Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/25b58f89-8ee9-34dc-b823-18c4d81a0dc3.roa
File:                     25b58f89-8ee9-34dc-b823-18c4d81a0dc3.roa (raw, json)
Hash identifier:          nlsSWGswU/i6YRNyqtNvkU11z5jIsBbbmWpPBtb50s4=
Subject key identifier:   5E:A5:7D:4A:56:99:F3:F0:23:20:12:88:AF:57:8C:44:E0:98:92:3D
Certificate issuer:       /CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412
Certificate serial:       010D0C9F4328584B434C6BDD43A779CF4501C240
Authority key identifier: AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/25b58f89-8ee9-34dc-b823-18c4d81a0dc3.roa
Signing time:             Sun 21 Sep 2025 01:00:32 +0000
ROA not before:           Sun 21 Sep 2025 01:00:32 +0000
ROA not after:            Sat 20 Dec 2025 02:00:32 +0000
asID:                     14048
IP address blocks:        141.225.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:43:4c:6b:dd:43:a7:79:cf:45:01:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412
        Validity
            Not Before: Sep 21 01:00:32 2025 GMT
            Not After : Dec 20 02:00:32 2025 GMT
        Subject: CN=b1b301a1-3120-4636-a215-701c4a95252b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9e:9c:17:46:5f:9a:6f:27:e5:e5:5f:18:bf:
                    51:1c:24:91:76:c6:97:19:81:ba:ce:70:da:f6:0e:
                    b8:54:77:23:d9:8a:48:d9:b4:8a:23:63:16:6a:2c:
                    68:1a:28:ec:26:03:64:f5:59:b8:d2:b1:b3:79:22:
                    14:0a:71:65:ca:38:fb:bd:da:fe:a5:b0:7d:a5:89:
                    df:e9:21:9d:f8:b8:70:71:45:26:fe:f9:5f:55:d6:
                    bd:e9:9d:d0:a2:ca:cc:4d:b2:b4:f2:8d:92:91:35:
                    24:53:8f:da:8b:f2:5b:63:cb:95:3e:eb:a4:bf:40:
                    af:ec:9d:6d:86:7c:e0:7f:54:a3:79:a3:cc:31:09:
                    1b:13:e9:60:7d:f4:d8:c8:08:db:f8:a1:79:78:e2:
                    67:a2:86:2c:6c:94:51:57:67:9f:29:3e:dd:17:f3:
                    48:ca:77:98:6e:95:32:25:ad:b4:00:86:17:a7:86:
                    3f:e4:72:af:98:94:07:b6:29:0f:8e:ad:ef:ee:3c:
                    f9:5d:86:ac:00:d5:b2:f4:c1:fe:ce:19:a1:bf:12:
                    23:1b:9c:80:6d:b0:3d:ad:be:71:16:32:bf:1e:2f:
                    76:a8:16:3e:80:aa:09:d4:2b:ec:d6:52:bf:01:e5:
                    ed:24:b6:52:79:99:a8:2e:fe:a0:30:ec:1f:79:0e:
                    65:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A5:7D:4A:56:99:F3:F0:23:20:12:88:AF:57:8C:44:E0:98:92:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/25b58f89-8ee9-34dc-b823-18c4d81a0dc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl

            X509v3 Authority Key Identifier:
                keyid:AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.225.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:aa:ee:19:6e:80:9c:15:7d:32:7c:77:d0:e7:cb:0a:ad:76:
         8f:e7:45:93:99:09:2d:f9:0c:97:1f:38:2f:75:97:11:09:a7:
         f3:dc:e8:55:f2:11:a4:f8:81:61:fa:70:41:4c:10:0e:e6:1c:
         e4:35:04:b5:e3:3c:36:4e:ab:59:8d:c0:ad:9c:3d:53:1d:5c:
         d3:e5:68:d6:3a:76:91:22:70:2b:bf:3f:85:1d:49:70:6e:05:
         01:87:57:96:73:b3:d9:23:47:e0:ec:f0:f2:1a:e7:2e:19:99:
         88:15:39:b0:95:f0:ce:71:8e:02:7e:c5:30:97:c1:43:cf:b9:
         11:15:5d:27:8b:56:23:9b:42:9e:c6:a8:1e:6d:f0:8a:cb:5c:
         47:6d:91:27:76:8f:18:14:0d:5e:1c:a7:8b:9b:7e:41:b1:ac:
         e4:5b:e2:91:6f:a7:e3:f0:a6:f1:28:c1:28:56:f1:5c:b7:4c:
         6f:c4:0d:db:08:a3:2c:28:a5:67:06:5c:66:07:5b:4a:95:d1:
         c8:e7:51:52:90:18:39:7e:ee:cb:49:53:c9:fb:d0:af:6d:64:
         5f:24:58:78:50:ab:cd:a2:bf:1b:3e:cc:d5:f0:54:7d:e4:f5:
         5c:b4:34:bb:d3:61:b9:2f:96:78:88:cd:86:6e:74:ca:4d:c0:
         ee:7c:04:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:33:10 2025 by rpki-client