Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/1f1e6404-f00e-3361-a502-ee58a6bd11fd.roa
File:                     1f1e6404-f00e-3361-a502-ee58a6bd11fd.roa (raw, json)
Hash identifier:          0TKTxlVrof/EUvR3jPA4NLHn1u0rgFCaTsi91Xglw9o=
Subject key identifier:   FA:4A:FA:22:98:A1:9E:A1:26:A4:1C:88:64:1E:36:A8:C6:9F:7B:15
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584B08ABED25705B46AB2816C940
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/1f1e6404-f00e-3361-a502-ee58a6bd11fd.roa
Signing time:             Sun 31 Aug 2025 01:00:33 +0000
ROA not before:           Sun 31 Aug 2025 01:00:33 +0000
ROA not after:            Sat 29 Nov 2025 02:00:33 +0000
asID:                     2648
IP address blocks:        132.163.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:08:ab:ed:25:70:5b:46:ab:28:16:c9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Aug 31 01:00:33 2025 GMT
            Not After : Nov 29 02:00:33 2025 GMT
        Subject: CN=b3bbeb5c-8b12-4070-aedd-5512b1db2b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9f:a2:fd:08:d5:3c:cc:3a:51:94:fc:d1:ca:
                    64:63:74:4c:fc:35:78:b6:99:28:f3:c4:11:3e:db:
                    59:f4:e8:a3:b2:ec:f8:c3:b5:f8:63:21:b0:3f:02:
                    92:f9:87:a6:87:a5:6e:fe:e8:86:e0:b4:4e:e6:31:
                    2a:4f:3c:12:8a:31:5e:0d:96:f2:6e:a2:f4:9b:39:
                    b7:29:8e:5e:2a:cf:ff:5d:4a:08:37:df:00:ee:ba:
                    0b:db:53:9d:43:f4:1f:65:71:0e:7d:8c:33:6a:77:
                    52:69:93:ad:83:5d:b9:b9:08:70:cb:08:75:cb:02:
                    8d:e9:b2:e5:3c:8e:96:1f:8b:10:b9:2b:9f:9f:0e:
                    13:f5:a0:2d:87:dd:52:4d:8d:be:71:f3:90:62:44:
                    15:3f:65:03:77:b3:be:7d:c1:bc:16:e3:65:e7:01:
                    19:06:5f:f3:a8:52:c7:e4:ee:95:b7:b0:52:97:bb:
                    e1:e3:a3:5b:5f:db:f4:48:5e:d0:25:15:67:d8:52:
                    28:2a:70:fa:0e:00:a7:d4:e3:89:94:71:03:34:52:
                    c4:b6:b7:d2:3a:4d:c6:de:4f:3d:14:63:65:d7:51:
                    7c:19:31:6c:b9:64:f4:d7:69:3f:fb:98:a8:2f:41:
                    de:7f:61:d0:e6:59:a4:89:5e:0d:a6:75:92:9d:30:
                    2f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4A:FA:22:98:A1:9E:A1:26:A4:1C:88:64:1E:36:A8:C6:9F:7B:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/1f1e6404-f00e-3361-a502-ee58a6bd11fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.163.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:cc:5e:fc:16:79:03:47:9c:3a:9a:a6:c7:68:74:4d:0e:bc:
         35:93:8f:3c:af:db:8b:3b:6a:2b:12:02:7c:4e:7a:14:26:a3:
         fb:fb:40:09:3c:eb:1b:5a:14:93:d2:9f:15:db:d3:75:bd:18:
         c6:99:56:af:df:86:24:e3:b1:9b:e2:84:f8:92:05:92:a7:2d:
         05:6c:78:55:82:4b:b4:54:b5:9d:16:14:27:5b:42:3b:b6:98:
         c7:e0:e9:7d:64:54:66:29:15:5b:d1:a5:8c:81:c3:1d:0d:74:
         3f:56:40:b6:7c:81:68:82:6e:d1:44:d3:2e:6a:98:b2:8d:62:
         1e:8a:5e:43:ff:20:1c:3e:a1:ad:dc:56:b9:0e:2d:1d:95:2d:
         8d:c7:f6:d4:19:76:4e:a1:72:1a:6b:44:b8:b9:e5:97:6c:1c:
         7c:4e:75:45:9d:06:7f:d3:b1:c0:a8:bb:5b:0d:c4:55:5d:35:
         0d:b5:bb:1f:46:38:33:fe:a2:6b:b4:75:cb:7b:10:ce:3a:96:
         fe:cb:63:9b:7f:c8:24:e5:c3:f5:5d:f3:16:da:19:d8:d0:fa:
         5e:ae:98:7d:8b:f7:e2:60:0c:b4:ce:d3:84:e4:11:83:68:94:
         72:25:6c:49:b1:b1:84:aa:c8:3f:4d:79:28:ba:1d:1a:f7:5c:
         8e:f2:97:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:55:32 2025 by rpki-client