Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a1d187c3-add7-34e7-8796-12441c90f286.roa
File:                     a1d187c3-add7-34e7-8796-12441c90f286.roa (raw, json)
Hash identifier:          wu8t3Xm7JzX9BWL59HsxbDTFz8sRXjuBEYWgtPiv9+w=
Subject key identifier:   61:F2:3F:DE:88:E2:1B:33:1B:07:A5:57:A1:AE:D6:C2:E4:88:C6:43
Certificate issuer:       /CN=61e7cca0-e65d-417d-a651-371c91be9c95
Certificate serial:       010D0C9F4328584B3C51AA6F44A02E4367B36A80
Authority key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a1d187c3-add7-34e7-8796-12441c90f286.roa
Signing time:             Thu 18 Sep 2025 13:00:41 +0000
ROA not before:           Thu 18 Sep 2025 13:00:41 +0000
ROA not after:            Wed 17 Dec 2025 14:00:41 +0000
asID:                     1448
IP address blocks:        158.51.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3c:51:aa:6f:44:a0:2e:43:67:b3:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61e7cca0-e65d-417d-a651-371c91be9c95
        Validity
            Not Before: Sep 18 13:00:41 2025 GMT
            Not After : Dec 17 14:00:41 2025 GMT
        Subject: CN=56821e09-8189-40b6-a950-a4394a1a77c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ae:89:ef:3d:0a:b6:c6:04:81:98:6b:8c:d0:
                    0b:05:6d:30:12:54:ab:fa:a0:df:04:fd:78:2f:d0:
                    0f:1a:23:91:9a:60:35:01:0b:64:93:27:0d:80:a9:
                    55:80:57:33:b0:c9:8e:c7:64:21:cc:66:33:3c:92:
                    2f:3f:86:99:36:5e:ed:7c:73:a0:fd:93:8f:f6:10:
                    84:7e:66:f1:14:65:e9:a3:9e:49:45:e8:8e:0a:62:
                    d3:c9:8c:03:e3:f7:87:50:e5:5b:41:31:96:cb:18:
                    bd:ac:45:42:05:6f:c4:d2:e6:58:8f:2f:3e:61:0b:
                    f5:66:24:db:10:ad:e5:84:93:79:29:06:ba:32:69:
                    2b:ef:5a:36:ef:8c:b1:08:49:a9:df:0a:9a:52:f1:
                    71:89:05:a6:21:8c:e6:a3:14:db:44:74:0e:a4:f0:
                    ef:51:98:2f:51:ba:d6:1f:85:da:c0:fa:9f:6d:d8:
                    aa:d4:09:52:37:1c:9e:06:3e:dc:2c:21:0d:d3:4f:
                    60:80:d1:85:52:aa:4c:f4:91:f3:4c:dd:4a:24:87:
                    f1:d1:b5:5f:08:8d:cc:db:c7:19:df:bf:f1:82:bd:
                    e5:5a:26:48:98:bd:d5:45:c3:a3:b7:f3:c0:12:16:
                    a6:f0:47:79:27:1a:26:d3:95:2f:b4:22:c7:33:55:
                    43:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F2:3F:DE:88:E2:1B:33:1B:07:A5:57:A1:AE:D6:C2:E4:88:C6:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/a1d187c3-add7-34e7-8796-12441c90f286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl

            X509v3 Authority Key Identifier:
                keyid:64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:fb:07:5c:2c:15:1a:82:47:4c:54:1c:3b:11:41:86:dd:1f:
         44:2d:9f:25:51:f2:36:8d:a1:d9:92:62:d1:6b:33:a9:27:e0:
         2c:e6:6a:f3:98:5b:68:81:63:82:eb:a9:2f:b1:5d:33:98:3b:
         53:bd:5e:36:56:da:04:ab:c9:1e:79:9b:57:a7:3d:bb:6b:12:
         5d:35:02:aa:38:13:bb:f5:f9:17:eb:80:aa:0e:70:91:80:d1:
         c2:f1:e2:c0:4b:56:1e:f2:66:d6:80:c0:1d:a6:c1:7f:63:76:
         2d:d6:c6:99:4c:b0:f5:d5:40:52:75:3c:99:a4:7b:2b:14:b2:
         97:11:e8:db:bf:cd:c4:6d:38:7c:ec:99:35:c2:a3:49:54:d6:
         f9:07:76:a6:cd:a4:23:40:1a:3d:38:13:2d:2d:9c:32:c0:97:
         1b:70:a6:ef:a8:7a:40:b3:6c:cd:dc:d0:60:08:4a:2f:40:bd:
         14:cb:3a:a0:d6:d3:89:77:a2:86:5c:d3:af:0e:cb:47:4a:89:
         d6:0d:19:3e:3a:40:d3:27:99:f2:fa:b1:ab:4b:1e:d8:e0:5d:
         37:2c:b6:53:26:d3:40:6a:82:1d:63:d7:13:2b:e4:e8:cb:cc:
         e8:ab:8b:88:ec:07:eb:78:12:67:9f:85:18:7f:80:f1:8c:fb:
         30:78:f0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 04:26:42 2025 by rpki-client