Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/a121cf8c-2791-3090-beba-59c1406bbfdc.roa
File:                     a121cf8c-2791-3090-beba-59c1406bbfdc.roa (raw, json)
Hash identifier:          4tNHNC8gjoRjl+Yb4zM6fGbV4JDRF/5gN+jeR8+DDv0=
Subject key identifier:   A5:A4:55:B9:7F:4D:41:6D:C2:59:FF:2F:CE:80:85:C8:44:E2:D5:2B
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584B08ABED7E5D79BA88BCDFA980
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/a121cf8c-2791-3090-beba-59c1406bbfdc.roa
Signing time:             Sun 31 Aug 2025 01:00:33 +0000
ROA not before:           Sun 31 Aug 2025 01:00:33 +0000
ROA not after:            Sat 29 Nov 2025 02:00:33 +0000
asID:                     2648
IP address blocks:        132.163.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:08:ab:ed:7e:5d:79:ba:88:bc:df:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Aug 31 01:00:33 2025 GMT
            Not After : Nov 29 02:00:33 2025 GMT
        Subject: CN=6add9333-853d-40f2-9301-f9e7f2dcf15a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f4:58:11:e3:eb:71:de:1a:7d:f1:df:0b:8c:
                    73:c9:40:dc:b7:bb:59:aa:e0:5a:4c:d9:a3:ae:46:
                    fb:f5:d8:ef:a2:e8:eb:16:ac:9c:45:c5:3f:65:83:
                    2a:c6:45:47:23:f6:99:17:ea:28:51:93:9a:ec:a1:
                    2e:38:0c:24:a3:36:23:cf:fe:75:24:54:2f:d3:c6:
                    52:63:d5:d4:ad:71:af:95:74:8a:17:ba:5b:78:13:
                    7e:ac:c5:32:38:87:a8:f2:f5:28:d0:52:bf:05:74:
                    0a:6e:dd:6b:94:d5:5f:45:4e:af:ac:4a:9f:45:24:
                    3c:bf:7a:0b:57:db:c8:63:70:c6:df:4e:17:28:11:
                    6f:2e:83:b1:f1:85:fb:aa:c3:1a:87:b3:0d:91:89:
                    69:dc:9c:07:a0:d4:82:1a:9a:dd:1d:04:4a:b5:28:
                    38:0d:c7:e1:a9:b8:a4:28:e4:d1:33:b7:49:85:b3:
                    b7:e9:2f:af:01:c0:39:ea:d5:3c:f0:8a:2d:4f:24:
                    0f:34:40:8a:46:ba:51:77:e2:31:83:4d:c2:78:4f:
                    97:02:ed:fe:74:75:e3:73:d7:cc:32:89:b1:4d:a0:
                    ea:96:a1:50:02:9a:e7:3b:b4:1a:8d:22:ae:c2:d1:
                    50:62:3f:77:9d:20:f7:b1:2a:4d:ac:fc:52:2f:67:
                    54:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A4:55:B9:7F:4D:41:6D:C2:59:FF:2F:CE:80:85:C8:44:E2:D5:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/a121cf8c-2791-3090-beba-59c1406bbfdc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.163.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:e4:7a:9e:43:c6:c4:06:81:32:19:c2:f0:fc:e8:44:77:0e:
         a1:92:a8:fb:85:4a:e3:ea:87:74:64:7c:45:cd:38:74:9b:34:
         c1:5b:03:84:81:d7:4c:cf:17:a2:78:d5:4d:b1:57:1b:f6:8d:
         68:41:b2:1d:74:2d:76:a4:6a:89:38:2a:68:6b:ad:a0:fc:b8:
         5e:01:06:3f:59:42:b3:64:d5:d4:4c:a7:4c:eb:43:6b:d5:68:
         8b:76:39:56:bf:57:2a:e0:7d:33:5f:d3:23:d1:13:78:90:a9:
         47:dd:4a:d2:1e:ef:10:a4:bc:20:53:80:78:f0:61:91:d1:c4:
         4b:9e:51:ec:d9:45:b3:67:e0:b0:c5:96:0e:c3:5b:66:60:9d:
         a2:32:89:c7:09:1b:60:5a:63:03:fc:e2:ee:fc:a8:ad:ba:8a:
         0d:1d:5e:2f:a6:09:b4:10:cd:c9:c9:03:cc:fa:db:3d:7c:a6:
         02:fa:cf:de:b3:a0:76:32:64:94:99:ff:d7:0f:5b:1e:a6:f8:
         5d:cf:ea:95:da:7a:5e:0c:e1:18:af:e6:58:04:ca:ef:57:0e:
         f3:e0:19:50:15:e1:cd:8e:0d:17:56:df:02:3e:96:c4:37:b7:
         a2:41:c7:29:0f:8a:e1:04:4b:05:f6:63:73:43:cf:03:b3:d4:
         f6:63:19:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:52:16 2025 by rpki-client