Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/b5ec99c0-15fb-304b-a9b3-b3e97ad0cc59.roa
File:                     b5ec99c0-15fb-304b-a9b3-b3e97ad0cc59.roa (raw, json)
Hash identifier:          jClziexZ4+HyWcKzpfAdqyVpEHYmDFk8/J0g+P+dP9A=
Subject key identifier:   2F:C5:F6:99:94:77:88:21:D8:0E:33:D2:C4:68:0D:1F:F3:33:1F:C1
Certificate issuer:       /CN=fe86722c-27ec-4059-a1ef-757cf5e15715
Certificate serial:       010D0C9F4328584B0A1158EDFC818E901DAA8100
Authority key identifier: 9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/b5ec99c0-15fb-304b-a9b3-b3e97ad0cc59.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     18794
IP address blocks:        130.156.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:58:ed:fc:81:8e:90:1d:aa:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe86722c-27ec-4059-a1ef-757cf5e15715
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=87d3c9c9-1d14-4d6c-985f-cb6fc4999fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:65:94:15:1c:07:00:38:ae:76:cf:3e:65:db:
                    2b:dd:08:1d:63:4a:b0:00:17:02:19:98:16:99:b8:
                    d0:d1:d2:cb:56:4f:b9:95:64:f5:1f:f9:2c:77:41:
                    b7:d5:dd:71:d8:96:d8:4f:86:53:6c:1f:4b:65:2d:
                    8a:c5:2e:c7:7f:69:f9:23:d2:ef:b0:18:0a:2f:99:
                    eb:90:d1:d7:90:a3:6c:3e:47:58:89:cf:2a:19:cf:
                    4b:1b:49:b1:c6:98:73:ca:a6:2b:51:be:6d:d7:92:
                    97:76:9b:67:67:a3:59:13:d3:c8:46:19:31:56:55:
                    e3:fb:12:20:90:6d:15:1f:53:2c:cd:17:dd:c7:bb:
                    40:94:98:61:41:5f:70:5e:85:30:05:96:15:19:88:
                    18:4c:30:dc:4a:db:90:7e:f9:ac:1b:2c:b8:b4:25:
                    e5:96:d6:64:a8:1f:e9:bf:bb:ee:13:52:f5:c5:63:
                    11:6c:a6:75:93:79:68:cd:4a:ee:62:71:6c:d5:55:
                    b2:28:08:ac:95:7f:14:f7:5d:7b:f6:a2:03:23:cb:
                    4a:d7:98:3f:f6:4c:37:87:c3:2e:b2:9a:eb:75:8f:
                    d4:44:c5:c7:a5:2d:32:45:f1:81:9c:2b:b4:82:4e:
                    5b:83:fc:22:0f:88:66:06:91:78:f2:29:f5:89:6a:
                    f2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C5:F6:99:94:77:88:21:D8:0E:33:D2:C4:68:0D:1F:F3:33:1F:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/b5ec99c0-15fb-304b-a9b3-b3e97ad0cc59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715/fe86722c-27ec-4059-a1ef-757cf5e15715.crl

            X509v3 Authority Key Identifier:
                keyid:9C:AE:A3:9B:81:AD:00:D5:A0:53:43:BF:27:13:EF:FF:47:D6:B8:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/fe86722c-27ec-4059-a1ef-757cf5e15715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.156.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:d3:15:42:79:96:6a:c1:f6:68:47:13:ef:f8:0f:60:87:f1:
         fd:5c:be:0a:85:fa:0a:96:92:87:dc:be:a6:37:0e:ed:98:c7:
         72:0d:bf:94:42:f6:0c:31:34:55:1e:69:37:a3:b2:3f:e7:61:
         d0:46:c7:98:7e:c8:71:5d:51:b1:fb:af:1a:26:4a:7d:0f:c8:
         73:20:93:1d:fa:45:ab:5f:84:f9:f0:12:2a:e4:b1:d1:ac:17:
         25:44:ea:17:53:e9:62:0d:90:c2:1f:bd:5f:f1:4f:d1:33:e2:
         26:01:e9:85:8b:1a:12:25:f7:dd:e8:d1:61:93:5d:4e:a2:27:
         3c:51:bb:b9:7b:39:ce:60:63:1b:1f:76:b2:48:65:58:df:48:
         4f:45:13:47:4f:56:88:1b:f7:d2:3d:82:18:3e:90:7f:e4:25:
         35:37:68:09:a7:12:70:19:80:84:a4:e1:67:d5:fc:47:42:09:
         db:5f:a5:32:21:6e:a3:88:3c:45:02:30:60:aa:8b:a7:f5:86:
         a2:a7:06:fb:ab:f2:a4:c6:9d:47:29:f1:45:de:21:a5:6b:97:
         78:f4:6e:ec:d1:d1:0d:c0:ec:4d:74:5c:da:23:49:a5:8f:24:
         7e:67:7c:8c:94:dc:d7:e9:24:b5:ad:1c:bf:1e:c8:70:86:11:
         5e:7d:2d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 16:06:45 2025 by rpki-client