Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6/395880a2-10d1-3419-b556-377467c053ef.roa
File:                     395880a2-10d1-3419-b556-377467c053ef.roa (raw, json)
Hash identifier:          jIZIzS+SJK9nVxpxeStOmhObiGsd6ykZYSnv6xyZ5FU=
Subject key identifier:   B8:07:68:A0:61:7C:89:18:4B:25:C8:84:8D:73:41:5C:24:EC:FD:77
Certificate issuer:       /CN=d0ee24a2-eb87-4eba-aa78-bca70397cec6
Certificate serial:       010D0C9F4328584B5F66BC728F55C996DAAFA6B1
Authority key identifier: F2:24:BC:0E:BA:79:1D:83:D9:A2:B4:59:82:F7:6E:E3:A4:4D:88:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6/395880a2-10d1-3419-b556-377467c053ef.roa
Signing time:             Wed 01 Oct 2025 02:36:30 +0000
ROA not before:           Wed 01 Oct 2025 02:36:30 +0000
ROA not after:            Tue 30 Dec 2025 03:36:30 +0000
asID:                     398415
IP address blocks:        148.163.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6/d0ee24a2-eb87-4eba-aa78-bca70397cec6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6/d0ee24a2-eb87-4eba-aa78-bca70397cec6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:66:bc:72:8f:55:c9:96:da:af:a6:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0ee24a2-eb87-4eba-aa78-bca70397cec6
        Validity
            Not Before: Oct  1 02:36:30 2025 GMT
            Not After : Dec 30 03:36:30 2025 GMT
        Subject: CN=4aa83198-d90d-4aea-a86d-0651f86c58bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fa:d5:90:0d:b6:1a:eb:c4:1b:eb:84:23:91:
                    00:67:c2:fb:56:11:51:d8:83:fa:54:9e:9a:7a:6f:
                    fe:c0:b9:ab:5d:3b:e0:e0:5a:e0:84:1e:e5:ae:0c:
                    8b:3f:98:88:4a:95:27:46:13:4d:f9:6f:42:ba:67:
                    6b:7c:69:fd:36:5a:76:ce:6f:a1:2f:ed:ba:7d:36:
                    31:42:95:01:50:e3:c0:54:59:62:f9:48:c2:bc:3a:
                    5a:07:2d:d0:cd:73:ab:76:96:33:ce:11:31:30:40:
                    c8:da:cc:7b:a5:9a:e3:ef:40:58:9a:31:7c:4a:59:
                    50:4a:ae:3f:f9:c7:5b:ba:82:96:e6:c4:29:59:bb:
                    d7:1a:d1:c9:50:a6:75:cf:3b:c0:cb:26:b2:cb:ff:
                    18:9b:d5:c1:49:12:bb:03:c1:f7:ab:8d:2c:3b:a3:
                    5e:2d:d8:d9:9b:59:fe:4b:e9:03:c4:29:68:7f:0d:
                    a5:96:85:fa:e6:7e:f1:e7:8c:04:e1:f2:03:ba:3f:
                    96:e2:77:41:98:0f:65:6d:cd:55:da:ce:4f:c8:62:
                    8a:66:f5:a8:50:0c:d8:ea:9e:6f:e9:87:6f:2d:63:
                    42:f5:a5:38:d6:09:ca:8a:79:37:3e:e3:d5:8b:f2:
                    9e:1c:2d:48:e2:d1:35:cb:01:b9:f3:a7:56:80:1e:
                    22:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:07:68:A0:61:7C:89:18:4B:25:C8:84:8D:73:41:5C:24:EC:FD:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6/395880a2-10d1-3419-b556-377467c053ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6/d0ee24a2-eb87-4eba-aa78-bca70397cec6.crl

            X509v3 Authority Key Identifier:
                keyid:F2:24:BC:0E:BA:79:1D:83:D9:A2:B4:59:82:F7:6E:E3:A4:4D:88:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d0ee24a2-eb87-4eba-aa78-bca70397cec6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.163.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:aa:d1:91:0d:0e:f1:22:05:2c:21:1c:23:86:f0:95:65:21:
         aa:f9:5f:27:2b:bf:7d:43:94:74:91:70:4e:a0:db:a3:95:12:
         c8:c9:23:2e:ca:6e:5a:0a:61:5b:1f:0d:a5:2a:33:7c:5b:49:
         61:54:02:88:89:e9:6c:cd:55:cb:37:6c:e7:e1:d6:c6:b1:40:
         86:45:48:4c:6e:3d:63:be:fa:29:5b:b9:f2:30:de:56:4a:33:
         a3:d2:fd:4b:93:19:22:76:f9:8f:88:f5:4a:b5:33:af:69:5d:
         af:34:f1:41:9b:6f:3e:d4:61:5d:0c:93:be:88:ef:9e:3e:38:
         cc:30:4c:5f:18:ee:e3:fb:23:15:2a:d2:15:10:30:bd:e6:fe:
         ef:66:6b:20:46:65:34:ce:0a:54:b1:9b:c7:f2:ad:d8:9b:0e:
         25:e9:ba:c4:96:37:d5:2c:62:02:d6:d6:65:7d:09:a4:fb:aa:
         95:d9:f4:5a:f2:14:a1:78:fa:f1:d9:cc:0e:65:91:52:bb:a5:
         9a:33:74:7e:a6:88:31:9e:6c:97:ba:b7:6e:67:fe:83:98:75:
         0a:8c:00:79:a0:6d:a5:ac:64:d9:12:4a:bc:59:34:2b:7c:0f:
         21:26:f0:d1:12:d4:4e:44:e4:84:dd:b5:81:bd:36:63:a5:da:
         0e:0e:d5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 04:02:54 2025 by rpki-client