Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/0e0711d9-a418-357d-9142-28bce4a52a6a.roa
File:                     0e0711d9-a418-357d-9142-28bce4a52a6a.roa (raw, json)
Hash identifier:          nj025UyHDPJSZjHMyXteVy0vY0Ex/OuP4NUSlff/sQk=
Subject key identifier:   BF:4C:F8:D2:E5:E2:DD:CB:3B:BF:83:BF:67:7C:ED:12:17:6E:F2:A0
Certificate issuer:       /CN=03b51393-7784-45a0-9621-168719782436
Certificate serial:       010D0C9F4328584B63674F85269FC43BD55AE580
Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/0e0711d9-a418-357d-9142-28bce4a52a6a.roa
Signing time:             Thu 02 Oct 2025 13:00:40 +0000
ROA not before:           Thu 02 Oct 2025 13:00:40 +0000
ROA not after:            Wed 31 Dec 2025 14:00:40 +0000
asID:                     10384
IP address blocks:        152.87.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:63:67:4f:85:26:9f:c4:3b:d5:5a:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b51393-7784-45a0-9621-168719782436
        Validity
            Not Before: Oct  2 13:00:40 2025 GMT
            Not After : Dec 31 14:00:40 2025 GMT
        Subject: CN=5c36ba6b-5a18-403b-a58a-b83135a05aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:1a:e0:e7:d0:8f:02:a7:a4:46:80:8c:d0:92:
                    8c:65:1c:23:6e:5d:4b:6a:22:92:7b:75:ec:4f:1b:
                    81:b8:14:14:66:33:13:10:52:7a:ef:d5:21:8d:c0:
                    5e:c1:97:ef:7c:d0:c8:d4:21:8e:27:c1:86:ae:34:
                    aa:bf:3b:8a:95:d4:c8:ca:70:0f:02:8e:9b:b7:ab:
                    ed:d4:10:2f:ae:1b:85:a5:b4:b7:d8:07:b3:9f:07:
                    f4:dd:f3:cf:25:7f:a5:d5:83:42:a8:6f:c3:31:a6:
                    5d:a1:1c:19:5a:8b:89:16:fd:94:ca:86:9a:78:9c:
                    77:83:33:31:3d:b9:9c:d9:e7:91:da:e6:53:be:f0:
                    9f:00:af:1d:90:38:67:b4:e6:91:f2:41:46:ab:df:
                    fa:7d:6a:df:16:b3:25:96:e7:b0:ce:33:42:76:0a:
                    51:16:d5:32:d1:05:2a:55:61:19:d4:34:15:8e:7c:
                    f5:e7:4a:bc:a6:dd:2d:bd:fc:a6:1f:57:21:07:08:
                    62:df:ca:95:f3:7b:be:c2:3c:bb:d2:8d:8d:1c:6a:
                    68:ea:a5:d6:ff:c3:69:67:65:20:fc:35:2c:d6:fb:
                    17:d7:ca:0a:80:e3:21:60:b6:1a:1b:aa:f3:d8:2d:
                    a3:3c:e9:c7:c3:d3:4a:f0:49:a3:34:c6:0b:b3:7b:
                    b8:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4C:F8:D2:E5:E2:DD:CB:3B:BF:83:BF:67:7C:ED:12:17:6E:F2:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/0e0711d9-a418-357d-9142-28bce4a52a6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl

            X509v3 Authority Key Identifier:
                keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.87.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:6e:c5:51:11:c1:c9:b3:f4:0d:82:5c:81:76:04:65:4a:e0:
         de:2d:7e:b0:92:4d:10:2b:63:e8:57:a9:b1:18:ea:dc:07:bc:
         6f:48:e0:90:33:aa:ec:f2:39:4f:93:62:23:c4:7e:be:99:92:
         7b:91:b4:a5:a4:04:ee:67:e4:4f:d5:4b:62:d8:66:7d:12:ff:
         45:a4:73:e9:ea:28:91:9d:38:51:2e:ab:93:ad:df:68:50:2c:
         18:e9:e1:3d:7a:8a:c5:61:90:68:07:5c:d2:38:05:a8:7e:da:
         53:26:78:2b:b0:c4:c0:51:69:af:92:87:0e:9f:95:0b:be:80:
         df:41:d1:8b:c7:2f:1e:57:98:49:04:ce:ac:16:6e:91:3d:88:
         7a:2f:23:1b:e8:f4:34:cc:75:eb:db:d2:85:c0:10:77:45:91:
         27:0a:3d:81:aa:bf:26:e3:c2:01:bb:69:78:ff:40:51:e0:bb:
         35:0d:6a:a8:30:d5:10:4f:1a:ee:0a:04:8c:4f:b1:cd:39:42:
         28:de:18:3f:3b:3f:08:a3:b2:1f:81:68:a2:17:5a:dd:68:66:
         fd:e1:59:af:f7:50:03:1d:c4:a3:78:a1:bf:a9:c9:f4:8b:a6:
         fb:5e:71:18:09:ca:0b:37:69:cc:04:25:d2:d4:2e:ba:2d:d6:
         a1:2a:fe:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:44:25 2025 by rpki-client