Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/381aa0d8-0713-3628-808e-2235213b6efc.roa
File:                     381aa0d8-0713-3628-808e-2235213b6efc.roa (raw, json)
Hash identifier:          1MbWy6W3LsOGjtdJq2VWEPcxLF0lBHnUnIOE6IFHQuw=
Subject key identifier:   77:95:63:1A:ED:6A:BF:D7:EA:5D:1D:DB:DD:81:CA:BF:B1:D4:AE:29
Certificate issuer:       /CN=dc83e28a-d37f-4b7f-be49-3c2e355707e7
Certificate serial:       010D0C9F4328584B477C731E08D991403F8DF6C0
Authority key identifier: 56:80:3C:83:97:02:92:9A:DD:00:0D:FB:6E:5D:0C:25:01:BA:98:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/381aa0d8-0713-3628-808e-2235213b6efc.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     13943
IP address blocks:        141.193.104.0/22 maxlen: 22
                          173.231.72.0/21 maxlen: 21
                          199.66.144.0/21 maxlen: 21
                          2604:bdc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:73:1e:08:d9:91:40:3f:8d:f6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc83e28a-d37f-4b7f-be49-3c2e355707e7
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=85658e80-99df-447b-8302-0b7c193a7255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:81:31:72:51:6d:56:ed:05:80:a2:81:51:15:
                    9a:eb:d7:23:b1:9c:a0:80:a0:62:39:14:dd:93:c5:
                    92:6a:ef:c1:ef:dc:b7:cd:af:97:00:1a:ce:55:bf:
                    2c:d5:03:86:b0:2b:c9:b8:88:16:e4:19:c3:d2:d7:
                    3b:94:30:7e:80:b0:06:3e:c7:cd:ba:47:c4:4b:c1:
                    6d:e0:78:24:e8:7d:3f:95:3c:e6:09:ae:5a:39:f9:
                    12:47:af:4e:56:fb:96:75:76:51:40:df:2a:13:d9:
                    45:9a:de:6d:5f:b6:3e:db:a9:7d:c8:1c:93:1f:69:
                    7b:e1:e5:61:69:51:a5:28:61:a2:78:d9:d4:45:b2:
                    bd:6a:e6:aa:65:ef:e6:44:0a:57:c1:80:be:f0:d5:
                    b5:e1:49:60:26:b5:32:8a:35:f5:7e:87:b3:3c:d4:
                    6e:31:09:03:81:29:0a:f8:02:d8:7e:4e:e6:cf:bb:
                    33:29:aa:9a:70:72:ac:d4:27:f7:60:8d:b0:fe:ed:
                    7c:72:f0:88:4d:67:0b:a9:0a:c0:e9:c0:31:83:49:
                    c6:4f:0c:1d:a2:04:6a:91:1a:15:47:94:f9:9b:80:
                    92:3f:70:c5:53:36:aa:f3:2b:ca:54:c7:6c:a2:9f:
                    c1:4d:67:ac:22:43:cd:cf:19:d1:95:88:0e:cd:01:
                    e1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:95:63:1A:ED:6A:BF:D7:EA:5D:1D:DB:DD:81:CA:BF:B1:D4:AE:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/381aa0d8-0713-3628-808e-2235213b6efc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7/dc83e28a-d37f-4b7f-be49-3c2e355707e7.crl

            X509v3 Authority Key Identifier:
                keyid:56:80:3C:83:97:02:92:9A:DD:00:0D:FB:6E:5D:0C:25:01:BA:98:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dc83e28a-d37f-4b7f-be49-3c2e355707e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.104.0/22
                  173.231.72.0/21
                  199.66.144.0/21
                IPv6:
                  2604:bdc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a3:49:b9:54:b1:22:e3:13:86:5c:95:45:ec:93:85:e1:ed:
         cf:45:fc:c4:09:19:13:c5:27:1b:9f:4b:90:0f:dc:f5:76:40:
         7b:ac:84:6b:55:7b:c8:a2:d5:12:e5:fa:af:d8:2c:a5:b9:84:
         a5:97:e6:69:57:ec:18:dd:2d:75:86:b3:92:aa:70:e9:36:de:
         12:ed:e7:d4:10:b9:97:03:9e:4d:6f:66:c0:b1:be:e6:33:16:
         48:f5:76:f9:40:71:99:ad:af:27:f1:98:56:3a:fa:ec:eb:79:
         3d:48:6f:b4:1b:23:86:78:10:70:fa:16:9d:f6:ef:be:d6:58:
         67:1d:16:bf:27:df:ea:2d:a5:20:5c:98:06:91:b1:21:12:ee:
         1f:74:0e:ff:e1:b2:29:1a:fd:a7:d4:0e:f6:b0:a0:8c:4a:db:
         00:9a:69:ad:03:e7:e2:8f:78:fe:0d:58:bb:a7:5a:db:e5:40:
         d9:bf:34:d1:24:d3:2e:de:d6:58:45:10:2d:1b:19:87:57:d7:
         1a:30:86:61:80:fd:be:7d:34:cf:bb:4d:40:22:26:41:17:e7:
         2f:2e:93:93:cd:59:78:9d:97:a2:78:95:6e:db:ce:0c:de:35:
         15:da:1b:a4:8e:eb:12:d2:b2:50:ed:58:0a:08:86:13:7d:e0:
         0d:c3:c7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:41:24 2025 by rpki-client