Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/dd41e7ec-eacb-37cf-89c6-ea4917767bc5.roa
File:                     dd41e7ec-eacb-37cf-89c6-ea4917767bc5.roa (raw, json)
Hash identifier:          rVjNhCatZxzcHhxus0ZQijUK+YwN7hCoeYYoYRCeCZw=
Subject key identifier:   A2:82:36:C6:B9:5C:28:9B:86:BA:11:34:CD:10:FE:D4:73:6C:DD:54
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584B39870354BB80763690C5D500
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/dd41e7ec-eacb-37cf-89c6-ea4917767bc5.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     13760
IP address blocks:        142.190.130.0/23 maxlen: 23
                          142.190.132.0/23 maxlen: 23
                          142.190.134.0/23 maxlen: 23
                          142.190.136.0/23 maxlen: 23
                          142.190.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:03:54:bb:80:76:36:90:c5:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=47f5bf5b-7d50-4772-a792-1327ce6ea076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ca:ee:f6:b7:b8:3e:cf:6a:46:22:99:0e:6c:
                    5a:f4:8b:89:b5:3b:2c:c0:19:fc:cc:04:23:3a:a0:
                    78:d1:e7:9d:3a:22:d0:f7:b8:ac:27:c0:bf:97:5d:
                    fe:1a:5a:15:0a:c8:7a:51:21:aa:66:23:6f:fe:67:
                    d1:36:29:0b:da:27:93:a5:67:6c:53:76:68:c2:9e:
                    58:52:a4:6c:66:67:aa:4d:c1:f7:7a:e7:78:4c:71:
                    c8:4c:8f:bc:38:6d:9e:ff:88:c8:a9:31:17:a3:48:
                    65:d5:58:95:1c:b6:c6:a6:e1:5a:c1:80:e3:6b:10:
                    a8:40:8d:31:f7:8c:69:3b:41:e1:f0:9b:b5:ee:af:
                    e1:78:1e:0c:65:1d:bd:4b:d2:b5:ff:fb:be:1b:47:
                    d5:b2:fb:95:24:98:af:06:88:1a:0e:82:ab:f1:5a:
                    e3:87:7a:8b:a5:d0:c8:a6:62:30:f3:ff:79:e6:92:
                    1b:2a:dc:ee:7a:7f:3f:87:a4:f5:60:d6:67:df:93:
                    f8:a0:d1:f2:8d:07:c7:83:aa:76:7b:2c:55:f4:18:
                    d1:a7:ee:46:cd:44:fd:0a:fa:a7:07:0f:4b:15:66:
                    53:9a:8c:46:54:5c:e6:96:2a:11:24:68:5a:b9:71:
                    24:86:60:d9:67:9d:22:d8:29:e6:f1:33:88:37:ea:
                    9d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:82:36:C6:B9:5C:28:9B:86:BA:11:34:CD:10:FE:D4:73:6C:DD:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/dd41e7ec-eacb-37cf-89c6-ea4917767bc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.190.130.0-142.190.139.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:b6:00:5c:a8:9c:6d:8d:a8:3b:f0:e7:b2:6f:e2:3d:2f:6a:
         52:6f:ee:b7:60:17:83:da:e2:ff:32:c3:65:d0:30:0a:46:46:
         f0:fc:f7:8c:0c:85:1b:ac:0e:c9:5c:5f:9e:d8:65:5e:c5:70:
         3f:3e:40:67:cd:8d:f0:a9:09:81:2b:d2:a0:c8:37:89:07:34:
         7b:f5:0e:2d:ae:bf:ed:96:c6:9f:07:8a:7a:15:95:8b:b3:6c:
         1f:49:f3:16:7a:95:47:37:fc:92:e1:c6:18:51:49:07:2a:05:
         5d:4c:60:99:7f:21:a3:01:31:0e:c6:01:28:89:37:2d:ec:7c:
         29:29:27:8d:9a:31:a3:aa:90:94:79:38:d6:ee:24:99:88:01:
         e8:1b:bb:31:fa:3c:79:65:c1:29:e5:ea:d9:bd:d0:7b:0e:ae:
         6c:bd:d1:31:1b:d2:e4:d6:82:65:a2:2c:fd:9d:65:fd:b6:49:
         78:5a:5d:44:05:18:25:da:12:fa:d1:02:2e:e3:be:f7:ff:4d:
         01:3f:38:60:50:1a:e5:fc:33:56:97:07:46:a8:8a:4b:8d:9e:
         90:7a:fe:eb:24:bf:89:04:48:ec:3a:b3:9c:6a:d3:89:74:fb:
         56:ad:4f:7c:0a:81:78:4a:30:f5:52:55:6a:3e:73:c2:7e:9e:
         86:bb:9c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:03:06 2025 by rpki-client