Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/c1e73cf1-f813-32f8-b6e9-c716cafd985a.roa
File:                     c1e73cf1-f813-32f8-b6e9-c716cafd985a.roa (raw, json)
Hash identifier:          ZLn6ZwMwNVTr1dKY5Swt3LWm24T4A6EoZXdYK/dXYdY=
Subject key identifier:   95:AE:CA:E0:9A:3D:F4:5D:4F:1C:47:06:04:94:0E:4D:4E:39:03:57
Certificate issuer:       /CN=61078829-6930-46b0-9ac8-91898d36b056
Certificate serial:       010D0C9F4328584B434C6A7D78343D7E62A1CC00
Authority key identifier: 20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/c1e73cf1-f813-32f8-b6e9-c716cafd985a.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     33548
IP address blocks:        205.157.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:6a:7d:78:34:3d:7e:62:a1:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61078829-6930-46b0-9ac8-91898d36b056
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=87c79e2d-eccf-4f9a-ba04-2af6ffe6a5c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:56:29:eb:8f:29:2e:5b:ae:11:9c:15:c5:ab:
                    e3:f1:04:40:a0:ab:08:c6:b2:f2:ec:8a:85:0b:27:
                    0b:58:d1:b3:f5:f7:7e:d1:11:c4:c5:36:98:0c:13:
                    af:42:c2:9f:3d:13:52:de:4a:b2:cb:8c:97:a8:fc:
                    9a:89:ff:bc:db:9a:c1:30:c3:f3:66:59:39:5f:2a:
                    57:d8:90:23:1d:84:5a:0e:ca:c3:15:74:42:aa:96:
                    38:f9:39:26:26:55:67:54:ca:14:21:f5:21:10:2d:
                    af:65:ee:25:32:bf:9d:36:9c:62:9c:dd:17:c3:eb:
                    bf:ac:eb:b6:f9:cd:c4:ce:93:95:fa:a2:4e:da:e0:
                    47:13:7a:da:cf:db:c5:c6:a0:b0:77:49:c9:a2:d8:
                    98:e2:69:25:4b:0d:77:bf:07:f0:30:81:89:02:83:
                    e5:b7:1f:9a:03:00:f5:50:81:b0:0e:ec:5e:53:5b:
                    52:6f:ad:b8:9d:c4:fd:6f:4f:e3:c8:12:cb:8f:3c:
                    57:5f:8e:94:6d:8e:6f:a7:b8:97:2b:bb:df:e6:7a:
                    fc:c6:a8:69:b0:44:0b:b6:db:54:80:64:79:6f:e6:
                    a2:63:41:d7:c4:fb:49:f0:6a:f5:29:e7:e6:71:59:
                    8d:c0:cc:52:84:1b:a8:10:1e:37:5d:90:8d:e3:8c:
                    18:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AE:CA:E0:9A:3D:F4:5D:4F:1C:47:06:04:94:0E:4D:4E:39:03:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/c1e73cf1-f813-32f8-b6e9-c716cafd985a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056/61078829-6930-46b0-9ac8-91898d36b056.crl

            X509v3 Authority Key Identifier:
                keyid:20:45:D5:DA:27:BB:4B:89:4D:D4:82:B9:66:A0:0B:C0:B6:B6:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/61078829-6930-46b0-9ac8-91898d36b056.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.157.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:9c:02:38:6d:72:e3:9d:d4:95:ee:a7:85:1a:8a:fd:59:b0:
         be:38:11:74:99:ac:56:d6:b5:32:9b:aa:32:17:19:03:f3:9b:
         75:64:35:5f:40:0e:a6:60:6f:c1:4b:d2:79:f1:bb:6a:5c:d7:
         b5:ba:a3:19:51:36:e2:54:e1:bc:3a:3f:40:d6:90:50:5d:98:
         7a:49:d1:54:83:99:ea:19:4f:e7:8b:47:e4:09:18:62:51:98:
         db:e2:35:10:1d:9d:a8:a9:10:d5:7b:e1:1f:a4:f9:54:8e:67:
         a4:30:80:6c:3f:90:07:a3:b5:94:15:49:de:04:ee:06:78:9d:
         2e:35:ce:ac:7d:ef:c9:11:3b:44:d0:d4:c7:e9:51:41:cd:29:
         be:b8:0d:05:da:3a:84:2a:ab:6d:48:25:98:36:cc:cc:55:03:
         dd:ba:25:b9:ca:3f:ca:88:ba:c2:91:26:c5:74:3b:83:c9:23:
         3b:2d:71:96:6a:9d:0e:d7:6a:be:70:0f:40:85:5b:88:a8:04:
         c2:52:7f:c5:43:de:4c:ed:27:e0:bb:66:e0:81:e5:46:29:97:
         7f:2b:b8:bc:45:e2:f6:0f:f1:07:2e:66:5e:fc:bc:8c:98:ac:
         72:25:81:61:b2:27:42:1f:2b:99:6f:a1:13:8d:04:30:4b:c3:
         95:8b:41:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:30:27 2025 by rpki-client