Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/d3bab822-4cb5-3a34-898f-cd524c33f81c.roa
File:                     d3bab822-4cb5-3a34-898f-cd524c33f81c.roa (raw, json)
Hash identifier:          dEsiceX1pfX07mzgAdFj41e9b3oKDhBleesNc0tG4Pg=
Subject key identifier:   A9:96:A6:58:62:29:41:8F:5F:25:73:58:BD:81:2C:6B:9E:C6:21:39
Certificate issuer:       /CN=2026b921-2d83-4f47-a24e-db9a3c451c72
Certificate serial:       010D0C9F4328584B08ABEC4FE0E2D87397F57C00
Authority key identifier: 10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/d3bab822-4cb5-3a34-898f-cd524c33f81c.roa
Signing time:             Sun 31 Aug 2025 01:00:33 +0000
ROA not before:           Sun 31 Aug 2025 01:00:33 +0000
ROA not after:            Sat 29 Nov 2025 02:00:33 +0000
asID:                     2648
IP address blocks:        132.163.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:08:ab:ec:4f:e0:e2:d8:73:97:f5:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2026b921-2d83-4f47-a24e-db9a3c451c72
        Validity
            Not Before: Aug 31 01:00:33 2025 GMT
            Not After : Nov 29 02:00:33 2025 GMT
        Subject: CN=07a7a677-b10c-4775-b031-f4609aacd10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:7d:17:09:33:c4:c3:06:e6:71:93:bf:28:
                    d1:4d:2c:a0:ee:14:46:af:86:8d:0f:87:b6:c6:f2:
                    d4:56:14:a5:a1:85:e4:05:2d:aa:07:69:71:0a:df:
                    0f:4f:58:62:b6:c9:b5:59:0f:0f:68:97:a7:79:aa:
                    cb:a5:97:68:a7:04:b2:26:33:2e:7f:25:63:78:3e:
                    f2:e8:53:fa:a1:86:5b:d7:52:34:ad:ae:f7:e0:04:
                    e1:3a:08:32:4c:de:1e:36:d4:28:ab:ba:38:0d:76:
                    80:2b:96:27:79:7f:64:1a:5d:54:4c:fd:61:8f:4d:
                    70:36:69:81:2e:f1:c1:eb:38:2b:ed:f8:b2:12:4b:
                    ec:a7:44:6c:5f:3d:61:4a:39:78:39:2f:f8:cf:58:
                    a9:fb:38:20:ee:fa:bc:5f:f9:43:1d:94:10:ef:0f:
                    8e:a2:39:44:4f:6d:30:7a:aa:2f:c9:e2:16:a6:d2:
                    ea:80:e8:3a:e1:37:23:fc:50:3f:45:59:87:ac:59:
                    94:08:c6:55:20:6b:7d:d4:d7:5e:88:56:5e:37:10:
                    8a:0a:97:4d:ec:9c:11:e3:46:3a:79:40:02:5f:58:
                    52:ec:de:d9:c7:76:fd:3c:e5:c2:be:13:2f:e0:ad:
                    d0:3c:40:1d:c6:b7:c5:27:ae:1d:39:85:45:2f:41:
                    c6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:96:A6:58:62:29:41:8F:5F:25:73:58:BD:81:2C:6B:9E:C6:21:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/d3bab822-4cb5-3a34-898f-cd524c33f81c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72/2026b921-2d83-4f47-a24e-db9a3c451c72.crl

            X509v3 Authority Key Identifier:
                keyid:10:D1:A5:25:83:0C:98:91:7C:6D:AF:91:D5:6C:2E:5F:F7:2D:7D:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2026b921-2d83-4f47-a24e-db9a3c451c72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.163.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:0a:41:4d:76:4b:9e:a5:4a:46:2a:0f:6e:5b:96:e7:f2:2e:
         30:ee:f2:a9:4b:14:81:f4:6a:5c:87:95:39:e4:bf:46:7b:f6:
         5e:de:18:ad:99:fb:d7:26:31:57:55:62:f5:e3:57:f6:24:4e:
         fd:4c:87:6b:56:3c:30:1c:94:0d:22:32:c1:1a:d4:e2:ef:fb:
         06:62:7d:12:d5:71:ad:00:80:2d:42:db:68:85:fe:c9:b1:c1:
         6f:71:e0:22:1b:4d:4a:aa:c0:78:62:24:6a:ba:97:bb:be:3e:
         31:f2:e6:b6:ff:50:7c:22:2d:55:c3:6b:28:79:6a:4d:95:4e:
         60:44:fd:75:36:79:1e:f6:7f:a3:6d:90:ce:2f:c3:8f:68:e4:
         43:9d:ab:ae:7a:de:a1:a8:11:8f:a8:d8:e8:dd:aa:52:83:35:
         3f:f5:59:10:49:3f:73:1e:f2:14:69:ea:8f:89:c7:9d:77:13:
         4d:87:46:c4:ff:8e:6a:ca:a3:18:09:98:1a:a7:0b:fb:8f:75:
         f5:66:fb:06:b1:09:21:f0:31:b8:8d:b6:11:cc:eb:19:3e:62:
         c3:69:3a:05:33:d1:89:92:57:5a:ed:a7:6b:8a:23:90:5a:04:
         e2:7b:fb:2e:01:cd:76:6a:1a:af:b0:71:08:4c:2a:a2:7e:18:
         f1:ef:1b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:55:42 2025 by rpki-client