Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f182e0f3-804e-4487-8410-621fe31d5d60/52a76528-cf8c-3e2a-99c0-e909e2d9c1a7.roa
File:                     52a76528-cf8c-3e2a-99c0-e909e2d9c1a7.roa (raw, json)
Hash identifier:          BJLyk8c9PD1qTeBJnaAddsIkUt5tbKfSUyUR7MUJKm0=
Subject key identifier:   8C:D9:F6:64:10:0E:9D:6B:13:9E:C5:04:13:C8:14:46:2A:77:95:05
Certificate issuer:       /CN=f182e0f3-804e-4487-8410-621fe31d5d60
Certificate serial:       010D0C9F4328584B4FDC7A8E9A93FD410E78D000
Authority key identifier: 47:89:6A:58:42:AE:68:BA:51:FC:A1:76:59:99:C2:E1:5E:6B:89:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f182e0f3-804e-4487-8410-621fe31d5d60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f182e0f3-804e-4487-8410-621fe31d5d60/52a76528-cf8c-3e2a-99c0-e909e2d9c1a7.roa
Signing time:             Thu 25 Sep 2025 13:00:41 +0000
ROA not before:           Thu 25 Sep 2025 13:00:41 +0000
ROA not after:            Wed 24 Dec 2025 14:00:41 +0000
asID:                     13576
IP address blocks:        142.54.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f182e0f3-804e-4487-8410-621fe31d5d60/f182e0f3-804e-4487-8410-621fe31d5d60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f182e0f3-804e-4487-8410-621fe31d5d60/f182e0f3-804e-4487-8410-621fe31d5d60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f182e0f3-804e-4487-8410-621fe31d5d60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:dc:7a:8e:9a:93:fd:41:0e:78:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f182e0f3-804e-4487-8410-621fe31d5d60
        Validity
            Not Before: Sep 25 13:00:41 2025 GMT
            Not After : Dec 24 14:00:41 2025 GMT
        Subject: CN=847c7d9e-f789-4900-9494-31c34223d299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7f:50:2f:7c:96:46:8c:1e:f8:1c:77:f2:32:
                    71:b9:8b:cf:48:65:20:8b:9a:18:af:65:f9:b2:cb:
                    33:97:e4:83:1f:b3:64:8f:cd:09:dd:a0:d9:16:da:
                    0d:1b:b3:dd:21:83:20:93:26:96:b2:15:1d:7d:6a:
                    fe:65:cd:f5:0c:34:51:8e:1c:e8:df:d2:d7:7d:17:
                    68:72:40:26:b4:b4:a6:6a:8d:04:f7:cd:68:fc:da:
                    17:a6:f5:23:c0:fa:85:80:2c:8c:98:01:b8:63:72:
                    95:eb:21:c2:cb:09:5d:e1:ee:69:7e:3c:a7:f3:dc:
                    2d:08:84:9b:93:d7:a6:61:34:6b:83:7b:80:c4:6a:
                    09:a6:51:67:2f:e3:23:10:f9:02:15:44:74:51:fc:
                    24:80:64:f3:68:4e:ee:c8:9c:dc:2d:cc:2c:64:bd:
                    20:51:53:05:2d:9c:7f:31:45:fd:46:94:e8:ff:c2:
                    14:da:45:4f:a4:ea:36:32:63:d3:93:1d:3b:1a:79:
                    cc:66:17:02:a6:3e:55:fd:d8:f9:1e:05:8e:9c:ba:
                    ad:91:eb:c9:14:60:53:d1:84:6e:d1:9a:53:39:db:
                    43:3d:3b:ba:70:67:19:28:c7:ff:0a:09:ee:d0:14:
                    eb:b1:3f:6e:d4:8e:e3:2e:43:00:3b:84:41:d9:7f:
                    0e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D9:F6:64:10:0E:9D:6B:13:9E:C5:04:13:C8:14:46:2A:77:95:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f182e0f3-804e-4487-8410-621fe31d5d60/52a76528-cf8c-3e2a-99c0-e909e2d9c1a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f182e0f3-804e-4487-8410-621fe31d5d60/f182e0f3-804e-4487-8410-621fe31d5d60.crl

            X509v3 Authority Key Identifier:
                keyid:47:89:6A:58:42:AE:68:BA:51:FC:A1:76:59:99:C2:E1:5E:6B:89:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f182e0f3-804e-4487-8410-621fe31d5d60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:97:28:70:e4:b9:c9:da:3a:98:ad:db:a2:32:ef:c8:b4:bc:
         01:98:65:6f:78:03:db:38:6c:5b:b1:be:1b:1d:7b:1c:c3:4b:
         ad:be:a0:e9:6c:68:f9:bf:ea:d7:40:18:30:5d:75:e4:99:3c:
         a7:b2:95:4c:79:3a:1b:f8:e8:e1:91:93:b0:a0:b0:75:8a:e2:
         8f:72:e8:31:a6:a5:36:17:0b:33:e6:60:09:50:4b:d2:10:cd:
         1d:29:88:52:af:7f:08:b0:92:6f:95:d9:c6:1b:dd:03:35:24:
         f0:50:7c:fd:a9:77:91:a0:17:7b:53:9b:81:d3:3d:36:56:cf:
         76:c3:86:90:a0:20:3a:6b:ae:b3:a9:08:67:4b:7c:be:41:e8:
         11:04:68:ff:7e:7f:09:77:bd:c4:32:4a:85:7d:06:b7:3d:65:
         6e:19:94:42:ef:2e:a7:f4:cd:48:4d:13:f3:56:c2:be:71:af:
         b5:b3:39:2a:f0:a8:b2:9b:47:8f:27:8a:cb:ea:30:d5:b3:52:
         ef:58:ac:0b:f0:17:7c:07:21:0f:e4:0b:c3:a1:45:12:d6:43:
         94:50:9a:78:18:44:5d:43:dd:14:5f:bd:d0:f1:0e:27:d8:9c:
         1d:22:42:dc:5d:03:e8:a6:d8:a3:5c:3d:f4:7b:ed:23:4b:c1:
         fd:b6:6a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:16:06 2025 by rpki-client