:e8:91:88:40:aa:79:07:02:2a:0b:69:
                    f2:d7:c9:18:01:5b:5f:6c:fa:e0:13:39:43:9d:bc:
                    ca:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9C:C0:0F:43:68:81:98:48:24:2D:D0:C9:23:D1:5F:DB:9E:16:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/8c3741f9-53db-35d8-a767-d9a9be50f130.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl

            X509v3 Authority Key Identifier:
                keyid:E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.124.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:51:d2:6f:59:87:ec:0a:46:4f:cb:6f:09:9f:81:0b:27:28:
         43:81:f2:58:42:32:a6:50:f1:be:d2:04:a4:ef:96:4e:e7:7f:
         50:a0:4e:aa:62:3d:1c:e9:c9:f7:1f:88:f3:98:2d:6a:02:b1:
         93:89:a2:a9:25:95:e2:fa:ad:ab:61:c2:9b:08:b9:8a:87:c8:
         a1:34:b1:3c:9b:33:31:fa:c4:5d:ff:a6:c4:50:3e:d2:c8:77:
         0a:00:03:28:5d:af:86:6c:1d:26:5a:12:b6:4d:a6:e4:e4:4a:
         41:1f:6b:8d:21:11:c7:e3:63:85:ea:20:41:24:44:7d:5c:67:
         7a:c8:20:10:9e:ea:00:33:74:fb:ae:d8:60:4a:9b:a2:69:27:
         75:44:d7:79:94:c6:98:df:b9:5a:2d:b4:6f:10:cd:0c:6b:81:
         f9:53:2c:e7:a4:cd:ea:18:e6:94:6f:94:9d:79:44:f0:25:82:
         6f:a9:c7:a5:ce:5b:02:d2:c2:cc:db:c1:14:d6:f5:9f:89:a6:
         92:6d:84:45:99:9f:db:4f:e5:ab:65:b5:88:6f:68:be:e7:73:
         80:ee:37:61:39:0f:ce:bd:6a:c2:0f:e2:3f:60:96:81:e9:de:
         27:5e:e2:ab:fe:f5:96:ed:bc:5a:87:3d:b3:a0:38:a2:24:6c:
         0c:f5:2c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:44:27 2025 by rpki-client