Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa
File:                     c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa (raw, json)
Hash identifier:          Jqu9Cad6kUdMAzp89P9Q2Jluy+5VvNRCFRirHdtsQAg=
Subject key identifier:   19:AF:34:15:E9:DF:51:94:7E:80:97:F8:FF:B8:A3:D7:F9:F5:58:5B
Certificate issuer:       /CN=3767dced-4e89-4965-b8de-50e421201b4d
Certificate serial:       010D0C9F4328584B477C6D407016E76C24D50300
Authority key identifier: 49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     11602
IP address blocks:        151.159.0.0/17 maxlen: 24
                          151.159.128.0/18 maxlen: 24
                          151.159.192.0/20 maxlen: 24
                          151.159.208.0/21 maxlen: 24
                          151.159.216.0/22 maxlen: 24
                          151.159.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:6d:40:70:16:e7:6c:24:d5:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3767dced-4e89-4965-b8de-50e421201b4d
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=7a8dce26-4652-4b8e-ad99-bbbc30c604f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d4:85:e0:a1:a8:f0:60:00:d7:35:ad:a2:e7:
                    d2:32:b8:f3:44:0a:35:82:67:18:eb:da:0c:af:56:
                    ae:76:b4:52:7b:dc:9f:60:65:61:fb:3e:54:6f:78:
                    79:0f:bb:6f:3c:8a:98:6d:3a:5a:22:32:35:dc:65:
                    4f:c5:e6:f9:cf:5f:db:02:f6:5c:7d:95:15:79:78:
                    4d:f8:73:05:32:e3:a1:91:67:a1:88:5b:45:58:71:
                    3a:2a:60:b8:bb:8e:44:9b:df:11:ef:72:ff:8c:74:
                    17:d0:45:f3:d6:5d:55:e6:a1:7c:de:b1:44:68:d7:
                    b9:f3:65:b7:b7:65:03:42:24:78:c9:a2:1b:42:57:
                    82:75:1c:85:7d:b0:2e:bb:46:9e:fe:0c:97:be:db:
                    f1:9e:ce:28:5b:92:eb:c4:ca:b3:da:ad:7d:21:75:
                    dd:59:1d:80:ef:f3:70:7c:7c:24:2b:56:36:05:d9:
                    32:9b:3b:08:88:05:e0:01:50:64:92:1a:c8:44:b1:
                    d3:5e:df:cd:9a:74:7b:78:dc:99:6c:35:d7:9e:7d:
                    64:a4:86:f6:79:40:ce:55:1a:49:dc:57:29:21:d9:
                    a1:33:eb:d6:ea:db:c0:eb:af:69:aa:02:69:17:92:
                    db:d1:78:e1:cd:ff:00:91:d4:9a:a9:90:26:ed:c3:
                    c1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:AF:34:15:E9:DF:51:94:7E:80:97:F8:FF:B8:A3:D7:F9:F5:58:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/c4f0e537-cfdd-3437-b5ad-f613a259b23b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d/3767dced-4e89-4965-b8de-50e421201b4d.crl

            X509v3 Authority Key Identifier:
                keyid:49:2A:5A:7A:A5:AC:FD:22:58:F5:E4:46:90:9D:05:72:ED:A6:80:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3767dced-4e89-4965-b8de-50e421201b4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.159.0.0-151.159.219.255
                  151.159.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:42:f2:21:29:d4:22:ec:e1:fa:f4:e1:15:58:00:cf:7a:b1:
         41:83:cc:c3:52:71:cc:dc:80:b6:c2:5a:2b:a4:ab:74:75:95:
         e8:1a:a2:42:4d:fa:b5:8d:63:6e:f4:c1:65:ad:4a:e1:9b:7f:
         f4:59:74:ff:b5:be:87:60:21:2a:a1:aa:7e:5e:6b:98:cc:03:
         43:26:1e:da:fa:72:91:8f:f0:1c:93:2b:4a:5b:8f:4c:ac:d3:
         1b:72:9a:df:2a:7d:6c:f9:e8:de:48:2e:95:65:e4:b1:0e:2e:
         24:f5:a1:a7:13:ab:1e:1f:34:db:34:c9:57:78:bd:b8:32:36:
         52:e6:bb:b3:0a:c4:81:2f:ac:76:aa:67:17:64:32:de:2f:9a:
         68:34:74:fe:f3:61:1c:5e:27:bc:a4:18:bc:45:6a:53:87:98:
         c3:5e:47:dc:09:e9:16:61:b6:19:2f:b1:3f:d4:30:41:06:e6:
         f6:a1:db:bc:8a:9d:17:6d:c7:a4:72:dc:11:ad:79:51:41:75:
         7d:1a:23:0e:3d:d0:ac:4d:b2:91:99:3d:ac:ff:b2:5e:53:c9:
         b3:12:4d:6c:e5:c3:e3:78:cb:a9:62:7e:dd:86:09:05:88:8b:
         c6:90:6e:63:e3:bc:58:dc:24:01:98:b4:b0:6e:58:12:2f:45:
         29:c7:28:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:15:34 2025 by rpki-client