Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857/1452ac3f-f145-39d7-863f-6728e2c6949e.roa
File:                     1452ac3f-f145-39d7-863f-6728e2c6949e.roa (raw, json)
Hash identifier:          N9JAqhrHO1qXXak5d29KHrBpQuHIj/Tv5cfxD4g0ZxY=
Subject key identifier:   55:78:1D:64:2A:32:D9:CC:19:3C:30:C2:3A:3B:74:78:7A:71:EF:35
Certificate issuer:       /CN=65249710-7b94-4fa1-9980-bf1dc5d20857
Certificate serial:       010D0C9F4328584B25FC3172EA4E46E1DE3EB400
Authority key identifier: D3:D9:5A:04:B4:9C:DA:C7:DE:ED:F5:3E:99:1D:32:60:D6:FC:08:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857/1452ac3f-f145-39d7-863f-6728e2c6949e.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     18676
IP address blocks:        155.184.0.0/16 maxlen: 16
                          155.184.128.0/22 maxlen: 22
                          155.184.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857/65249710-7b94-4fa1-9980-bf1dc5d20857.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857/65249710-7b94-4fa1-9980-bf1dc5d20857.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:31:72:ea:4e:46:e1:de:3e:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65249710-7b94-4fa1-9980-bf1dc5d20857
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=65994b2b-199b-4133-9f29-50f50348740d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:69:bf:6e:fd:5a:c6:3b:c0:79:b1:24:68:84:
                    74:07:dc:4d:44:18:5d:75:e8:cd:ab:36:ba:18:cd:
                    34:c5:8f:31:eb:6e:da:e4:5c:c2:75:bf:0e:4f:2b:
                    a4:73:55:d8:87:53:d0:2d:cf:da:5f:17:ee:53:6c:
                    a8:b6:a8:3f:e7:cc:aa:59:63:58:23:b3:3b:9a:9c:
                    ec:2b:07:ac:0e:08:ad:3a:d1:76:b2:01:5c:8b:32:
                    53:cb:19:1b:57:8a:8f:94:7e:48:ae:5e:f5:ea:57:
                    18:d5:54:3a:be:88:19:58:8d:65:aa:9c:17:99:91:
                    26:c3:21:c4:76:49:00:02:89:04:15:9a:f3:d9:49:
                    c9:94:b4:fe:0b:4e:4e:22:3c:fc:8c:fb:76:ea:61:
                    2b:06:4e:54:64:51:39:f9:df:56:08:29:f1:10:60:
                    57:37:a7:c9:58:2d:f4:82:0c:15:94:e6:ce:08:f0:
                    b3:dc:ca:a5:99:77:1d:b3:ac:1f:9b:d6:6b:6b:f8:
                    cb:71:98:37:f3:0a:6b:32:65:0c:49:c2:53:a9:80:
                    7b:fa:71:a7:43:f5:4b:95:8d:73:d7:c0:83:97:2d:
                    8e:cd:cd:2a:15:d7:80:6a:16:86:91:fe:b3:94:2f:
                    6e:cd:16:4e:98:b7:b0:c8:5c:9b:d9:60:4e:c9:91:
                    ca:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:78:1D:64:2A:32:D9:CC:19:3C:30:C2:3A:3B:74:78:7A:71:EF:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857/1452ac3f-f145-39d7-863f-6728e2c6949e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857/65249710-7b94-4fa1-9980-bf1dc5d20857.crl

            X509v3 Authority Key Identifier:
                keyid:D3:D9:5A:04:B4:9C:DA:C7:DE:ED:F5:3E:99:1D:32:60:D6:FC:08:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/65249710-7b94-4fa1-9980-bf1dc5d20857.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.184.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:54:83:25:18:79:93:0a:cf:d4:bf:14:71:78:db:01:82:e0:
         69:0e:49:69:48:4d:36:2e:f7:a7:02:30:47:bd:40:46:8c:1f:
         9c:d2:4f:ae:92:43:c4:7d:82:a9:d8:58:aa:09:20:1f:e9:80:
         87:34:98:25:46:cb:57:cf:78:19:61:3a:4d:2b:04:29:88:83:
         a5:5a:4b:2e:c3:3f:c7:8d:70:29:e4:61:68:4c:1e:dc:dc:17:
         cb:25:91:6b:3d:a2:5d:4b:fc:6c:f7:32:3f:8d:c0:b6:e6:06:
         f4:ce:b8:a6:c3:29:e3:c7:77:32:0b:96:71:9f:53:85:08:49:
         d5:bd:4b:2f:ca:66:46:c9:69:84:00:82:8a:29:02:b0:4c:5e:
         99:8b:40:ef:f7:5b:7d:00:81:bf:02:fc:5c:7b:b8:5a:b7:a6:
         0a:45:02:5c:2a:46:d2:56:a2:41:73:25:7c:6d:7f:22:39:98:
         c4:e6:ad:60:fb:5b:6a:f3:74:ea:e8:f1:b0:ca:34:c9:3b:30:
         fe:d3:61:87:c5:4f:69:db:b8:0c:4e:66:ca:ae:2f:5f:2a:c5:
         3d:47:63:8b:f9:ff:61:8c:c0:a5:fe:bf:a4:18:02:6b:8e:a9:
         f2:f6:aa:a5:ea:19:f9:4a:3d:36:41:85:cf:21:5a:b0:d5:75:
         bd:72:07:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:58:35 2025 by rpki-client