Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/4689b037-43ab-3a42-8b75-c96618aaeb54.roa
File:                     4689b037-43ab-3a42-8b75-c96618aaeb54.roa (raw, json)
Hash identifier:          1DrTx49ee5q0m5yR4jzA/AJ8TyrWg+6iXrFqADWcd58=
Subject key identifier:   3F:ED:AB:68:2D:13:58:F1:91:2F:ED:D8:D2:75:D4:61:5B:42:16:86
Certificate issuer:       /CN=c758b2d7-db90-4e16-a55c-1de629f2ca08
Certificate serial:       010D0C9F4328584B717C8232C1A65536A04B2F00
Authority key identifier: 0E:60:B3:4A:27:C3:E4:35:76:28:CA:10:56:21:90:DA:25:CD:65:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/4689b037-43ab-3a42-8b75-c96618aaeb54.roa
Signing time:             Tue 07 Oct 2025 14:04:55 +0000
ROA not before:           Tue 07 Oct 2025 14:04:55 +0000
ROA not after:            Mon 05 Jan 2026 15:04:55 +0000
asID:                     205220
IP address blocks:        141.195.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:7c:82:32:c1:a6:55:36:a0:4b:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c758b2d7-db90-4e16-a55c-1de629f2ca08
        Validity
            Not Before: Oct  7 14:04:55 2025 GMT
            Not After : Jan  5 15:04:55 2026 GMT
        Subject: CN=91ad56fc-bb83-4b0e-b2b1-023ab5816536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a1:77:f7:f7:5f:92:6a:d4:c6:02:70:cc:a1:
                    05:e6:9e:e5:6e:57:b1:e6:99:c2:73:a3:2b:c4:94:
                    29:02:9c:95:b4:33:1d:fc:f8:bb:15:45:71:d2:6c:
                    c8:ba:2c:3e:06:87:7a:82:d7:d2:27:65:df:e6:e5:
                    82:87:1a:fb:02:e7:04:1b:1a:9c:3c:48:17:fe:46:
                    b0:93:79:54:bd:93:5a:b2:96:de:85:a3:71:a6:35:
                    31:1e:44:24:39:14:69:a1:48:d1:46:87:36:2d:28:
                    f2:db:60:04:6b:2a:f2:62:87:72:1b:fb:e9:7a:42:
                    90:da:84:ca:6e:f0:a0:d2:1b:af:82:fb:ad:6d:40:
                    9f:97:fc:04:d0:63:8a:df:a4:3e:59:f7:44:f5:9f:
                    28:c2:b0:11:e2:f0:db:da:6e:62:89:5e:57:18:dc:
                    ad:09:ab:31:16:45:81:82:26:a6:8d:ec:a3:42:eb:
                    19:40:0a:1a:fc:da:fd:ef:53:b4:e5:53:a4:c6:9d:
                    13:71:07:c3:cc:1b:35:a5:e6:cf:5c:ba:5a:34:52:
                    93:9a:11:a8:bf:50:4a:b5:e4:1b:11:eb:73:30:01:
                    60:9c:8a:9c:10:c9:3b:ec:3f:bc:a0:93:13:2d:63:
                    2e:69:18:f5:5e:7a:f4:2a:ef:c9:22:9a:db:00:09:
                    5c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:ED:AB:68:2D:13:58:F1:91:2F:ED:D8:D2:75:D4:61:5B:42:16:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/4689b037-43ab-3a42-8b75-c96618aaeb54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.crl

            X509v3 Authority Key Identifier:
                keyid:0E:60:B3:4A:27:C3:E4:35:76:28:CA:10:56:21:90:DA:25:CD:65:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:46:b0:f8:f7:f2:d2:5f:5f:a3:dc:a2:ed:90:7d:01:c3:fe:
         17:83:bc:4b:06:4f:4f:fe:18:06:84:d7:eb:4d:1d:e5:1e:58:
         97:71:4a:56:45:48:ea:de:8f:78:b0:41:b7:7e:f5:3c:fa:e5:
         aa:b6:6f:e7:a7:ae:f7:09:75:25:95:a5:35:6b:56:cc:e6:f9:
         7b:36:92:2b:ba:bd:3f:ab:14:a8:94:3a:54:62:bb:d3:c9:86:
         15:85:48:ee:3d:bd:44:28:50:e6:73:e1:be:e4:ae:2b:06:ca:
         22:94:da:dc:31:36:34:bf:88:5b:f7:42:49:79:06:94:6b:1c:
         d5:c7:0b:01:c0:4d:60:7f:a3:d3:45:f9:6d:56:ca:93:51:24:
         2f:9f:74:62:57:d7:dc:c7:90:54:04:8a:36:d3:1a:a2:83:91:
         14:73:36:6b:e6:cc:af:3c:70:b1:49:e9:aa:40:0d:8a:6b:18:
         7b:cf:f3:b7:43:ab:64:61:13:2b:b2:e4:8e:56:f4:6b:ad:cb:
         cd:80:fc:e3:ff:37:8c:b7:61:5f:83:e0:38:86:a9:28:4e:0a:
         05:4e:fe:09:e0:67:fd:d6:9d:19:0a:18:52:bb:94:f9:48:2c:
         b7:b6:29:52:0b:14:fa:e4:36:63:e6:b1:c8:2e:8b:48:dc:13:
         bb:d6:cd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:52:21 2025 by rpki-client