Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/3df7d045-30e3-35d8-bee7-2ac56831e374.roa
File:                     3df7d045-30e3-35d8-bee7-2ac56831e374.roa (raw, json)
Hash identifier:          ACFuiyFBJkE9y8RjhSxbLyD1gBknMtCpyZf4LIMs66Y=
Subject key identifier:   26:23:5E:41:33:48:9A:70:BF:36:C6:CE:56:D6:42:2D:8E:02:03:55
Certificate issuer:       /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
Certificate serial:       010D0C9F4328584B68FC9773FC3EBE2AB313E4C8
Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/3df7d045-30e3-35d8-bee7-2ac56831e374.roa
Signing time:             Sat 04 Oct 2025 13:00:40 +0000
ROA not before:           Sat 04 Oct 2025 13:00:40 +0000
ROA not after:            Fri 02 Jan 2026 14:00:40 +0000
asID:                     683
IP address blocks:        146.139.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:68:fc:97:73:fc:3e:be:2a:b3:13:e4:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
        Validity
            Not Before: Oct  4 13:00:40 2025 GMT
            Not After : Jan  2 14:00:40 2026 GMT
        Subject: CN=6035255f-5337-45a1-9e14-2d3058069b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:97:20:f5:5c:e7:52:43:78:92:6a:5b:3a:df:
                    dd:4e:78:c5:90:e4:a7:3a:68:a4:33:a9:92:48:3b:
                    b4:72:c3:bd:72:ac:70:2a:9f:02:b1:36:12:64:47:
                    0f:27:e0:43:32:fc:81:08:24:6d:ca:49:0f:4f:d0:
                    f1:eb:77:26:1e:9f:d4:c5:e6:b2:b8:09:2c:4f:50:
                    39:39:af:97:0f:57:c1:ec:c4:32:01:0f:f1:a3:86:
                    45:15:08:55:ab:bf:ce:a1:b0:79:12:df:0e:d4:90:
                    c6:43:0d:f6:f3:de:97:ea:81:4e:fc:ea:b5:a1:16:
                    d6:05:b7:44:23:a0:50:a4:ff:dd:45:c9:e3:12:c2:
                    f4:f6:e0:b0:d4:62:22:e7:01:24:d0:ba:68:44:67:
                    69:1a:9d:e6:a3:aa:92:b3:48:43:62:15:00:b6:a8:
                    11:76:0f:80:83:11:23:82:e1:ec:03:32:35:00:b5:
                    a3:d9:a2:c8:47:be:59:f3:c0:cf:96:4c:c8:0d:05:
                    47:b1:11:11:e5:77:0e:8e:9d:21:ef:cf:f5:18:f0:
                    c6:4a:e2:62:c7:4d:27:a2:c6:19:f7:f3:c8:e5:b5:
                    38:76:4c:06:19:f1:81:1a:20:73:0f:08:89:5e:1e:
                    76:13:11:41:75:d7:dc:c5:f5:0a:5e:73:ab:ff:f0:
                    7a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:23:5E:41:33:48:9A:70:BF:36:C6:CE:56:D6:42:2D:8E:02:03:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/3df7d045-30e3-35d8-bee7-2ac56831e374.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl

            X509v3 Authority Key Identifier:
                keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.139.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:ec:7d:65:83:e6:4d:e8:d3:c4:ad:b3:63:28:e6:cc:a4:bd:
         22:95:33:b7:c1:54:93:ce:c4:78:f1:93:51:ae:3f:be:24:34:
         9c:e5:39:79:e7:42:24:4e:b7:f5:2e:ba:67:5b:d0:14:f0:fe:
         b0:97:9d:51:51:c9:a2:94:27:95:4b:55:81:8c:6f:7f:3e:72:
         5e:b2:4b:7a:56:b6:01:67:25:03:1f:8c:84:c7:48:17:86:b0:
         69:b8:9b:32:80:c9:4b:fa:56:a4:b3:5e:fb:e9:2a:36:fd:0f:
         05:a0:d9:fd:61:8b:6e:71:10:9a:a4:bb:58:10:82:d8:7a:64:
         9f:ed:02:ae:1b:35:c6:fb:a4:8b:82:49:e4:64:01:e3:99:8b:
         d8:87:53:b0:e4:58:98:27:2d:93:7a:f2:7e:ad:64:78:2c:e3:
         ce:92:6c:9e:ea:33:42:38:83:04:e2:43:2d:ad:b7:94:8a:77:
         26:e0:3a:79:47:a1:e2:c0:d2:ad:9e:43:8b:61:ae:f6:7e:3f:
         19:85:8b:a0:97:87:19:cf:7b:8c:9b:83:d4:a2:ac:ea:75:01:
         a8:fb:65:29:44:d9:34:9d:7f:3d:c9:6c:2e:70:07:46:e9:d0:
         79:85:40:4e:ea:fb:c8:9f:dd:61:86:d5:4a:dc:2c:36:f0:e2:
         45:92:0c:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:48:43 2025 by rpki-client