Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3836105c-1ccf-3277-909b-3220537c6f32.roa
File:                     3836105c-1ccf-3277-909b-3220537c6f32.roa (raw, json)
Hash identifier:          QhVbjf7Q+Ob5pHzPdwjCUlmgEg5H+O22mFO9IEYMbFk=
Subject key identifier:   2C:9C:F6:5B:5D:62:34:C1:B0:C6:87:0A:1A:B5:30:2D:7B:BA:3A:66
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584B7427520E5CE063754B4624C0
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3836105c-1ccf-3277-909b-3220537c6f32.roa
Signing time:             Wed 08 Oct 2025 13:00:37 +0000
ROA not before:           Wed 08 Oct 2025 13:00:37 +0000
ROA not after:            Tue 06 Jan 2026 14:00:37 +0000
asID:                     54994
IP address blocks:        157.185.143.0/24 maxlen: 24
                          157.185.146.0/24 maxlen: 24
                          157.185.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:74:27:52:0e:5c:e0:63:75:4b:46:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Oct  8 13:00:37 2025 GMT
            Not After : Jan  6 14:00:37 2026 GMT
        Subject: CN=c2d67ce4-3546-4f02-8fc1-10b3a41fae09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:c6:6e:3b:c2:aa:43:48:72:05:03:cc:1a:
                    0c:f1:fd:4a:45:4c:91:e3:0c:8d:c3:22:36:a1:ed:
                    b2:89:bf:4f:68:f2:83:99:d1:5f:e8:a3:08:bd:cd:
                    32:6b:cc:9a:ab:c5:67:86:f7:30:86:31:75:f9:fa:
                    54:e1:69:bd:be:3c:e2:4a:e0:cc:24:62:ef:49:81:
                    90:1f:5a:c7:16:80:dc:57:98:ab:30:31:35:de:25:
                    e9:43:e5:0e:d2:53:5a:0d:c9:81:24:15:03:96:ec:
                    df:bb:38:86:6c:97:59:2e:9b:c2:90:29:66:b0:b4:
                    e1:f4:0e:9f:e6:87:52:c7:8a:59:2d:ec:17:d9:b2:
                    1c:e3:f3:39:47:a9:d3:41:12:50:3c:1b:5a:c6:9b:
                    3b:dd:f8:3a:e6:47:f8:33:8f:6d:33:ba:f0:79:f7:
                    68:9e:73:5f:6e:6d:fc:76:47:5c:15:e5:c5:c9:24:
                    ed:23:37:2d:95:eb:19:0e:16:49:75:e2:db:c9:34:
                    11:e5:84:c1:ed:82:09:f2:0d:6c:d2:e2:16:50:0b:
                    86:03:0b:bb:9b:3b:bb:d4:15:08:c6:c2:cc:ae:c4:
                    40:bb:a7:07:42:88:e6:66:d0:c3:1b:8d:77:2d:6c:
                    a9:f6:a8:74:f0:d1:fe:5e:d6:d1:65:54:f0:17:f7:
                    9e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9C:F6:5B:5D:62:34:C1:B0:C6:87:0A:1A:B5:30:2D:7B:BA:3A:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/3836105c-1ccf-3277-909b-3220537c6f32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.185.143.0/24
                  157.185.146.0/24
                  157.185.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:ef:6d:67:f3:9e:c9:f6:5e:88:d3:41:67:f9:c6:aa:9e:3b:
         97:8b:3e:f4:cb:9f:45:af:1f:8d:08:62:20:8f:2e:0a:84:83:
         df:aa:e7:84:3a:e1:46:55:31:aa:d9:6f:9d:3b:b1:27:e8:0b:
         b4:17:10:9e:eb:5b:1a:d5:ac:ac:fb:f9:08:d8:9d:3e:cb:fe:
         a8:bd:c4:a8:f0:e1:80:67:c3:16:fb:0f:ef:5f:d6:70:8f:a9:
         08:79:2c:8a:c2:f8:cf:8e:99:eb:33:99:87:0a:82:7d:9c:c0:
         d7:8a:36:dc:74:24:37:6e:8d:7e:57:6a:05:a1:c5:c2:95:96:
         39:11:00:1e:21:8a:2e:22:e2:f6:22:db:16:8e:85:68:6e:35:
         a7:e6:71:9d:c7:0a:cd:01:7f:12:76:95:98:d6:a3:08:fa:c3:
         b4:b0:32:c8:74:1f:20:ac:79:8d:3b:6d:de:ce:92:77:f8:29:
         f5:e2:73:6c:8b:b4:a3:3a:a8:5f:e2:3d:98:b0:53:27:0f:e7:
         d6:39:09:b1:cc:8a:77:38:45:89:aa:ec:a1:9e:ad:ae:62:34:
         34:1f:a3:f7:6a:4f:a0:b3:87:b3:00:31:19:76:01:3a:63:76:
         f1:41:0f:c2:77:37:b2:e4:a3:07:a9:48:ee:4d:d3:a7:a8:e2:
         c4:66:55:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:54:52 2025 by rpki-client