Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/6c2a6fb6-4c9a-326a-85a4-01ea5cac8868.roa
File:                     6c2a6fb6-4c9a-326a-85a4-01ea5cac8868.roa (raw, json)
Hash identifier:          +lh/d6w7VlnVJ6CTwd4W4lDZQVtTs/bsvfb0aTmrBbs=
Subject key identifier:   C8:EA:B7:91:F3:FE:71:C5:D4:10:6D:AF:96:DB:C1:6D:28:8B:73:96
Certificate issuer:       /CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
Certificate serial:       010D0C9F4328584B2CF6DB40200C588F9E84A0E0
Authority key identifier: 2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/6c2a6fb6-4c9a-326a-85a4-01ea5cac8868.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     10475
IP address blocks:        135.180.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:db:40:20:0c:58:8f:9e:84:a0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9f4a1f-1371-4f3f-b291-69eabf8bb087
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=a5489692-4717-4dc8-988e-5e6fa3008983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:66:68:2d:ea:72:7b:96:41:85:b9:f9:57:63:
                    fa:25:e2:bc:13:3a:fc:28:12:6a:e2:cc:9f:90:66:
                    64:a8:08:7c:6e:98:46:17:7b:a4:72:86:6f:8c:9b:
                    63:9f:ce:d9:14:a5:db:d6:6a:02:99:c4:b2:be:d1:
                    b0:7f:5c:bb:f9:da:ec:67:a5:84:4a:69:7f:db:98:
                    23:59:b7:40:9e:c4:7b:85:72:7d:b3:77:7a:fc:e5:
                    c7:75:52:6d:6d:3b:ed:37:5a:7c:74:d6:f9:53:10:
                    cc:dc:c7:eb:4d:e9:e9:01:35:cd:24:f7:97:20:11:
                    79:57:f2:41:8c:18:27:03:99:36:85:a8:9f:7e:40:
                    8f:ca:7d:ad:5e:ca:a1:65:4d:e9:e3:c0:cc:9e:39:
                    84:08:5c:9e:69:fb:ac:41:bb:35:36:ee:22:16:81:
                    eb:c9:83:42:d9:66:d9:08:1b:92:45:55:2d:eb:f3:
                    82:17:28:02:be:f7:b0:35:98:f6:1a:bf:8b:89:a7:
                    ac:12:de:23:58:fc:d5:4b:8d:ce:05:5f:06:16:64:
                    38:57:ff:e8:f6:79:f0:1e:5c:24:c9:55:c3:cc:7a:
                    36:ea:33:74:7b:8c:69:6c:0f:75:f4:00:ee:df:bc:
                    e4:93:7a:ed:7e:00:94:fa:f5:f8:af:5c:79:b4:88:
                    26:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EA:B7:91:F3:FE:71:C5:D4:10:6D:AF:96:DB:C1:6D:28:8B:73:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/6c2a6fb6-4c9a-326a-85a4-01ea5cac8868.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087/be9f4a1f-1371-4f3f-b291-69eabf8bb087.crl

            X509v3 Authority Key Identifier:
                keyid:2F:0C:02:B9:F8:77:F4:1E:50:7C:59:DF:62:ED:5E:28:F9:09:5D:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/be9f4a1f-1371-4f3f-b291-69eabf8bb087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.180.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:e9:0a:49:10:f8:7e:db:d5:60:79:81:69:31:52:9f:25:ce:
         a0:bf:71:fe:8b:12:24:11:fd:ca:67:06:be:ad:10:c3:5a:7e:
         ce:29:4b:c1:70:89:cc:d2:e3:b6:5c:ae:fe:8f:83:7f:21:e8:
         ac:e8:0a:38:24:93:15:92:12:f9:28:76:a3:e7:4c:05:81:7e:
         f6:61:9b:92:f2:ff:cb:1b:52:9c:4f:a1:e8:f6:af:ab:11:12:
         7c:1c:4d:bb:8e:c9:62:7d:28:a5:fe:19:93:3f:45:66:35:68:
         24:f8:24:8b:83:1f:09:cc:0a:bd:22:54:f1:49:e8:a0:8a:2d:
         0c:28:78:4f:c9:7a:a5:8f:7b:52:2b:90:56:0f:ee:d8:1c:6e:
         b5:ee:03:8d:4f:9e:c6:0a:90:dd:b4:ce:ef:80:61:d3:40:7d:
         7f:67:2d:c6:99:18:67:8b:ea:07:64:03:b5:61:79:d8:31:d0:
         76:1a:a9:bd:83:0e:52:ab:4e:d0:9d:1f:74:06:06:16:ad:a0:
         48:68:77:99:d6:70:bd:9b:fb:d7:bb:aa:79:18:89:9d:5c:45:
         52:b0:3c:ac:75:82:51:49:36:03:11:97:cc:e1:fc:78:99:93:
         fe:60:0c:4b:4a:7d:8f:f0:7e:8f:8c:7f:a7:4d:5d:fa:dc:fc:
         42:ca:92:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:54:15 2025 by rpki-client