Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/d2e04c79-df6b-3606-8995-a89e4629fc1c.roa
File:                     d2e04c79-df6b-3606-8995-a89e4629fc1c.roa (raw, json)
Hash identifier:          Blqh30yLpNm07VYv8U8aKz0zAp9ERUNYpyt3gHH3hWs=
Subject key identifier:   EF:74:22:D7:6D:7C:12:74:92:98:38:BC:38:FC:5B:AF:C3:92:D5:EA
Certificate issuer:       /CN=813aad25-25fa-4b5c-bb84-15fabea23f87
Certificate serial:       010D0C9F4328584B748F4A1C24DF02C06B93CF00
Authority key identifier: 5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/d2e04c79-df6b-3606-8995-a89e4629fc1c.roa
Signing time:             Wed 08 Oct 2025 16:30:11 +0000
ROA not before:           Wed 08 Oct 2025 16:30:11 +0000
ROA not after:            Tue 06 Jan 2026 17:30:11 +0000
asID:                     397032
IP address blocks:        198.135.185.0/24 maxlen: 24
                          2602:2d1::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:74:8f:4a:1c:24:df:02:c0:6b:93:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813aad25-25fa-4b5c-bb84-15fabea23f87
        Validity
            Not Before: Oct  8 16:30:11 2025 GMT
            Not After : Jan  6 17:30:11 2026 GMT
        Subject: CN=dbe75d59-8203-4488-bdbe-28f98e494f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ed:2b:36:b6:bc:fd:b1:ad:d4:fb:12:b2:fc:
                    13:f5:f9:f3:18:78:95:1e:d0:34:ca:99:93:9a:1f:
                    0c:aa:97:11:86:07:7a:cd:56:4e:34:7a:7b:25:93:
                    2c:80:e8:0c:c5:cd:ff:da:74:f0:4c:fc:aa:cf:97:
                    fa:92:c7:9d:f6:78:58:a1:14:71:18:93:9e:a6:da:
                    53:2b:10:56:67:55:cf:9f:dc:0b:59:ff:d9:5a:f4:
                    16:05:c3:b6:b0:88:54:8b:a8:45:27:44:22:da:51:
                    42:b2:38:a7:cb:dc:43:12:fe:91:9e:75:7e:84:ed:
                    0d:c8:e6:07:ef:23:29:16:09:05:2a:5a:58:e8:49:
                    58:0a:43:ce:a8:6f:a1:0e:51:58:79:d7:34:a7:ba:
                    3c:fa:98:07:e4:43:6c:d2:e9:fc:d2:6e:dd:c3:8f:
                    9c:09:b2:bd:86:3b:1c:3b:0a:07:47:3e:61:e0:de:
                    13:2e:09:86:d8:47:2e:7d:71:51:4f:63:8f:06:97:
                    c2:0f:5e:48:68:74:47:d8:f2:cf:c5:5f:60:6c:f7:
                    1c:0d:29:eb:82:f7:ad:5d:8b:a4:60:69:7b:ce:8a:
                    d1:0d:70:b6:e3:4b:5f:f4:25:06:d5:b4:cf:e0:ba:
                    45:89:00:f6:58:8d:0c:72:44:1b:79:5f:95:9d:24:
                    e5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:74:22:D7:6D:7C:12:74:92:98:38:BC:38:FC:5B:AF:C3:92:D5:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/d2e04c79-df6b-3606-8995-a89e4629fc1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87/813aad25-25fa-4b5c-bb84-15fabea23f87.crl

            X509v3 Authority Key Identifier:
                keyid:5E:97:21:19:44:A8:9C:ED:47:8B:39:3B:EB:C7:36:9C:33:01:CB:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/813aad25-25fa-4b5c-bb84-15fabea23f87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.135.185.0/24
                IPv6:
                  2602:2d1::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:2c:08:b4:93:d9:64:56:53:d7:b9:99:1d:1b:1e:14:ec:5d:
         93:ea:07:4d:ba:2e:9f:89:bd:c6:a6:e5:49:2e:79:e9:77:66:
         42:37:a1:c5:7f:5e:74:44:cd:13:09:b1:e3:e9:b9:6f:60:31:
         55:37:39:06:8c:6c:50:c1:c0:ef:23:5f:e9:a9:4b:d4:ee:fa:
         67:81:34:57:3b:d3:20:76:58:e4:71:a1:02:7e:cd:ab:ee:42:
         14:16:02:22:19:55:44:b7:e2:52:47:23:43:72:80:38:c1:2a:
         7c:33:cf:f2:62:8d:e7:79:73:d5:28:47:31:05:70:65:bd:b2:
         98:a1:4a:dd:25:86:df:bb:21:d2:f0:c0:0c:91:1a:3f:8a:42:
         bf:05:c3:a3:c4:d0:e9:17:a5:2c:b8:6d:77:49:a0:b3:29:bc:
         f4:ab:16:6e:df:b4:c9:16:32:cc:16:a7:95:b6:0e:79:32:b8:
         6d:f6:22:2d:bf:41:a4:c0:31:0e:0a:c2:91:f3:f3:65:0a:b6:
         ce:e6:ce:d4:9b:6f:65:e0:8e:4b:7e:a5:1e:e5:fb:3f:6f:75:
         d0:d3:4d:6f:1f:97:1d:c5:e6:bc:50:62:7d:9e:45:c5:d1:7a:
         73:75:10:70:b7:38:eb:0c:94:49:a6:ba:b2:b6:b2:60:67:2d:
         51:a1:3b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:52:25 2025 by rpki-client