Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/cd715c25-e007-3860-83e9-7545911be0db.roa
File:                     cd715c25-e007-3860-83e9-7545911be0db.roa (raw, json)
Hash identifier:          jThKFtJzQyw768vUX/rzoDYmoudvNyoUK3MW80q6WPk=
Subject key identifier:   72:9B:AF:41:E1:6A:85:D5:CD:97:84:87:5A:03:3C:93:90:51:4B:03
Certificate issuer:       /CN=00561825-d26a-4ad1-954b-7ae435a3f4a1
Certificate serial:       010D0C9F4328584B775F6885406D9A20668BE600
Authority key identifier: B0:0D:9C:45:A3:C3:AC:C4:5B:88:EB:6E:EF:E7:EA:71:C4:1A:CE:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/cd715c25-e007-3860-83e9-7545911be0db.roa
Signing time:             Thu 09 Oct 2025 16:41:08 +0000
ROA not before:           Thu 09 Oct 2025 16:41:08 +0000
ROA not after:            Wed 07 Jan 2026 17:41:08 +0000
asID:                     1742
IP address blocks:        134.174.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/00561825-d26a-4ad1-954b-7ae435a3f4a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/00561825-d26a-4ad1-954b-7ae435a3f4a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:77:5f:68:85:40:6d:9a:20:66:8b:e6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00561825-d26a-4ad1-954b-7ae435a3f4a1
        Validity
            Not Before: Oct  9 16:41:08 2025 GMT
            Not After : Jan  7 17:41:08 2026 GMT
        Subject: CN=9c0c40a8-e445-4936-89e3-cd7799e3b1b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:df:6e:2f:df:86:fd:52:80:b3:ff:be:4c:29:
                    65:3d:ed:74:91:2a:a2:a2:4b:af:ae:10:5b:5e:3e:
                    ac:90:51:88:13:18:82:c1:94:b8:4c:3a:94:90:f3:
                    ba:29:7a:9d:a8:4b:ab:10:70:21:89:73:f5:87:3d:
                    f2:fa:3f:d5:c8:a9:31:ac:8b:94:5c:26:0e:9f:fb:
                    16:e0:29:58:4d:d2:42:71:04:b4:20:aa:d1:e6:b7:
                    9f:b8:08:19:ea:ef:a0:83:08:d9:df:c6:c8:ef:54:
                    9c:a3:36:ba:1b:0a:80:24:1a:de:74:99:01:3c:1c:
                    4e:74:6c:39:14:97:1a:1c:07:07:0e:16:b6:78:de:
                    c5:51:86:27:f7:dd:ff:0a:ce:dc:0c:56:4a:37:ec:
                    04:c7:09:8b:d7:bb:8d:4a:b7:b5:a9:54:5a:c6:98:
                    24:d5:cc:07:db:a5:61:0a:f7:02:2e:9b:c5:89:e4:
                    2f:45:01:5f:31:61:ed:24:31:5d:3d:2c:8b:c5:fd:
                    a0:c7:cf:f1:fd:7e:e7:a0:e0:ee:70:8e:7f:61:b8:
                    df:aa:c4:78:5a:f0:44:44:20:04:e7:41:ee:f2:31:
                    0b:7d:2e:01:d4:9b:b2:90:f0:d9:b0:5a:a2:09:58:
                    05:5e:50:a1:27:eb:dc:c6:87:3d:be:cb:83:b3:3e:
                    03:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9B:AF:41:E1:6A:85:D5:CD:97:84:87:5A:03:3C:93:90:51:4B:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/cd715c25-e007-3860-83e9-7545911be0db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/00561825-d26a-4ad1-954b-7ae435a3f4a1.crl

            X509v3 Authority Key Identifier:
                keyid:B0:0D:9C:45:A3:C3:AC:C4:5B:88:EB:6E:EF:E7:EA:71:C4:1A:CE:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.174.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:95:7c:6f:5c:e8:f6:1d:96:0c:2d:cc:27:a1:28:e0:87:94:
         f6:7c:cf:30:dd:47:50:fe:4c:ec:79:dc:08:6f:c2:80:16:13:
         b7:79:7d:44:67:8f:4b:2d:c2:bf:2f:fe:d7:10:01:1f:b5:66:
         fc:e8:66:cc:c2:9c:df:59:41:dd:3d:01:3b:aa:ed:17:61:bc:
         9a:6a:d6:e0:4c:a8:2c:5f:2f:8f:7e:ef:54:75:3c:d5:08:69:
         1d:bc:ca:a0:b0:bf:90:37:7e:9b:c6:9b:d0:ac:f2:6e:17:41:
         63:dd:04:8b:9d:be:62:36:6b:54:22:3f:c5:8f:c7:4e:61:e7:
         74:e9:44:41:d1:53:e9:ff:5f:c1:49:3f:a9:78:e8:8c:b8:25:
         ea:95:50:38:b9:0c:9b:4d:1e:7c:e2:eb:f3:9c:87:12:de:a5:
         73:45:6e:c5:6f:c4:56:5c:6e:46:43:2d:33:94:ff:63:f2:81:
         31:ec:4a:31:ea:f0:d2:e6:f3:ec:1e:82:7e:98:9d:a2:a8:4f:
         b4:50:f1:7e:27:be:29:d6:9e:e8:30:ee:73:50:d0:22:c1:b8:
         59:1a:a0:30:61:43:bc:8b:c1:64:fc:d5:0a:68:0d:66:e6:ad:
         e5:7f:9f:b3:3f:16:e2:0a:d7:09:a4:50:f7:97:9f:75:13:ca:
         12:96:bc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:40:45 2025 by rpki-client