Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e1513f3d-2793-4f27-8379-364931bdab71/df834907-c285-3a0d-a58d-aeb1f537540e.roa
File:                     df834907-c285-3a0d-a58d-aeb1f537540e.roa (raw, json)
Hash identifier:          XoF1sMAwRNT5bsgjzY4Z5CPeTUtYRi9HRjSGB1Rf8DE=
Subject key identifier:   B7:54:7A:B8:9D:12:E0:6C:B1:EB:C5:E7:16:33:D1:01:D8:05:ED:D5
Certificate issuer:       /CN=e1513f3d-2793-4f27-8379-364931bdab71
Certificate serial:       010D0C9F4328584B821E206657D9C3EF191366C0
Authority key identifier: 6C:F1:BF:48:60:8E:21:52:13:6E:43:00:1E:5E:E1:CF:32:C9:BA:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e1513f3d-2793-4f27-8379-364931bdab71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e1513f3d-2793-4f27-8379-364931bdab71/df834907-c285-3a0d-a58d-aeb1f537540e.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     401350
IP address blocks:        165.188.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e1513f3d-2793-4f27-8379-364931bdab71/e1513f3d-2793-4f27-8379-364931bdab71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e1513f3d-2793-4f27-8379-364931bdab71/e1513f3d-2793-4f27-8379-364931bdab71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e1513f3d-2793-4f27-8379-364931bdab71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:20:66:57:d9:c3:ef:19:13:66:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1513f3d-2793-4f27-8379-364931bdab71
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=3791ec39-c055-4102-ad3a-fb7a757ae161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d0:39:92:80:19:36:15:82:4f:c4:4d:54:03:
                    d8:fd:dc:57:85:70:cf:b7:53:c8:4e:df:ea:92:36:
                    7f:f8:de:a5:38:16:bb:03:f9:52:76:68:cd:18:8a:
                    8b:2e:30:89:25:31:1a:26:c4:1c:c3:e1:61:44:3b:
                    94:13:cd:08:3a:57:bb:c6:2c:1c:e9:27:ac:51:75:
                    34:86:74:d1:71:71:33:d6:24:d2:04:6a:71:98:8e:
                    ac:ae:05:7a:e0:09:83:f1:eb:ef:07:05:f7:3d:54:
                    ee:9c:d3:9d:b7:e1:37:11:17:6e:11:7e:da:bd:c4:
                    5c:bc:a8:74:e2:2b:6f:2a:7b:a2:46:ef:9c:14:e1:
                    3c:d3:0b:c0:76:51:76:96:a7:29:96:71:ee:78:26:
                    42:fe:95:3e:c9:2e:74:01:76:f8:b3:b3:cd:3e:77:
                    56:45:47:51:35:42:bb:c7:2c:5c:da:9e:6a:e6:ec:
                    62:f6:ea:ad:a5:4c:b1:5f:94:43:dd:ad:98:9b:83:
                    36:b2:32:49:19:b1:9e:47:cf:e2:7f:cb:05:d8:01:
                    87:ac:07:7d:94:4f:f0:9f:65:21:0b:56:29:b2:df:
                    53:e1:1a:32:9a:d6:f7:1a:a5:cb:8b:fd:f6:04:37:
                    45:23:be:e8:63:bb:ad:23:27:a2:37:60:64:08:d9:
                    7d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:54:7A:B8:9D:12:E0:6C:B1:EB:C5:E7:16:33:D1:01:D8:05:ED:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e1513f3d-2793-4f27-8379-364931bdab71/df834907-c285-3a0d-a58d-aeb1f537540e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e1513f3d-2793-4f27-8379-364931bdab71/e1513f3d-2793-4f27-8379-364931bdab71.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:BF:48:60:8E:21:52:13:6E:43:00:1E:5E:E1:CF:32:C9:BA:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e1513f3d-2793-4f27-8379-364931bdab71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.188.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:ba:36:dc:0d:4a:8e:ae:c7:c3:55:cf:f0:e4:de:2e:c0:2b:
         64:a1:6e:5c:f1:4b:e5:27:35:00:86:1e:8e:19:c7:04:4d:6e:
         9f:78:a3:99:eb:c1:e7:86:25:db:34:71:5e:c7:48:75:83:3a:
         8f:93:e0:30:96:48:2d:c1:a2:56:6a:63:2f:4d:96:a5:4d:d8:
         0b:ad:46:de:71:8e:3a:3b:6e:ab:79:40:07:69:95:33:d8:3c:
         40:e6:b3:9f:f7:8d:f6:90:5d:9d:4b:89:cd:c6:ff:76:a2:fd:
         a6:3c:51:38:43:66:52:bc:57:2f:a4:da:d8:f7:bd:8f:11:0b:
         eb:5d:c0:05:97:32:0a:99:90:17:d1:aa:3a:a0:ac:6b:c8:c0:
         9a:6e:6d:c6:88:3d:bc:16:4d:e0:f8:d4:ed:67:75:40:6b:8b:
         b9:1f:44:51:6e:3b:5d:f9:22:cf:e8:30:51:5d:12:1d:84:4d:
         eb:07:60:f3:10:2c:9a:e3:74:73:6a:42:01:35:81:d0:78:a5:
         6b:d3:c7:85:95:c0:3f:37:02:6b:33:a9:46:03:9b:57:42:ab:
         21:a4:1f:f2:5a:df:95:ed:04:f4:99:5f:d9:c7:29:47:d8:83:
         1e:e1:dd:55:a3:c0:f9:0e:69:d3:f2:d7:3b:32:cf:37:ba:ca:
         38:4a:4e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:40:11 2025 by rpki-client