Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d0ad8b12-f500-35ad-bbab-c68990fd814c.roa
File:                     d0ad8b12-f500-35ad-bbab-c68990fd814c.roa (raw, json)
Hash identifier:          EcLNpsBkYjCiFbXQ0+h5SJ/xUGf9T2BwRy4xoN61fQw=
Subject key identifier:   2A:61:0E:14:FA:0A:65:D1:8E:CE:6C:84:8E:E9:3B:68:46:72:C7:99
Certificate issuer:       /CN=eb5e041e-98b3-4dff-827b-03e1387393cf
Certificate serial:       010D0C9F4328584B91776FAFF1CDF6AA1DF8FF40
Authority key identifier: DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d0ad8b12-f500-35ad-bbab-c68990fd814c.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     20454
IP address blocks:        125.253.70.0/23 maxlen: 32
                          125.253.72.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:6f:af:f1:cd:f6:aa:1d:f8:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5e041e-98b3-4dff-827b-03e1387393cf
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=c3f274e8-9d28-4621-9b97-2f30b534725a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:39:6e:39:28:dd:10:8a:e5:85:22:87:c3:5b:
                    59:e6:1d:5d:7a:60:b6:bb:9e:b1:de:65:f7:b0:54:
                    fc:bc:11:5e:83:a7:8c:45:97:a6:d3:2c:c7:6d:ee:
                    ee:60:3f:08:ee:6b:e4:d1:6a:05:c7:fb:c7:87:c3:
                    b6:66:9d:63:a0:3a:cc:4a:13:12:72:c7:63:79:8d:
                    6d:31:6b:f9:9e:bc:b6:06:af:e4:1f:e5:98:e4:89:
                    69:3d:06:1f:7a:ae:8a:1f:15:cc:5c:3b:30:96:f9:
                    33:c7:7d:1f:4f:82:ea:7c:66:fd:af:ff:1b:ef:b4:
                    d4:1d:7e:26:64:d7:ca:77:25:a2:4b:63:6c:90:01:
                    e7:1f:24:1e:d6:13:a6:fc:ac:86:ea:0c:40:52:d7:
                    96:e3:aa:d6:ce:79:c6:96:90:a2:f9:1d:43:1e:6e:
                    d6:49:af:a2:49:24:ef:bb:ac:ea:b1:ab:84:04:a7:
                    11:65:20:db:2d:fb:d6:4a:cf:b8:84:39:74:a6:ec:
                    13:58:af:f3:42:e1:e9:75:9f:14:71:c9:59:df:fa:
                    39:6b:b9:9f:25:1f:91:37:98:ba:a6:98:73:6b:59:
                    c5:de:1e:27:55:fd:47:1c:f0:f7:6f:ac:47:57:8e:
                    21:3c:33:da:5d:32:fa:20:65:ed:6e:6b:c2:73:95:
                    80:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:61:0E:14:FA:0A:65:D1:8E:CE:6C:84:8E:E9:3B:68:46:72:C7:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/d0ad8b12-f500-35ad-bbab-c68990fd814c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf/eb5e041e-98b3-4dff-827b-03e1387393cf.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E8:94:DA:50:2A:DD:C0:17:43:36:C7:FD:50:9C:7A:0C:11:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/eb5e041e-98b3-4dff-827b-03e1387393cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.253.70.0-125.253.79.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:b1:01:35:88:06:09:04:6f:3f:ec:0d:69:37:9c:ac:e9:23:
         22:5d:c5:ae:08:f3:78:a1:f0:ab:26:0e:d5:e8:cd:17:95:1d:
         d1:4e:b3:1b:c2:da:69:66:57:40:0a:ae:59:33:ee:90:ea:ba:
         07:65:9e:01:8f:8e:1c:c3:4c:55:c6:5e:ce:ad:e8:73:de:d8:
         c2:95:be:a7:c2:9a:a8:8d:12:1d:56:a3:87:84:ff:4e:8e:91:
         f3:bb:9a:3f:c7:f3:bc:b9:0f:6a:c0:68:60:63:5c:5f:b3:9e:
         02:63:f9:c2:85:7e:36:23:c3:0a:74:ad:80:b4:9c:b1:4d:0e:
         0c:4a:1f:0e:68:b2:f1:e9:21:8c:9f:1b:1c:d0:31:2e:76:fe:
         71:b2:5d:ef:3e:51:e3:15:92:c3:df:60:b6:f9:f1:28:87:0b:
         59:48:86:9a:9d:c6:4b:45:c8:19:64:2f:15:03:72:d6:cd:21:
         f5:94:e8:79:5c:9b:73:2b:d9:ab:f3:e2:1b:bc:62:3d:e4:b5:
         f8:c5:1c:d8:11:58:32:14:eb:62:08:33:d5:68:ee:60:74:87:
         a9:e5:2a:5e:10:05:72:1d:3c:8a:a4:76:10:ec:40:36:48:53:
         25:49:3c:80:56:3b:6a:cf:47:07:7e:38:93:4d:ab:d8:d2:b1:
         b0:6f:66:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:49 2025 by rpki-client