Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d2ac632e-3796-31d1-9da0-50592600ab35.roa
File:                     d2ac632e-3796-31d1-9da0-50592600ab35.roa (raw, json)
Hash identifier:          RZh24LQXKeybGgN2/xlyflOM3GnLNoK9bM2bb6nQUlE=
Subject key identifier:   F4:37:98:E4:28:68:26:93:98:B4:A8:24:C3:F4:A8:A4:54:9B:C0:A1
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584B72C1F942DFC3689F9E538480
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d2ac632e-3796-31d1-9da0-50592600ab35.roa
Signing time:             Wed 08 Oct 2025 01:00:29 +0000
ROA not before:           Wed 08 Oct 2025 01:00:29 +0000
ROA not after:            Tue 06 Jan 2026 02:00:29 +0000
asID:                     25198
IP address blocks:        139.177.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:72:c1:f9:42:df:c3:68:9f:9e:53:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Oct  8 01:00:29 2025 GMT
            Not After : Jan  6 02:00:29 2026 GMT
        Subject: CN=777d5dd8-f53d-4b69-aec0-db3a059c43e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d0:94:32:ae:b9:21:05:f9:48:f7:2f:20:e6:
                    05:6e:b3:23:f3:98:99:73:7e:70:93:0e:50:1f:5a:
                    3c:34:e1:a0:01:9b:cd:87:00:0c:8e:68:0d:82:af:
                    50:be:fc:69:89:03:15:2a:2b:1a:d0:0c:e4:ce:43:
                    b2:52:21:33:af:8a:ba:34:f0:19:e5:20:47:da:6e:
                    30:35:98:26:56:81:e6:da:58:be:f8:68:6f:b2:6f:
                    a6:96:b2:3b:82:1e:fb:1d:19:0c:cb:63:f2:d7:45:
                    c8:12:b4:a0:1c:13:cd:63:9a:50:5e:75:e3:31:d2:
                    80:f1:f4:d9:d8:04:0d:b9:a1:19:6d:4e:ec:cd:60:
                    eb:92:a7:02:73:c9:db:df:9b:0e:c0:23:ba:81:3f:
                    cb:37:e5:53:c3:f4:fb:e1:8a:86:80:5e:c3:c7:17:
                    43:66:72:b1:b7:4e:3b:41:75:e9:be:42:4d:6d:1f:
                    33:02:f8:80:68:a2:e2:c1:82:db:e9:fa:32:88:33:
                    dc:fd:26:97:2a:0f:08:bb:9c:e3:f5:77:1c:bf:e7:
                    d7:7a:99:db:f1:5c:62:73:a2:51:3c:44:13:46:9e:
                    db:e2:f2:5a:c0:59:fa:8d:92:38:d5:0c:df:a2:4b:
                    3f:8f:f1:8b:eb:24:ba:25:fd:5a:fa:8e:84:fd:72:
                    d1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:37:98:E4:28:68:26:93:98:B4:A8:24:C3:F4:A8:A4:54:9B:C0:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d2ac632e-3796-31d1-9da0-50592600ab35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:64:a9:ac:13:2d:a0:04:ee:67:e4:fe:fa:3b:be:1b:66:16:
         ee:50:81:59:63:45:16:28:05:6e:52:2b:58:23:87:36:6a:98:
         6b:89:e1:94:6e:d5:c6:21:15:4a:f9:0a:6f:15:ab:26:57:d3:
         7d:a2:51:7d:98:6f:69:9c:68:8d:12:67:61:f0:ad:28:c5:d2:
         a3:ed:2e:02:00:c2:3a:0a:db:87:c0:49:64:5e:a3:ce:d2:ad:
         e0:f4:46:b8:a0:82:99:06:3b:e9:d2:da:df:9c:36:d8:23:c8:
         b1:7e:6a:4d:0c:1c:71:cd:de:35:74:41:61:43:d1:fa:5a:7c:
         61:85:bd:8a:c2:65:bd:33:9d:2a:fc:b9:23:be:54:57:4a:85:
         1c:da:78:c2:ff:c2:ee:c9:40:9f:f9:e3:0a:16:09:aa:1a:7f:
         7b:0e:1a:b5:61:d9:28:3c:98:53:7d:06:1c:3e:88:54:33:1b:
         1d:a4:8b:e8:ae:fa:1a:80:7c:dd:0f:b3:9c:ce:64:f5:81:36:
         53:ed:83:d0:f7:eb:5b:b8:28:39:18:cc:3e:bf:c7:a1:be:49:
         df:78:e6:aa:d3:b1:e5:5b:52:5a:4b:f5:69:e4:f3:ab:24:fb:
         94:e1:5f:54:6e:98:2d:23:cb:57:5f:58:92:ee:3f:3c:fa:43:
         b5:23:63:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:32:00 2025 by rpki-client