Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/7625f911-051f-3f51-bb15-58329f815e84.roa
File:                     7625f911-051f-3f51-bb15-58329f815e84.roa (raw, json)
Hash identifier:          WV+DaAGUT7o8qsmk8YvH0bWfCFgkFJhooDNMCve1Dck=
Subject key identifier:   C9:62:B4:6F:28:D1:33:D6:F8:9A:19:6F:EE:81:2B:DD:0B:7E:16:DE
Certificate issuer:       /CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f
Certificate serial:       010D0C9F4328584B72BF38BF719170636BBFFC40
Authority key identifier: 44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/7625f911-051f-3f51-bb15-58329f815e84.roa
Signing time:             Wed 08 Oct 2025 00:55:08 +0000
ROA not before:           Wed 08 Oct 2025 00:55:08 +0000
ROA not after:            Tue 06 Jan 2026 01:55:08 +0000
asID:                     399542
IP address blocks:        131.143.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:72:bf:38:bf:71:91:70:63:6b:bf:fc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f
        Validity
            Not Before: Oct  8 00:55:08 2025 GMT
            Not After : Jan  6 01:55:08 2026 GMT
        Subject: CN=bbb41e94-708e-488b-9869-066502aea3e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:72:7d:c0:0d:a0:73:1f:7a:96:04:0b:e9:24:
                    41:29:d1:ef:00:35:86:65:60:50:1d:03:76:cc:4e:
                    f4:fd:80:0a:44:bd:bb:19:38:d3:bb:10:97:41:d7:
                    94:b7:d3:6a:5b:77:d3:24:2f:b4:39:31:45:1f:32:
                    12:c1:d3:bc:7a:aa:cf:23:9f:ad:af:4e:9b:9d:61:
                    88:39:13:49:8c:6d:b9:d1:23:d8:5f:0f:3f:8b:7d:
                    1e:02:67:68:79:7a:e2:7a:7c:59:9c:71:7a:0b:d7:
                    79:0f:5e:61:c4:14:6a:00:60:35:36:84:c3:16:18:
                    b3:90:02:d5:3a:b3:09:64:09:1e:33:ab:73:f2:fe:
                    67:a4:05:f5:46:90:df:cc:3a:cb:03:f9:af:ed:30:
                    e7:c0:e6:8b:d5:f3:23:c5:7d:45:bb:54:03:0d:9e:
                    be:fd:a2:d4:24:5f:b2:fc:85:0c:b9:ca:3b:90:8f:
                    87:6a:cb:85:0b:ef:38:f4:5a:4e:df:bc:b3:e4:86:
                    8f:7a:d0:02:53:3c:81:eb:04:71:19:df:ec:39:9e:
                    f2:c5:2b:f6:ee:1b:b6:6e:08:f5:2c:17:41:c5:e6:
                    fd:04:0e:8a:30:6b:d2:9f:8b:d0:03:cf:7c:2e:18:
                    d0:fa:ab:44:ab:06:83:97:0a:6e:72:fd:95:e6:a4:
                    af:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:62:B4:6F:28:D1:33:D6:F8:9A:19:6F:EE:81:2B:DD:0B:7E:16:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/7625f911-051f-3f51-bb15-58329f815e84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.crl

            X509v3 Authority Key Identifier:
                keyid:44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:5b:a3:e4:88:b6:89:ee:74:9d:62:b3:d0:d4:ef:70:74:e3:
         6c:f9:80:f5:78:78:e4:96:d9:b6:a5:f2:d1:1b:a1:8c:7a:74:
         6d:d1:6c:45:3a:26:cb:5b:35:86:f9:16:d2:91:ed:bc:29:ef:
         df:80:67:77:62:1e:02:fb:8a:92:ec:4a:0a:5e:b1:5d:5c:b7:
         83:e2:dd:df:10:44:0a:45:75:72:91:4a:de:8a:7d:bf:c1:b9:
         ca:79:fc:97:6b:39:b1:4c:72:7b:70:71:a3:43:ab:9b:d3:a6:
         8b:11:0b:95:25:9d:26:f0:39:a3:25:7b:da:84:44:ce:c9:c7:
         20:93:dd:2f:dd:44:3d:27:ad:39:cf:10:9f:6a:8a:9a:8f:29:
         ca:33:78:e0:11:20:cf:2f:5f:f2:50:14:d4:a4:8c:61:30:f6:
         11:4c:e1:f2:b4:0d:d9:19:f6:89:b1:9e:50:69:e4:80:85:96:
         27:ce:a3:0c:89:c5:b0:24:9a:ad:ee:09:a9:be:a0:8f:3f:03:
         6e:1a:4b:b4:e6:1a:c9:b4:f3:0a:4d:df:4b:c6:b6:34:bc:a0:
         85:d7:c5:cd:8e:81:85:0f:a1:df:1b:2c:b9:ef:bd:35:49:84:
         5a:71:94:31:08:6f:05:05:6a:15:c9:ff:bc:98:31:ac:c0:80:
         63:e2:89:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:24:04 2025 by rpki-client