Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e9a2c883-433a-3010-903a-e1899d8a61d5.roa
File:                     e9a2c883-433a-3010-903a-e1899d8a61d5.roa (raw, json)
Hash identifier:          Lvu1lqq4JPQ/fAVAMpJ95Z8oOc6Sb1daRwKkZKpjysw=
Subject key identifier:   92:F7:E1:B5:92:8B:C8:36:99:1A:2D:47:C8:61:F0:2E:3A:25:72:20
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584B715CB732CD5AD07D4F2E9280
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e9a2c883-433a-3010-903a-e1899d8a61d5.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     48737
IP address blocks:        138.113.254.0/24 maxlen: 24
                          138.113.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:b7:32:cd:5a:d0:7d:4f:2e:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=0cd1713b-52a9-48d8-9fe2-7bd819b24c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1d:db:96:be:bd:ca:dc:79:9c:02:4f:2f:50:
                    38:05:9b:e6:2a:95:79:80:1a:f0:a1:d4:62:26:b6:
                    23:2d:21:83:02:17:be:eb:54:b2:23:8e:7c:5e:20:
                    d8:ee:a6:e7:53:b1:d0:9f:10:1f:32:d0:b6:62:6e:
                    bc:1a:6a:4d:6f:d7:bb:1a:71:eb:fd:ad:99:89:ec:
                    aa:91:73:f7:44:2e:94:4f:41:c7:76:9a:e8:6e:ed:
                    bd:36:2a:ee:82:da:ea:ae:f7:47:bb:f1:17:c9:48:
                    dd:57:1d:ce:45:96:dc:62:ee:f0:c9:7b:4f:d0:95:
                    ff:0a:a8:43:fe:6b:a0:e9:50:19:8c:d3:8c:d2:ab:
                    c2:b6:c8:b1:47:dc:f0:6e:7d:d4:41:9c:bb:90:e8:
                    d6:c4:12:89:6b:a9:6d:f5:8c:b3:b5:ae:57:0e:87:
                    fb:47:b8:43:4e:39:3f:bd:9c:7d:f6:75:f1:be:ce:
                    f4:12:61:57:8e:a5:55:0e:be:db:65:39:76:ad:5c:
                    d7:f5:8f:3b:42:b0:32:f0:21:a6:40:f5:18:04:97:
                    05:2a:47:4c:a8:04:df:ec:5e:95:d7:39:44:ad:14:
                    6b:4e:db:98:d2:58:1d:55:39:47:87:52:bb:23:82:
                    2c:05:37:c8:9a:36:2f:70:ab:82:f7:9b:17:ca:60:
                    5c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F7:E1:B5:92:8B:C8:36:99:1A:2D:47:C8:61:F0:2E:3A:25:72:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/e9a2c883-433a-3010-903a-e1899d8a61d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.113.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:70:e0:b0:f3:a3:0a:d0:08:39:b7:f5:05:ba:15:52:b7:cd:
         e8:bd:8d:31:74:34:ab:68:c7:57:54:4a:2c:d0:e0:26:19:e1:
         1f:f0:6c:0a:96:b8:9a:87:5d:da:a0:24:70:fc:91:0d:da:0d:
         69:5c:07:8e:40:18:76:62:ce:29:b7:c8:ad:63:c3:ab:79:2e:
         8b:cd:38:03:0b:4b:33:ac:89:64:a1:ab:26:86:c0:4f:48:d5:
         66:db:c4:ef:d1:9d:96:a0:fb:df:3f:dc:54:a5:46:6a:97:51:
         25:cf:93:1d:3d:3c:af:0b:53:66:db:79:4f:82:2e:d3:b0:d3:
         da:f1:a0:46:b5:84:b1:ef:4d:4b:57:28:e2:24:9a:11:8b:76:
         2d:21:ab:b4:26:e6:c9:ed:88:88:f6:d8:ef:fd:b6:0d:a5:b9:
         07:a3:78:3d:72:52:d8:a3:68:09:cb:f8:23:ca:09:ca:58:d0:
         2e:8a:a6:c5:ed:54:6c:05:ba:40:dc:4e:ad:ba:43:a9:53:34:
         73:ba:55:24:f0:49:cd:d5:da:8a:04:80:2a:a3:c5:2e:a5:d1:
         65:8f:23:50:e7:a0:1b:cb:0c:d6:c6:cf:79:31:ff:b8:ca:e4:
         5d:90:9a:db:8a:05:a3:0c:eb:e3:27:21:09:ec:7b:b2:d2:b5:
         61:4a:fb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:57:25 2025 by rpki-client