Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/813bce22-9dd7-3250-8981-49e0d8bbfd64.roa
File:                     813bce22-9dd7-3250-8981-49e0d8bbfd64.roa (raw, json)
Hash identifier:          q3vy+j9QlHOsqginBwIQhMBW3tddM4QkzQRPc3lHF3c=
Subject key identifier:   56:B1:11:C9:E3:9E:9A:90:DD:C2:61:34:8A:87:C3:5C:B7:3E:BB:4E
Certificate issuer:       /CN=c758b2d7-db90-4e16-a55c-1de629f2ca08
Certificate serial:       010D0C9F4328584B875B30ED3BBCF142EC3941C0
Authority key identifier: 0E:60:B3:4A:27:C3:E4:35:76:28:CA:10:56:21:90:DA:25:CD:65:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/813bce22-9dd7-3250-8981-49e0d8bbfd64.roa
Signing time:             Wed 15 Oct 2025 10:05:34 +0000
ROA not before:           Wed 15 Oct 2025 10:05:34 +0000
ROA not after:            Tue 13 Jan 2026 11:05:34 +0000
asID:                     203963
IP address blocks:        141.195.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:5b:30:ed:3b:bc:f1:42:ec:39:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c758b2d7-db90-4e16-a55c-1de629f2ca08
        Validity
            Not Before: Oct 15 10:05:34 2025 GMT
            Not After : Jan 13 11:05:34 2026 GMT
        Subject: CN=f1ed3da1-55aa-44b3-ba17-97366bccae90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1d:2d:c4:35:ac:b6:c4:09:5d:e6:19:a8:0a:
                    95:4a:28:58:c8:0e:47:90:a7:d1:0f:1d:8a:0b:05:
                    f1:b6:0b:eb:16:9d:1f:23:b5:80:83:c9:8d:2d:cb:
                    d0:3f:6b:54:ae:48:2e:5c:81:d3:9a:4d:63:fb:cc:
                    94:12:36:27:6f:7c:1c:07:11:44:17:0f:c3:41:6e:
                    2c:df:c2:64:cd:77:f3:c3:3f:1b:73:c2:6f:8f:4f:
                    a2:22:c2:8d:42:82:3e:36:f8:19:dd:7d:33:be:52:
                    b5:87:55:99:3c:26:a6:19:ca:5e:d8:d1:4c:57:d9:
                    9b:63:88:9d:a8:29:2d:00:39:4e:49:67:8a:f7:38:
                    ea:4f:60:18:47:8f:1a:2d:37:72:9e:81:35:c8:9e:
                    1b:99:db:c0:25:a7:e6:bd:66:02:e6:40:6a:99:ec:
                    76:f5:0c:2f:15:47:4a:6a:64:73:d5:da:ed:d1:34:
                    aa:7b:14:40:69:0b:1e:5c:2a:d6:06:cb:9a:2b:b6:
                    58:5c:eb:2b:b6:61:d2:a8:ed:ea:3b:59:30:9a:02:
                    d6:69:61:1a:c1:e8:2a:46:8c:85:56:d2:0f:70:5b:
                    6c:67:78:f3:26:56:51:5c:95:47:a0:9d:59:79:19:
                    a4:41:56:3f:7e:66:8d:dd:c9:dc:08:e1:27:e1:14:
                    df:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B1:11:C9:E3:9E:9A:90:DD:C2:61:34:8A:87:C3:5C:B7:3E:BB:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/813bce22-9dd7-3250-8981-49e0d8bbfd64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08/c758b2d7-db90-4e16-a55c-1de629f2ca08.crl

            X509v3 Authority Key Identifier:
                keyid:0E:60:B3:4A:27:C3:E4:35:76:28:CA:10:56:21:90:DA:25:CD:65:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c758b2d7-db90-4e16-a55c-1de629f2ca08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:21:8c:00:61:f8:f7:db:c0:02:92:f4:03:63:a0:5e:c9:74:
         64:90:3b:f9:bc:8c:7a:b6:11:aa:dd:2a:84:a3:4f:63:2b:8c:
         16:a1:b0:a1:74:b7:83:f9:47:2d:6e:c6:a5:33:65:1f:19:a0:
         8c:4e:a3:90:49:91:9a:be:36:09:15:82:32:bb:92:3d:29:2c:
         fa:97:79:ae:e5:83:6d:98:52:4b:6d:e8:88:02:82:6b:7e:f5:
         66:fb:1a:eb:71:bc:2e:69:97:21:1f:bb:b7:73:39:59:0a:b5:
         1d:65:29:f5:c9:26:f2:19:7a:51:04:0a:63:6c:f1:64:a7:de:
         dd:91:04:89:ab:8b:77:2a:91:47:fc:a6:9f:90:53:1b:6d:06:
         1a:79:07:4b:a1:53:cf:be:b2:bd:a3:b4:4d:a9:50:9b:8a:db:
         6e:30:90:0f:3d:c7:7b:9f:e9:5f:b1:b3:1c:cc:2c:2c:56:8a:
         d0:5c:95:1f:da:5f:b7:8d:6f:53:88:c0:b4:f3:f7:05:7a:2e:
         c8:45:77:cf:66:5d:4a:25:6a:c3:16:51:6d:3b:38:d9:bb:24:
         bd:63:52:24:4f:0e:97:90:a1:4a:1a:c0:d1:48:ea:7b:18:87:
         fa:3c:6f:4e:95:d4:a3:32:c2:39:54:bd:e2:02:f9:fe:f4:b8:
         c9:18:35:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:32:45 2025 by rpki-client