Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/4f389951-b84b-350e-8ff3-bc20b46b35a0.roa
File:                     4f389951-b84b-350e-8ff3-bc20b46b35a0.roa (raw, json)
Hash identifier:          +DmQnUtFHZ0TfYgJ7nB785Kpk+SsRIQryB7graP27fg=
Subject key identifier:   97:A7:19:58:5E:14:43:87:60:03:9F:E7:EA:5A:1E:CC:4F:10:6D:4E
Certificate issuer:       /CN=282f3176-ceb8-42bf-a51c-9fb286e5dc00
Certificate serial:       010D0C9F4328584B725188882DB0C96CADAD9BD0
Authority key identifier: 7B:1C:5B:F7:BD:7C:0C:90:21:DA:68:66:AC:5F:4D:9C:15:B5:74:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/4f389951-b84b-350e-8ff3-bc20b46b35a0.roa
Signing time:             Tue 07 Oct 2025 21:14:08 +0000
ROA not before:           Tue 07 Oct 2025 21:14:08 +0000
ROA not after:            Mon 05 Jan 2026 22:14:08 +0000
asID:                     14618
IP address blocks:        131.143.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:72:51:88:88:2d:b0:c9:6c:ad:ad:9b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=282f3176-ceb8-42bf-a51c-9fb286e5dc00
        Validity
            Not Before: Oct  7 21:14:08 2025 GMT
            Not After : Jan  5 22:14:08 2026 GMT
        Subject: CN=490a4afd-f593-4d9d-a9d4-1f03f03c677e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e5:20:04:b1:61:3a:12:ae:57:76:34:45:c9:
                    2b:54:47:ba:ae:9a:fa:08:04:83:30:9a:8b:05:da:
                    4c:a9:ae:95:51:f4:78:d8:86:87:e5:88:cf:7b:63:
                    ac:1a:2d:e0:63:31:74:ad:37:0f:67:d5:a2:74:11:
                    e1:0f:ab:05:30:c3:94:e4:d0:27:b8:e1:66:88:06:
                    b2:0b:50:07:05:77:da:5a:fb:08:e9:a4:1a:59:49:
                    c1:67:22:81:d7:19:24:4e:60:e0:e5:0e:8b:5a:a2:
                    71:63:a0:e8:97:27:51:0e:3a:f5:9b:de:b6:ea:c1:
                    c7:24:4f:dc:ba:bc:76:63:a9:54:92:fa:88:a4:96:
                    22:b2:cf:0c:99:8c:9d:6f:8f:e1:d8:e7:3e:bf:1b:
                    90:91:5a:82:ab:12:49:61:01:76:32:5c:2c:d0:98:
                    82:87:de:df:1f:71:e0:69:7b:03:45:e7:93:9e:f7:
                    b0:e2:14:1e:c8:1b:64:5d:14:4e:cb:a7:8e:87:24:
                    a0:6b:7e:db:65:b1:ec:79:d7:11:e0:c2:98:98:c5:
                    99:d4:74:52:eb:58:fa:8c:fa:d5:9c:51:f9:63:7c:
                    e7:fb:f2:73:62:d1:6f:e9:c9:a9:2c:4e:ee:33:60:
                    98:60:fc:ca:88:e1:39:b5:8a:a7:92:11:cb:ae:72:
                    70:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:A7:19:58:5E:14:43:87:60:03:9F:E7:EA:5A:1E:CC:4F:10:6D:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/4f389951-b84b-350e-8ff3-bc20b46b35a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00/282f3176-ceb8-42bf-a51c-9fb286e5dc00.crl

            X509v3 Authority Key Identifier:
                keyid:7B:1C:5B:F7:BD:7C:0C:90:21:DA:68:66:AC:5F:4D:9C:15:B5:74:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/282f3176-ceb8-42bf-a51c-9fb286e5dc00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:e5:3a:fd:cd:ad:73:5f:9b:22:11:7d:9f:f6:41:53:ac:8b:
         69:a9:92:68:b2:e9:eb:47:34:0a:a3:70:fe:e5:e8:57:1f:38:
         e2:08:a4:71:43:d5:a1:47:78:34:40:e6:d9:0d:7a:7d:cf:6d:
         df:31:79:bc:18:be:e2:49:2d:43:bd:f7:4e:45:c5:1d:78:24:
         c0:8a:d2:2a:b1:d2:5d:0f:3d:a1:c2:8f:b4:d3:6e:3d:fe:4d:
         a7:1c:f5:08:a6:7b:40:b3:18:e8:03:6e:bd:4f:53:0a:0a:22:
         5d:6d:a6:3b:93:f7:a2:d4:e3:90:3b:0e:a4:d8:06:e8:fd:d3:
         07:25:54:40:f2:a4:84:09:a1:7d:d0:e6:f5:1a:fd:48:92:c6:
         45:5a:2a:1f:8a:cf:29:91:3d:75:e4:4e:72:c2:75:2c:5e:c1:
         be:43:d2:3d:94:78:1a:18:33:5e:17:12:47:97:ba:d7:c1:0a:
         ca:a4:7d:5b:08:e4:65:d8:bd:5a:7b:f4:de:d5:91:ca:58:67:
         57:fc:77:ae:9b:67:fe:43:07:99:23:91:89:6f:cd:84:4b:9b:
         7e:17:e2:b9:7a:ed:93:74:03:89:13:03:c4:a1:3e:7c:33:f4:
         f1:8b:bc:b3:8b:40:88:4c:e6:08:b0:29:99:6c:2d:c3:be:5d:
         cf:ca:c9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 22:57:37 2025 by rpki-client