Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/2d8ea12a-50d0-305e-960f-a6e4a19a7a21.roa
File:                     2d8ea12a-50d0-305e-960f-a6e4a19a7a21.roa (raw, json)
Hash identifier:          ZySY7lj5IL9324K4pE2AljfswLCVWyxaV9FR5LPZrHQ=
Subject key identifier:   0C:2F:18:68:1F:AB:3C:4F:37:22:78:34:60:DF:4C:85:6F:91:9E:F6
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584B2761743D73CA626422AC1400
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/2d8ea12a-50d0-305e-960f-a6e4a19a7a21.roa
Signing time:             Thu 11 Sep 2025 01:00:33 +0000
ROA not before:           Thu 11 Sep 2025 01:00:33 +0000
ROA not after:            Wed 10 Dec 2025 02:00:33 +0000
asID:                     13760
IP address blocks:        142.190.10.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:61:74:3d:73:ca:62:64:22:ac:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Sep 11 01:00:33 2025 GMT
            Not After : Dec 10 02:00:33 2025 GMT
        Subject: CN=0e051ab4-863c-42a6-9142-88a672f5384b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c9:97:77:05:d7:11:6c:9f:11:a8:ab:7f:2d:
                    92:17:df:76:7c:9c:a6:4c:7e:c0:85:e6:f4:26:b7:
                    a0:5b:dc:f2:ef:03:26:0e:25:3a:73:ba:ff:e6:a8:
                    21:3d:fe:d2:32:c6:3a:5d:12:7a:c5:b1:69:73:2d:
                    bb:84:d9:09:39:0f:9b:b9:82:1d:65:93:01:d9:32:
                    af:89:2f:2c:da:22:30:6c:b1:1f:ac:ee:53:00:e8:
                    4e:96:3c:41:39:b4:fb:0e:7d:32:7d:07:df:65:d9:
                    89:94:78:1f:d3:7c:8f:52:76:eb:68:38:0a:2b:ef:
                    a3:82:1d:0d:53:db:85:83:69:97:be:f9:29:a4:28:
                    ab:98:7a:c7:af:c6:e5:36:01:26:2e:53:f4:13:a9:
                    d7:d2:6a:6b:af:ee:9d:ef:3d:9f:be:60:c1:0a:7d:
                    0f:a3:99:8f:4f:bf:40:14:a7:12:2f:3d:6c:26:71:
                    6f:01:48:7f:48:8f:79:70:b8:fe:0d:8a:2e:fd:d1:
                    c3:cf:c7:32:05:08:8d:6b:6a:a5:d6:d3:f8:76:73:
                    5e:00:0a:85:ec:66:c4:6d:81:c5:61:fb:49:a1:08:
                    c5:38:a8:d6:5c:18:cf:8a:5b:9c:39:26:ea:2f:2f:
                    8f:62:fc:0e:0e:23:85:16:a8:ee:71:3f:d4:14:95:
                    8a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2F:18:68:1F:AB:3C:4F:37:22:78:34:60:DF:4C:85:6F:91:9E:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/2d8ea12a-50d0-305e-960f-a6e4a19a7a21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.190.10.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:4e:96:e9:c7:cf:6f:a1:c2:8b:c9:44:6b:bc:8a:96:24:b7:
         40:4f:37:50:c2:4d:ad:c6:bb:d1:b8:87:75:a5:5b:43:67:dc:
         8b:94:dd:64:49:f9:aa:a6:28:eb:35:49:dd:40:1a:50:4a:8d:
         67:95:16:ae:bd:b4:1c:d4:0f:4f:e4:ed:86:41:9c:a2:81:7a:
         33:ec:9a:3a:27:4c:ce:58:48:69:cb:75:a0:af:5a:8b:67:b3:
         24:d1:df:7f:9c:bc:5e:b9:c4:4a:49:20:11:9d:fe:bc:ac:5e:
         80:95:fb:65:aa:86:0b:f4:d5:83:2f:86:79:64:ca:e5:ae:fb:
         8d:22:4b:aa:46:3c:6e:dc:23:95:92:b3:5a:d3:87:3f:3c:a2:
         da:62:93:ca:6c:96:56:ee:1c:59:60:fb:36:55:43:e6:03:98:
         3a:24:b5:97:14:aa:9b:2f:a4:36:55:4c:c4:91:f9:3c:7d:35:
         0b:54:a5:be:8a:7f:fd:a0:ba:f8:fc:70:2c:57:ec:b0:32:95:
         66:04:36:07:60:9e:6d:53:99:cb:5e:ef:0f:e0:bf:4c:ef:1c:
         9c:fb:ba:dc:3e:7e:ff:a6:03:f6:79:3d:b4:93:93:c5:79:d7:
         bd:48:e4:03:22:33:5c:18:37:24:7a:c2:05:35:fd:33:a9:27:
         65:40:0e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:18:46 2025 by rpki-client