Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/130480d0-ed84-3a44-9466-45f49561ad6e.roa
File:                     130480d0-ed84-3a44-9466-45f49561ad6e.roa (raw, json)
Hash identifier:          OO4nFBpGTlxd5ONFHn304G+PBu+rVIPnptdWkoWiKgY=
Subject key identifier:   19:A2:A8:25:14:36:61:05:6F:B8:95:4D:3F:62:07:6E:65:E0:24:08
Certificate issuer:       /CN=c54d5f74-3f0f-446f-b8af-258f72dede61
Certificate serial:       010D0C9F4328584B79BCBB6789E137BAAD3EC7E0
Authority key identifier: B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/130480d0-ed84-3a44-9466-45f49561ad6e.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     174
IP address blocks:        199.167.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:bb:67:89:e1:37:ba:ad:3e:c7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c54d5f74-3f0f-446f-b8af-258f72dede61
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=48964a51-2a78-42e2-883f-be1fb3ac673d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3c:32:ee:2d:eb:bf:aa:43:c0:53:12:a1:0e:
                    3b:b3:d4:97:29:a3:4c:db:ba:69:7e:d5:ee:91:8d:
                    80:c6:cc:c6:f3:08:53:7f:36:c1:53:ff:82:bc:0e:
                    fc:24:61:ca:9c:3d:0b:0c:c3:a8:23:c7:dc:81:f1:
                    73:01:da:01:1d:f1:15:a8:8c:4a:be:80:72:39:9f:
                    c1:e1:22:60:e3:21:79:56:f5:c1:6f:c8:b4:40:0d:
                    5a:75:70:a2:91:5c:56:49:e2:65:0d:67:e7:e7:ea:
                    34:e9:7b:7f:dc:19:56:ce:d7:bc:90:40:53:b1:2e:
                    47:83:28:5e:2b:ac:09:1f:63:41:58:17:3a:2f:0b:
                    09:49:4f:6d:07:3c:fd:d4:7c:51:e4:47:88:e4:3c:
                    e7:fd:42:b3:03:04:1f:d2:09:4c:2a:93:54:88:68:
                    96:4e:66:2f:6f:cb:de:cb:0a:9d:04:39:ca:55:c1:
                    0a:61:47:be:37:a2:33:0c:7f:92:a9:b3:9f:5e:9c:
                    38:35:d5:c4:e2:3e:d5:c8:86:ff:2b:8a:2e:ea:50:
                    3c:b4:5b:ed:dd:0b:ee:07:ca:68:cb:aa:ba:5b:19:
                    31:e8:f8:75:7e:c0:dd:74:d3:23:50:5b:a0:4b:13:
                    23:e4:cf:bb:98:80:ef:85:75:3f:a4:30:fd:88:42:
                    d8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A2:A8:25:14:36:61:05:6F:B8:95:4D:3F:62:07:6E:65:E0:24:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/130480d0-ed84-3a44-9466-45f49561ad6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61/c54d5f74-3f0f-446f-b8af-258f72dede61.crl

            X509v3 Authority Key Identifier:
                keyid:B5:CA:9C:D5:AE:53:00:A7:55:A8:FB:D3:65:18:4A:07:D2:CC:E2:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c54d5f74-3f0f-446f-b8af-258f72dede61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.167.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:87:5b:c0:51:69:65:8a:30:13:1d:27:e9:86:68:f3:8a:13:
         aa:1c:11:43:d7:30:c5:be:ff:76:0c:5b:75:43:1b:fd:97:58:
         65:de:ea:26:fc:cf:f9:47:36:e0:56:58:ac:c1:5c:aa:44:5a:
         c5:a2:88:e4:ff:26:84:2b:2b:44:8e:7c:83:17:61:7b:a7:49:
         a7:fe:71:99:69:69:9c:17:a9:61:22:b1:75:67:b7:7d:fc:12:
         38:43:42:63:2a:ec:32:00:bb:a9:be:83:c2:dd:09:67:18:ff:
         72:3a:b8:40:4c:83:89:dd:5a:c5:f6:c4:67:99:56:cb:d9:a2:
         4c:24:7f:e2:90:6a:37:6a:e1:e5:00:0d:a0:3f:8e:a3:09:27:
         a3:90:b3:4e:51:c6:82:51:cd:ab:6f:66:50:4a:51:96:23:fd:
         6a:4b:b2:ac:09:6e:e6:8b:80:9e:77:41:ec:df:9a:ff:c6:7b:
         7b:6b:27:6e:1e:82:f9:a2:bf:82:b7:fc:30:aa:cc:4c:66:fa:
         7b:92:83:12:b5:b8:f2:7f:da:65:7a:56:cd:1a:09:c9:58:37:
         a3:4f:57:56:9d:1c:a3:61:ae:05:35:76:ef:59:39:9c:b5:b8:
         04:d9:e8:d8:26:7d:56:a5:6d:d8:2f:34:a1:21:0b:c6:6c:b2:
         c3:6c:fc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 17:11:39 2025 by rpki-client