Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e12dfce2-d5d2-304b-b653-704f5122eff9.roa
File:                     e12dfce2-d5d2-304b-b653-704f5122eff9.roa (raw, json)
Hash identifier:          PstUIC5t568hqA3vuwi3An8JtzQo04HOxAQShMiBsIQ=
Subject key identifier:   14:C3:4B:60:BA:E8:E6:DD:43:39:3E:A7:CF:43:0D:E6:CD:B1:54:C0
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F521A57C498BCE81ADF6E40
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e12dfce2-d5d2-304b-b653-704f5122eff9.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        142.196.0.0/15 maxlen: 15
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:1a:57:c4:98:bc:e8:1a:df:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=e88cf132-2c69-412d-965f-6f293c838884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e2:e2:05:52:a7:ef:21:db:e9:31:02:fa:e8:
                    96:af:62:d1:a1:32:15:8d:8c:7b:5f:74:4d:86:3f:
                    60:50:e2:4b:f8:e7:af:0f:ad:04:8c:f0:be:a9:12:
                    01:30:ed:fd:25:ab:23:f0:2f:9e:7d:47:6c:86:3e:
                    8c:bd:ac:0c:6c:82:19:6e:ed:ed:54:b7:7f:0b:18:
                    f0:f2:dc:11:29:0e:7f:b0:a3:00:32:db:df:3f:87:
                    9d:8f:6e:94:51:cf:3a:89:0b:7e:c3:7a:59:cd:8b:
                    dd:fb:2e:31:19:f9:6e:9d:51:28:25:c3:ef:28:a1:
                    ae:77:6e:db:68:e3:c9:5a:e4:6d:0d:0e:f6:ae:f9:
                    13:32:84:43:59:13:9e:80:f8:5c:dd:69:9f:b0:8a:
                    d7:3a:3c:46:da:ab:53:c1:1e:6a:fd:aa:e4:b0:eb:
                    45:e7:c2:e5:8b:fc:3f:4b:42:df:65:bf:b5:15:44:
                    b9:58:c8:82:32:e8:fc:87:5e:81:51:df:d7:fd:f3:
                    36:46:8f:d6:81:8b:44:99:a2:6e:33:f3:56:3f:ee:
                    b0:6a:1a:57:47:9c:8c:d9:7b:61:be:1f:a0:49:59:
                    c8:73:d9:12:75:54:e5:0e:43:bd:9c:b7:01:59:d4:
                    8e:02:8c:f7:a8:c9:28:c4:2c:c4:50:94:80:c0:fb:
                    99:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C3:4B:60:BA:E8:E6:DD:43:39:3E:A7:CF:43:0D:E6:CD:B1:54:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/e12dfce2-d5d2-304b-b653-704f5122eff9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.196.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:a6:44:9e:f4:d8:ae:13:45:b5:71:48:8e:c9:f5:d1:27:b7:
         bc:1e:43:ed:c2:b6:dd:16:00:0c:dd:76:16:5c:d2:6f:fa:fe:
         83:6e:5f:0e:14:25:cb:f1:97:2b:6b:0c:d6:1b:a5:cd:35:68:
         a1:8e:a8:10:28:ce:e7:80:8c:2f:d0:59:cd:d1:44:d5:87:f8:
         33:e4:82:4d:be:d3:c7:f7:ec:46:80:07:49:15:18:45:6c:26:
         c6:65:e2:5b:1c:7f:96:d8:c3:e8:fd:bd:8e:54:9e:3e:56:f6:
         e2:57:6b:32:ef:ce:96:8b:2e:77:61:0a:8b:31:3e:a4:03:6f:
         91:12:bd:da:15:74:53:d6:18:3a:dc:7f:14:22:cc:0b:1e:c5:
         4d:30:2f:53:7d:db:60:b7:10:7e:12:57:21:2b:ae:57:15:9b:
         a9:1a:9c:e4:75:40:5d:5e:0d:91:ca:16:4c:9f:97:0f:1b:56:
         72:72:2d:0f:c1:19:a0:1b:b9:09:ad:4c:80:cd:60:7d:b2:90:
         39:b2:4f:d9:86:4b:5c:b2:9b:d2:bd:e1:05:69:53:dd:f9:4f:
         d5:dd:64:da:2a:0f:32:23:7a:9c:04:63:9f:ec:fb:95:7b:3a:
         2d:f0:8a:38:18:2e:e7:5a:9e:a9:df:7a:fd:5d:ec:31:15:37:
         c3:a5:44:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:21:17 2025 by rpki-client