Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/4aa5123c-6460-370b-961f-4cb42fed2c48.roa
File:                     4aa5123c-6460-370b-961f-4cb42fed2c48.roa (raw, json)
Hash identifier:          GI6WjWtDIgkJbIcPJKGDBvU23aMqnotQEC0xIvqs0oM=
Subject key identifier:   65:EC:CB:67:D8:EF:03:4E:A9:5D:4C:9D:72:0B:96:A9:0C:85:39:F2
Certificate issuer:       /CN=07516521-ca1d-4a06-bb11-289a5545b790
Certificate serial:       010D0C9F4328584B8917754782A45511D2BF5C80
Authority key identifier: 11:D6:05:C3:5D:E0:5F:3A:30:EB:26:2C:A7:6A:62:75:4E:4C:CD:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/4aa5123c-6460-370b-961f-4cb42fed2c48.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     15040
IP address blocks:        206.183.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/07516521-ca1d-4a06-bb11-289a5545b790.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/07516521-ca1d-4a06-bb11-289a5545b790.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:75:47:82:a4:55:11:d2:bf:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07516521-ca1d-4a06-bb11-289a5545b790
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=0d38145a-d96b-4bcf-a864-b1066c17b64d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0b:76:da:bd:5f:ae:27:6b:00:29:da:e8:41:
                    fc:60:45:f4:58:58:26:14:6b:81:d3:5e:70:39:23:
                    ac:02:27:93:40:f2:cc:70:82:47:3e:b3:56:45:83:
                    ef:2d:63:f2:90:7e:69:d9:31:df:c0:57:9b:fb:68:
                    d5:49:a6:f4:37:b3:79:bf:17:1b:1a:da:50:06:1e:
                    07:bc:4d:4d:05:51:45:56:32:d0:c5:c1:d7:4c:bf:
                    13:6f:43:e0:4d:f7:b6:9d:d0:bd:2f:13:1b:85:fd:
                    6b:82:a2:8c:0c:74:1f:1c:55:63:40:25:85:68:88:
                    ed:87:f7:45:78:f3:40:92:a8:6a:dd:bd:e9:21:6d:
                    61:55:88:53:66:89:dd:e4:96:ea:a5:91:81:fb:cf:
                    e9:a3:80:a4:df:c2:85:fa:1e:ce:16:db:bb:50:17:
                    59:ab:37:85:fc:37:dc:39:25:88:9d:10:95:e2:24:
                    54:db:4f:fc:3c:1b:03:87:39:91:99:eb:0a:70:67:
                    3f:c8:5c:46:89:2a:73:7b:dc:90:73:61:6b:5d:a1:
                    a7:4e:0f:21:97:45:d9:b1:f6:1e:50:f4:ac:9e:5f:
                    17:16:a6:ac:f5:c5:9d:23:10:3a:8b:2c:19:d8:06:
                    aa:01:70:4d:42:d3:ea:22:f5:55:9b:0d:43:30:0e:
                    8f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EC:CB:67:D8:EF:03:4E:A9:5D:4C:9D:72:0B:96:A9:0C:85:39:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/4aa5123c-6460-370b-961f-4cb42fed2c48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790/07516521-ca1d-4a06-bb11-289a5545b790.crl

            X509v3 Authority Key Identifier:
                keyid:11:D6:05:C3:5D:E0:5F:3A:30:EB:26:2C:A7:6A:62:75:4E:4C:CD:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/07516521-ca1d-4a06-bb11-289a5545b790.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.183.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:3d:3c:1b:d7:d3:fd:4d:3f:84:2b:25:c0:27:31:91:c2:72:
         b0:f3:39:a4:d6:5a:ac:40:e2:8e:d9:c0:89:f5:dc:83:d6:05:
         e9:18:fc:f6:97:92:0b:ad:b1:1a:60:dc:7c:0a:fe:79:60:86:
         2a:b8:53:9f:d5:27:0b:15:45:c5:1e:42:3d:3e:16:25:9c:6e:
         85:52:f5:9e:5b:6e:a5:f7:1a:68:6b:91:d3:65:01:69:ed:ff:
         22:95:8d:e0:82:e4:c0:21:a4:d6:f6:dd:76:d9:6b:a7:39:4b:
         66:ab:d5:1d:d8:83:e2:a8:5d:53:a9:32:48:e0:26:5c:a6:3c:
         d0:d1:77:80:7b:32:54:a9:cc:8c:c7:4e:b7:87:3d:58:9a:9d:
         d6:fa:7b:30:e0:7b:81:01:f6:cd:6a:e8:9c:eb:c7:54:4b:d2:
         26:bd:82:aa:a0:28:45:34:fe:43:0c:22:b6:4d:2a:b8:43:fc:
         89:cb:c8:ff:48:9b:d2:27:bf:a5:a5:aa:ff:2a:fc:cf:da:08:
         cd:ab:d3:32:43:ea:dc:67:53:0b:92:98:b6:2e:8a:30:fc:c8:
         7a:9e:e5:5b:80:ec:8c:ea:12:4e:e2:dd:79:a8:01:49:4c:66:
         3c:5e:bb:f9:64:c6:f3:50:06:ad:3c:17:20:b3:de:c6:c5:9c:
         3c:07:56:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:55:19 2025 by rpki-client