Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/561dcf06-6c96-4c0d-b438-e55257f6121f/77a8ea98-a4ac-3182-8e84-14d6643f9a0a.roa
File:                     77a8ea98-a4ac-3182-8e84-14d6643f9a0a.roa (raw, json)
Hash identifier:          GclVMkPUzb8CAssByjw+vj8Amd04/oAHpuv7Q5g/ZXE=
Subject key identifier:   45:26:E8:6B:D8:F9:97:4B:67:B6:26:66:E1:B9:24:4C:F2:B2:76:66
Certificate issuer:       /CN=561dcf06-6c96-4c0d-b438-e55257f6121f
Certificate serial:       010D0C9F4328584B891773D885D3D257DE16CB00
Authority key identifier: AD:F0:35:53:A4:B4:C3:BA:A4:4C:E7:7D:66:84:2C:47:E9:23:AB:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/561dcf06-6c96-4c0d-b438-e55257f6121f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/561dcf06-6c96-4c0d-b438-e55257f6121f/77a8ea98-a4ac-3182-8e84-14d6643f9a0a.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     376
IP address blocks:        132.205.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/561dcf06-6c96-4c0d-b438-e55257f6121f/561dcf06-6c96-4c0d-b438-e55257f6121f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/561dcf06-6c96-4c0d-b438-e55257f6121f/561dcf06-6c96-4c0d-b438-e55257f6121f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/561dcf06-6c96-4c0d-b438-e55257f6121f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:73:d8:85:d3:d2:57:de:16:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=561dcf06-6c96-4c0d-b438-e55257f6121f
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=52f1c02e-15ea-4b30-9eb7-2a060039bff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:2b:d6:b1:79:69:ce:c3:54:9d:7c:02:b9:14:
                    53:fe:03:13:79:ff:08:1b:bb:bb:69:c6:2f:1b:a0:
                    dc:0b:e1:d5:fd:77:56:ce:f1:08:40:29:f0:81:4d:
                    73:48:20:80:b7:50:da:aa:5a:1b:3f:e3:3f:d5:6a:
                    de:80:7f:bb:75:b8:d6:a2:01:28:70:83:ae:47:3a:
                    80:f4:68:67:c9:b3:f7:1e:a7:59:d0:03:06:b6:c7:
                    aa:7a:5a:e0:59:c2:57:7c:e3:d2:17:3c:7e:8d:29:
                    75:33:f4:fc:45:fd:63:b5:e0:5e:c4:2c:3d:37:a8:
                    82:78:91:75:6c:7b:10:d6:0a:28:bf:d9:fd:19:37:
                    da:c9:d1:78:9c:21:e9:73:81:7a:8b:85:48:0d:10:
                    73:2a:e7:39:81:e4:a5:98:cd:23:f7:20:26:39:fd:
                    82:57:cd:4b:ed:45:a7:a9:e9:43:42:25:32:1a:fd:
                    aa:41:9a:bc:b1:8c:0f:92:cd:0b:7a:98:a8:34:f8:
                    c0:ce:45:94:54:43:ca:89:19:8c:6e:78:83:4d:4f:
                    76:0d:09:f4:0b:e8:6c:0d:46:7a:da:a7:9f:29:f3:
                    cd:7a:94:c0:aa:7d:da:73:08:25:5f:44:26:c9:74:
                    43:a2:40:cc:11:e3:c2:97:8c:ca:1c:bd:4f:17:05:
                    9d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:26:E8:6B:D8:F9:97:4B:67:B6:26:66:E1:B9:24:4C:F2:B2:76:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/561dcf06-6c96-4c0d-b438-e55257f6121f/77a8ea98-a4ac-3182-8e84-14d6643f9a0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/561dcf06-6c96-4c0d-b438-e55257f6121f/561dcf06-6c96-4c0d-b438-e55257f6121f.crl

            X509v3 Authority Key Identifier:
                keyid:AD:F0:35:53:A4:B4:C3:BA:A4:4C:E7:7D:66:84:2C:47:E9:23:AB:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/561dcf06-6c96-4c0d-b438-e55257f6121f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.205.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:6c:1d:f4:00:ea:9a:c7:42:30:f0:08:be:79:3c:c3:50:8b:
         d9:b7:c2:be:9b:31:b3:80:67:f3:d3:1d:fe:1e:25:b9:5c:4a:
         45:7c:01:5b:02:72:1b:68:b0:b9:11:8c:6b:54:d4:7c:4d:08:
         10:d8:d6:40:61:bc:b1:4b:b0:7d:de:c0:1e:c5:28:9d:75:e5:
         61:9b:44:35:01:a7:f5:a0:fc:d9:64:38:f1:60:d9:12:0a:09:
         4f:12:86:b1:44:3d:c7:5f:40:20:e5:95:60:9e:f1:41:db:8c:
         f0:75:79:cf:c8:5f:a3:31:95:b5:e7:28:42:a0:84:be:85:82:
         51:e8:f0:ed:8b:3d:35:5c:dc:61:39:8a:a5:ef:21:4a:56:92:
         12:4b:82:d8:a6:3e:8d:d6:dc:c2:af:c2:5c:b2:69:ad:77:ff:
         36:5a:4a:88:4e:59:52:1b:66:73:55:f9:6d:58:ed:78:1c:c2:
         cf:a5:50:53:88:fa:50:41:2e:e9:b6:f7:3a:7b:ac:6c:02:0f:
         09:5d:53:cc:f6:d5:ba:1c:e2:53:4f:cc:8f:3c:13:b6:fa:67:
         a1:07:35:17:6b:1a:f0:31:37:3a:2d:82:14:e0:43:ad:3e:24:
         80:2b:0d:f9:99:f8:24:e5:ce:95:3a:a3:cc:23:17:2f:62:82:
         55:f3:a6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:54:12 2025 by rpki-client