Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f5643093-be3f-3931-b854-e93e480f3970.roa
File:                     f5643093-be3f-3931-b854-e93e480f3970.roa (raw, json)
Hash identifier:          CCBYWw/qq1tMLsnDk11E0H8Iu01mxg3s1nAszAHJhKA=
Subject key identifier:   0B:A5:1B:C6:06:36:F9:74:B2:0F:CD:80:6D:7A:74:13:D0:A5:8B:7F
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584B6A61DF660BACA6CE6CB3FC80
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f5643093-be3f-3931-b854-e93e480f3970.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     54994
IP address blocks:        138.113.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:df:66:0b:ac:a6:ce:6c:b3:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=9727c924-f043-440f-b86c-d330a58d747b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ac:c1:63:a3:80:1e:ac:ec:98:01:0f:39:67:
                    1c:00:31:41:f6:ac:19:99:51:7a:c7:9c:f0:9b:c9:
                    63:2c:cb:d6:59:6e:02:3c:3c:b6:88:bf:3f:72:d7:
                    3d:d2:d9:ac:67:4f:61:2b:bd:67:c9:3a:37:36:50:
                    94:2c:98:9c:7e:90:d4:ff:8c:43:21:42:d0:07:1a:
                    0d:32:63:6c:91:ac:26:77:bd:ec:c4:76:d1:b9:67:
                    f8:06:21:58:b6:4d:de:cb:f6:a6:b9:d4:df:93:37:
                    6f:66:38:12:42:62:21:b9:52:63:d1:e9:b7:3d:64:
                    32:7f:16:ed:24:2d:f6:b5:86:3b:4c:79:a9:93:86:
                    75:64:f4:ce:66:a1:29:f7:c5:5a:38:9c:90:0a:48:
                    f1:c2:e9:83:68:0f:b8:89:29:71:ff:f1:b4:37:d8:
                    17:af:7b:0e:d9:c5:c0:c6:06:de:be:30:a8:87:fb:
                    fc:1b:f3:0a:21:79:40:ef:95:4a:a9:61:e6:b0:7a:
                    a4:09:ac:64:e1:c7:d3:13:cf:55:c5:6a:b6:ca:94:
                    ae:b9:31:0c:e2:36:00:dd:08:d4:b0:57:77:73:7b:
                    f1:f7:76:1d:23:f4:d1:fd:97:73:cb:c4:6a:3b:a1:
                    45:b0:69:99:66:05:0a:31:0c:04:72:4c:df:e9:fc:
                    a7:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A5:1B:C6:06:36:F9:74:B2:0F:CD:80:6D:7A:74:13:D0:A5:8B:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/f5643093-be3f-3931-b854-e93e480f3970.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.113.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:24:4c:6a:59:59:e5:05:5e:5c:bb:60:b9:31:9b:30:79:fb:
         f6:02:54:57:70:5f:d5:4b:9e:fb:81:cf:3e:9b:f5:e5:4e:c0:
         41:0b:57:30:6f:4c:99:ba:b0:02:2c:7e:fe:f7:5c:36:47:a9:
         47:22:d6:e1:ac:46:ac:1e:d5:0a:e6:a7:5f:13:c8:5b:ba:22:
         46:b1:2e:bf:c1:97:af:a3:76:9b:af:53:a6:01:98:49:45:db:
         6a:21:df:e0:21:6a:dd:36:18:22:9a:21:93:f6:6d:93:22:76:
         98:bc:d7:97:91:cb:6f:9a:ef:df:a1:00:62:a3:b1:cd:65:f2:
         63:06:95:e5:99:97:b3:6b:63:a7:90:76:43:7c:3e:fe:fe:a0:
         1e:c8:8f:00:aa:6b:e3:06:c1:9c:b5:5c:07:9f:cc:10:ad:54:
         36:36:27:09:53:8e:a1:94:6c:ff:a1:b2:f2:a8:ff:65:a3:2c:
         d5:0a:68:f1:83:50:d0:7f:ef:d7:61:d2:61:fe:34:91:cf:5d:
         ab:16:0f:c7:ed:01:03:27:16:6f:0b:04:79:7c:86:26:44:b5:
         69:88:23:d8:8c:8d:c4:8b:ed:3e:0a:6c:e5:13:d3:ab:4d:78:
         c0:3e:3f:7f:75:20:15:d5:d6:95:97:42:78:83:a2:39:1b:d8:
         09:dd:07:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:32:03 2025 by rpki-client