Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/273f479d-552e-4637-9ce7-dc65fb9a170b/a221ab14-25b1-3beb-84fa-347983f15aae.roa
File:                     a221ab14-25b1-3beb-84fa-347983f15aae.roa (raw, json)
Hash identifier:          J3yhcHIwMFMxmevTAHI2lzvVTvU5kuH0vaHOeK+ohi0=
Subject key identifier:   AB:F7:7B:58:7E:4B:2B:0A:23:07:1F:E2:9C:78:F0:68:E5:10:1B:BE
Certificate issuer:       /CN=273f479d-552e-4637-9ce7-dc65fb9a170b
Certificate serial:       010D0C9F4328584B486D328977D763A44132AA00
Authority key identifier: FC:D9:44:00:4B:FC:49:F5:1B:46:35:BD:B6:60:06:A5:58:19:65:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/273f479d-552e-4637-9ce7-dc65fb9a170b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/273f479d-552e-4637-9ce7-dc65fb9a170b/a221ab14-25b1-3beb-84fa-347983f15aae.roa
Signing time:             Mon 22 Sep 2025 21:05:55 +0000
ROA not before:           Mon 22 Sep 2025 21:05:55 +0000
ROA not after:            Sun 21 Dec 2025 22:05:55 +0000
asID:                     8075
IP address blocks:        192.160.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/273f479d-552e-4637-9ce7-dc65fb9a170b/273f479d-552e-4637-9ce7-dc65fb9a170b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/273f479d-552e-4637-9ce7-dc65fb9a170b/273f479d-552e-4637-9ce7-dc65fb9a170b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/273f479d-552e-4637-9ce7-dc65fb9a170b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:6d:32:89:77:d7:63:a4:41:32:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=273f479d-552e-4637-9ce7-dc65fb9a170b
        Validity
            Not Before: Sep 22 21:05:55 2025 GMT
            Not After : Dec 21 22:05:55 2025 GMT
        Subject: CN=0a7f1690-57eb-4125-92e1-4cc22d6627ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ed:38:ce:15:c7:a6:0a:08:58:07:4d:aa:bd:
                    3e:c3:10:c4:5e:d9:3c:20:7a:ad:e1:d2:43:6f:63:
                    62:e4:a1:87:7b:fd:77:f4:bd:aa:d9:62:77:8f:31:
                    af:9c:98:9a:80:b0:95:a0:a9:d5:8a:2f:bc:dd:07:
                    8f:e9:92:53:08:31:30:99:e1:88:ba:68:fe:e8:db:
                    89:74:af:6b:cd:58:4a:e3:b2:b7:15:b0:9c:cf:ee:
                    6a:9c:96:9a:bf:02:63:e8:3a:8f:11:93:a6:27:3c:
                    b0:2a:89:52:3d:4e:88:68:d5:c7:3a:a1:2f:a2:1c:
                    57:31:7c:c6:e5:64:eb:21:db:2b:8d:c6:48:88:86:
                    bb:aa:4d:1a:e1:ce:a4:22:86:a9:56:a8:e6:f7:1b:
                    0e:2b:84:c0:85:70:f3:4e:2f:62:f3:50:f2:6e:1d:
                    a5:3b:4f:c2:24:70:5a:88:3a:68:b0:38:82:16:44:
                    a2:8c:de:b5:e8:5c:fc:9b:9c:a7:13:0f:32:f0:c9:
                    b7:95:78:6c:aa:0b:1b:cd:89:ba:f7:f2:c6:4b:26:
                    1b:e1:de:f0:61:e5:d3:e3:13:d6:a8:9e:e7:ca:84:
                    06:bc:ae:d9:fd:8a:3e:ff:db:a2:f3:51:08:ed:bf:
                    0c:76:06:59:cd:4a:be:9c:73:cc:f3:f6:29:13:26:
                    ca:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:F7:7B:58:7E:4B:2B:0A:23:07:1F:E2:9C:78:F0:68:E5:10:1B:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/273f479d-552e-4637-9ce7-dc65fb9a170b/a221ab14-25b1-3beb-84fa-347983f15aae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/273f479d-552e-4637-9ce7-dc65fb9a170b/273f479d-552e-4637-9ce7-dc65fb9a170b.crl

            X509v3 Authority Key Identifier:
                keyid:FC:D9:44:00:4B:FC:49:F5:1B:46:35:BD:B6:60:06:A5:58:19:65:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/273f479d-552e-4637-9ce7-dc65fb9a170b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.160.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:0c:a4:bf:c4:a3:f2:4f:aa:76:78:2a:ff:dd:cd:10:81:d0:
         fc:5b:07:ec:51:2f:b5:38:d5:18:56:6c:d0:06:7a:55:88:43:
         b7:c5:46:61:de:4a:ff:ff:74:2e:51:61:de:18:9b:71:09:3a:
         cb:a2:2b:1f:ea:8f:47:49:97:f2:a5:d9:3f:48:9e:ef:fd:78:
         4b:92:ce:d2:47:44:d0:ba:84:a8:f5:59:40:f8:9a:bc:dd:64:
         18:58:9e:6c:6a:f3:45:e7:1b:a4:22:e4:1e:8c:10:a6:6e:11:
         d7:73:f3:fb:96:0c:b7:2b:cf:87:93:19:90:c6:d9:dd:c5:7c:
         c3:ac:a3:1b:d6:cb:63:f6:b4:da:43:9a:a9:06:8d:37:04:1d:
         74:21:87:47:92:c9:f7:0c:69:69:c5:30:21:bc:65:09:74:ba:
         ae:4c:8b:32:48:8d:22:57:e5:ba:46:13:03:8e:af:fb:00:61:
         d1:f8:23:be:db:08:5d:ef:65:72:9c:0a:97:a6:58:01:96:58:
         12:4d:51:5c:79:b5:de:1a:2b:f2:4b:cc:4a:d4:7a:5b:fa:34:
         36:65:ce:8b:d7:e3:d9:18:c9:74:98:64:85:5f:d8:3e:43:6b:
         36:0e:77:cb:2b:1f:f1:e3:b4:55:39:31:ba:cd:2a:e2:97:6f:
         f2:2f:4f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:50:42 2025 by rpki-client