Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/fbea9eb6-d812-3239-b876-c2f30fb49043.roa
File:                     fbea9eb6-d812-3239-b876-c2f30fb49043.roa (raw, json)
Hash identifier:          4/1Vy+GQHgM2xLfI86coQCb06CHBDyAUmuObE3LkfdU=
Subject key identifier:   DC:19:3A:8F:99:C5:F0:67:9C:F4:29:E4:6C:3B:BA:48:6D:DD:31:C1
Certificate issuer:       /CN=5028ee72-1629-4552-a11f-947b5a925519
Certificate serial:       010D0C9F4328584B61CBFADE3E86D9AB0BEFFC00
Authority key identifier: B5:40:88:3C:5D:5C:FB:66:45:84:AC:73:54:B4:D6:F9:08:1D:78:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/fbea9eb6-d812-3239-b876-c2f30fb49043.roa
Signing time:             Wed 01 Oct 2025 23:12:06 +0000
ROA not before:           Wed 01 Oct 2025 23:12:06 +0000
ROA not after:            Wed 31 Dec 2025 00:12:06 +0000
asID:                     399244
IP address blocks:        161.129.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:61:cb:fa:de:3e:86:d9:ab:0b:ef:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5028ee72-1629-4552-a11f-947b5a925519
        Validity
            Not Before: Oct  1 23:12:06 2025 GMT
            Not After : Dec 31 00:12:06 2025 GMT
        Subject: CN=bcb65dfb-595f-4abc-9d4f-381e6f9ad4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6a:e6:be:97:d6:5b:66:86:b5:f0:77:ee:07:
                    e7:12:5d:25:9c:a8:02:30:62:a8:f6:61:cb:17:f3:
                    01:9d:e4:c8:eb:70:37:04:e8:69:09:fb:72:d8:aa:
                    49:43:c4:d8:9c:e1:e1:e9:c4:fe:8d:6a:ad:2d:25:
                    bc:2d:de:d4:72:8d:6d:ad:62:82:22:dc:dc:6e:d5:
                    90:93:60:f5:16:f1:44:6f:c5:6f:ec:c8:0e:4d:0e:
                    ae:9d:86:5c:24:d0:6a:c6:ad:23:8d:8b:71:41:cb:
                    e3:27:75:a9:e6:22:c8:4d:91:45:7b:a2:81:ce:3a:
                    e0:60:8c:07:66:f9:27:e8:52:a3:86:45:d2:4f:e6:
                    20:56:ce:d2:ca:3a:56:a6:c1:14:8b:5d:8e:b9:c9:
                    91:64:a4:09:69:dd:2f:e8:30:d6:6e:f6:6b:e5:96:
                    e6:d9:72:13:ae:d9:ba:e9:22:23:7b:91:ae:cd:6b:
                    e0:af:7c:77:0b:5e:6b:d4:66:39:c1:7b:7c:1a:91:
                    f6:0d:76:8b:31:f2:ae:5a:1c:67:99:e7:e1:23:b0:
                    b7:67:f4:8a:91:ff:e3:23:c5:2e:ef:79:e3:51:33:
                    54:b0:0b:57:d5:98:96:2a:44:00:8a:fd:54:a3:d0:
                    31:17:96:00:a8:0a:61:eb:61:4f:bf:5b:a6:5a:7b:
                    68:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:19:3A:8F:99:C5:F0:67:9C:F4:29:E4:6C:3B:BA:48:6D:DD:31:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/fbea9eb6-d812-3239-b876-c2f30fb49043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519/5028ee72-1629-4552-a11f-947b5a925519.crl

            X509v3 Authority Key Identifier:
                keyid:B5:40:88:3C:5D:5C:FB:66:45:84:AC:73:54:B4:D6:F9:08:1D:78:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5028ee72-1629-4552-a11f-947b5a925519.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:6a:14:38:f5:a0:58:dd:13:06:c1:5c:22:ec:41:96:70:28:
         ee:af:a6:8d:60:39:c4:64:90:f8:e1:42:85:a1:33:51:2c:aa:
         f4:5d:1b:a0:be:f5:57:9a:3f:e0:dd:2b:5c:12:fd:47:bc:2e:
         95:eb:84:f9:aa:d6:e3:c7:23:15:b4:1a:22:62:64:b9:00:8b:
         23:a0:4a:e7:b0:1b:f3:87:0e:11:00:08:9c:fa:84:dc:3f:bc:
         ef:fb:c3:bf:b4:de:e9:f6:d9:37:d6:14:f5:53:cd:5a:16:15:
         25:ab:e7:33:6d:a1:3f:0e:ca:fc:82:5b:7d:b7:86:85:c1:6b:
         1e:a1:17:9e:c1:49:48:ed:8b:e4:e8:3e:7d:32:9e:94:8f:fd:
         e8:50:46:a7:bd:83:4a:7f:8f:fa:15:5b:cf:f2:bf:c3:9a:c2:
         7a:0c:f4:e6:5e:91:1e:13:bd:ca:5d:d8:eb:9d:76:0f:d7:34:
         1d:0e:79:c2:26:e7:e3:8a:54:68:06:7f:46:32:a5:2e:74:ec:
         a6:4b:b8:5f:19:44:fa:80:f1:d9:36:30:20:ca:17:25:3f:52:
         e7:a6:0a:9f:a6:55:f8:80:d5:78:4f:ce:e8:df:1f:e9:3d:08:
         f9:53:62:55:72:e4:c6:17:9b:18:ca:73:f7:31:17:eb:9a:78:
         dd:92:8c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 04:32:01 2025 by rpki-client