Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/4846caac-e6bc-3756-acd1-b00650b6e96f.roa
File:                     4846caac-e6bc-3756-acd1-b00650b6e96f.roa (raw, json)
Hash identifier:          FVhajV24lf0s2ZG8zr8mujLA5PS+xJlH/8/uWgmNDKk=
Subject key identifier:   24:AC:1A:A1:3E:1F:23:4F:71:D7:C8:EB:F3:30:53:CC:55:0F:C1:B5
Certificate issuer:       /CN=f52d9dd2-a206-4694-a550-d6639e33e9f6
Certificate serial:       010D0C9F4328584B0B76D88440D9EFEE3E4C8300
Authority key identifier: BD:E7:F5:54:80:A6:3B:0B:FE:B6:E6:EF:1E:0F:B3:18:E1:77:DF:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/4846caac-e6bc-3756-acd1-b00650b6e96f.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     14593
IP address blocks:        164.152.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:d8:84:40:d9:ef:ee:3e:4c:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f52d9dd2-a206-4694-a550-d6639e33e9f6
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=101549d3-6c83-4844-af11-0a64f6f1643d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:93:80:7d:5f:cf:fd:54:4d:65:f5:9d:dd:af:
                    58:5d:d0:2e:e9:7a:f0:e6:ea:a5:83:83:e1:2c:9f:
                    76:98:1f:e2:ef:32:3e:c6:ca:f9:6a:bf:69:60:6c:
                    03:aa:c4:b2:4e:af:f1:c9:bb:d3:d4:4c:a6:fe:11:
                    db:64:87:87:f4:1c:13:20:1b:90:40:44:c8:c4:02:
                    00:84:1b:00:45:d6:9d:da:a8:19:1a:ae:34:20:ad:
                    b5:d5:2b:b0:9d:bc:8c:42:be:a9:32:86:85:b5:9a:
                    b1:67:df:f0:2e:16:80:6f:83:72:f0:e9:36:b4:2a:
                    f7:d3:3a:ba:bf:67:ab:cb:d5:69:38:08:59:5e:4e:
                    9e:02:39:e0:a4:3c:c3:af:84:d2:b3:a3:3b:18:9b:
                    c5:e4:12:29:2c:f2:be:3b:46:30:14:4a:43:ef:fb:
                    43:a8:e5:e3:48:e6:0b:0e:bd:f0:8f:7b:8b:39:a3:
                    52:5e:89:d3:06:43:a2:ed:0b:05:a3:06:dc:3b:67:
                    d3:33:76:97:f9:2f:38:69:0a:cd:0e:70:ef:27:12:
                    37:79:ef:1b:54:a4:69:78:9a:60:24:f0:9a:be:5c:
                    f3:a7:c4:d9:df:0f:68:4b:10:bb:65:13:ff:e7:0d:
                    15:2d:c7:c2:07:0e:22:3c:68:84:de:da:cf:08:82:
                    a6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:AC:1A:A1:3E:1F:23:4F:71:D7:C8:EB:F3:30:53:CC:55:0F:C1:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/4846caac-e6bc-3756-acd1-b00650b6e96f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.crl

            X509v3 Authority Key Identifier:
                keyid:BD:E7:F5:54:80:A6:3B:0B:FE:B6:E6:EF:1E:0F:B3:18:E1:77:DF:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.152.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:c4:3b:31:a0:b4:bd:c5:3b:83:f7:e5:f1:b1:42:64:c2:e0:
         ee:d4:e9:de:ac:61:8e:cb:93:cc:ea:81:74:82:c9:4d:50:39:
         9f:9d:a0:b2:d0:c9:91:ce:18:81:97:70:ef:04:22:8b:d9:82:
         7d:41:4b:52:90:64:59:99:12:1e:22:c6:86:06:43:84:f8:76:
         a4:fc:a2:22:5b:91:2b:a4:49:b6:0c:61:eb:38:c3:73:bc:7c:
         37:1b:d7:02:bc:ef:93:3d:ae:52:dc:39:7f:36:68:13:d7:19:
         66:1f:5d:7a:64:ca:c0:d5:76:c9:c7:47:ac:3b:f8:fb:23:ef:
         81:7c:e5:c5:a8:78:31:3d:fd:50:30:64:81:d1:8d:c2:5f:9f:
         cb:51:07:69:e6:2c:97:84:81:28:54:34:dd:61:46:99:79:c2:
         3f:5b:7a:af:1e:c9:cd:09:66:90:c9:1e:bc:c6:58:31:8b:8b:
         ae:cb:9a:74:a3:aa:b4:cc:da:24:d5:10:71:95:93:7d:03:5a:
         86:dc:c3:d4:9d:7b:2b:6b:42:2b:79:d3:d1:28:70:6b:cc:5e:
         e1:58:b5:69:45:38:73:cb:bf:1d:41:32:fd:6f:f3:da:48:6e:
         24:36:a5:fd:7d:62:e7:cb:09:2e:29:64:78:3d:1b:a1:cb:95:
         0f:50:ab:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:20:33 2025 by rpki-client