Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/5ea0d8fd-4500-37dc-8e4a-9a3567ca7988.roa
File:                     5ea0d8fd-4500-37dc-8e4a-9a3567ca7988.roa (raw, json)
Hash identifier:          fnP6HNdqimIpuMSGBsOL6kzFJjQtC098I5Kp2n3+dJI=
Subject key identifier:   3B:2A:6C:FD:EC:79:30:2B:40:B5:4B:B1:80:BD:AE:50:53:FB:CB:2D
Certificate issuer:       /CN=a935f841-ed83-4b99-bb9d-4837de8ec8cb
Certificate serial:       010D0C9F4328584B23384CCFE9C6969DC389C0E0
Authority key identifier: EC:A5:A0:80:B1:BE:A8:70:04:06:EC:A7:CE:41:6A:D2:F6:68:9E:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/5ea0d8fd-4500-37dc-8e4a-9a3567ca7988.roa
Signing time:             Tue 09 Sep 2025 13:14:26 +0000
ROA not before:           Tue 09 Sep 2025 13:14:26 +0000
ROA not after:            Mon 08 Dec 2025 14:14:26 +0000
asID:                     15149
IP address blocks:        96.45.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/a935f841-ed83-4b99-bb9d-4837de8ec8cb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/a935f841-ed83-4b99-bb9d-4837de8ec8cb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:38:4c:cf:e9:c6:96:9d:c3:89:c0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a935f841-ed83-4b99-bb9d-4837de8ec8cb
        Validity
            Not Before: Sep  9 13:14:26 2025 GMT
            Not After : Dec  8 14:14:26 2025 GMT
        Subject: CN=79ebe735-47d1-4f48-8eba-a47ae3830590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:23:28:a3:f8:3b:15:88:08:1b:32:57:5e:e7:
                    9f:23:7d:c3:2f:77:50:2e:0d:6c:3f:0c:44:fe:84:
                    eb:7c:2e:56:a2:a0:01:ca:7f:1d:da:4c:c9:96:30:
                    fa:69:52:c5:1e:82:fb:d8:9e:e0:9d:71:0c:33:53:
                    48:26:2a:a5:12:ce:bd:19:3c:0b:52:d9:46:b4:c2:
                    8f:d3:ce:d7:6d:cb:ab:b4:0e:ee:b2:30:cc:94:e2:
                    12:85:e5:70:66:9b:16:ea:24:3c:79:9b:39:60:cf:
                    6c:b8:34:8f:d6:fd:06:5d:fc:ce:77:df:dc:58:d4:
                    1f:4f:c2:bf:a5:a2:d9:60:e0:cc:64:cb:7d:d1:fe:
                    c6:08:6c:4e:85:d1:81:60:85:48:c0:df:97:84:53:
                    02:28:0a:4f:7c:c1:7d:aa:5a:7e:bc:6f:54:75:1d:
                    3a:b8:0d:74:e4:3e:c8:aa:a8:7b:68:0e:73:da:1b:
                    4b:27:43:2b:16:13:b7:12:52:f8:14:31:dd:2a:06:
                    93:77:ec:91:df:e9:b4:3d:7d:8c:39:87:47:54:3b:
                    47:93:4e:65:93:41:61:93:8e:41:be:d7:5d:ab:76:
                    71:38:8d:0c:00:e7:06:0e:3e:49:2a:79:e1:bf:4f:
                    7b:ec:6b:c6:3a:15:f2:c4:75:11:ad:38:ef:5e:dd:
                    58:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:2A:6C:FD:EC:79:30:2B:40:B5:4B:B1:80:BD:AE:50:53:FB:CB:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/5ea0d8fd-4500-37dc-8e4a-9a3567ca7988.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb/a935f841-ed83-4b99-bb9d-4837de8ec8cb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:A5:A0:80:B1:BE:A8:70:04:06:EC:A7:CE:41:6A:D2:F6:68:9E:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a935f841-ed83-4b99-bb9d-4837de8ec8cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.45.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:21:0d:65:39:69:98:4f:11:ef:5d:a6:9a:66:13:35:4f:07:
         4a:39:08:50:55:21:47:7c:5e:cf:fc:6d:56:0c:b7:bc:16:28:
         ac:6f:e5:b0:0e:1b:ca:1b:69:63:42:dc:5a:c9:d6:92:84:22:
         2e:df:67:20:78:99:8b:c4:da:c1:d7:a6:78:c0:92:c3:99:11:
         86:8f:6a:92:1a:bb:6b:71:b4:0d:25:85:fd:fa:01:b1:29:cf:
         8d:96:2c:72:b7:53:a4:15:9e:13:d0:bb:04:de:8e:fc:a2:20:
         47:ef:54:c3:7e:1c:bc:cf:aa:a2:36:dc:11:20:80:32:dc:83:
         01:89:fc:12:32:a4:92:bb:d1:69:b2:7b:bc:fc:b7:33:2e:42:
         7c:0b:98:42:3e:18:6a:06:f8:ef:0d:78:78:8d:6c:af:ee:06:
         42:6f:ea:ce:0d:8a:31:c6:2a:30:9e:14:56:e8:82:64:b2:a3:
         4c:3a:be:85:8f:a1:93:98:57:6b:9c:e3:a3:dd:d6:82:79:11:
         93:93:00:67:f1:e3:c0:59:ed:7e:a7:4a:b7:2a:9a:7a:a8:93:
         d0:06:da:a1:c2:49:6a:fa:8c:03:d8:2b:68:40:42:07:98:d5:
         87:0e:22:6a:5d:26:bb:8e:e9:8b:48:69:5b:e6:f2:e2:da:8d:
         53:13:95:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:45:23 2025 by rpki-client