Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/bb18ad33-5add-3198-87f4-b7c59f066532.roa
File:                     bb18ad33-5add-3198-87f4-b7c59f066532.roa (raw, json)
Hash identifier:          6LeVu2ZvHl/f3lAGalKSor8GFjXKhEmPwhiqEFDuAWs=
Subject key identifier:   42:54:2F:E4:6C:30:23:72:F3:98:98:97:8E:13:0D:39:BF:2C:62:05
Certificate issuer:       /CN=e7557763-e46b-4ec1-afa8-bcf257b54911
Certificate serial:       010D0C9F4328584B1806E4511209973FF103DA80
Authority key identifier: 20:05:AA:3B:64:BB:D6:7C:B2:7A:AE:9C:97:F0:CC:AE:9D:64:0B:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/bb18ad33-5add-3198-87f4-b7c59f066532.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     29831
IP address blocks:        128.254.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/e7557763-e46b-4ec1-afa8-bcf257b54911.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/e7557763-e46b-4ec1-afa8-bcf257b54911.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:e4:51:12:09:97:3f:f1:03:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7557763-e46b-4ec1-afa8-bcf257b54911
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=450bd91b-bf66-4147-8a7c-3e3abfbb216f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:be:14:6a:d8:4e:d1:c9:28:f4:8f:de:36:93:
                    47:23:b7:0c:00:8d:a6:3c:c9:37:7f:37:55:b0:6b:
                    7b:28:f4:17:75:7a:89:b5:b1:cf:9f:d1:f5:72:5a:
                    b2:b2:70:29:57:fa:c5:2b:f9:7a:34:cf:68:ee:04:
                    90:95:cc:9e:f2:e7:5e:80:85:b2:8c:57:08:b9:82:
                    6b:43:68:3e:a8:a7:1a:d0:6c:56:e2:a4:a3:7d:d2:
                    2e:49:03:1d:cb:75:9c:9f:90:42:36:3c:11:4c:2b:
                    6b:72:c3:73:0e:1b:14:5b:30:b0:6a:69:d4:00:29:
                    b6:3d:fd:31:05:ec:c0:1a:e9:b8:54:15:34:5b:aa:
                    76:57:b9:6d:61:95:98:04:5d:1a:c2:ba:29:f5:fd:
                    13:55:fd:a9:18:c7:9b:4d:e2:4b:06:64:e9:60:d9:
                    53:e2:bc:bb:1f:af:78:c8:eb:11:52:69:13:ba:6f:
                    b4:53:b8:ba:05:9d:a5:34:4f:ec:86:18:59:17:9e:
                    30:51:5d:e9:09:5a:61:b8:de:af:9c:5f:d6:c2:d8:
                    11:a6:23:1b:ac:48:6a:4e:b5:3d:2e:5e:4d:68:76:
                    84:0b:89:6d:26:ee:19:4f:19:46:93:ac:03:0f:8a:
                    ea:92:c6:36:b5:ed:66:17:01:c6:45:77:c3:46:2b:
                    a4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:54:2F:E4:6C:30:23:72:F3:98:98:97:8E:13:0D:39:BF:2C:62:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/bb18ad33-5add-3198-87f4-b7c59f066532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911/e7557763-e46b-4ec1-afa8-bcf257b54911.crl

            X509v3 Authority Key Identifier:
                keyid:20:05:AA:3B:64:BB:D6:7C:B2:7A:AE:9C:97:F0:CC:AE:9D:64:0B:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e7557763-e46b-4ec1-afa8-bcf257b54911.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:fb:81:86:aa:5b:63:50:a4:7f:b8:da:b0:9e:8a:21:6d:96:
         29:bc:77:ef:9c:72:fd:2b:78:31:70:2b:09:53:8e:be:1e:40:
         b3:74:f9:34:60:35:b3:bf:70:f1:8e:c6:36:73:29:3a:39:54:
         f3:5f:6d:10:c6:97:2a:13:97:d2:be:3c:2c:7b:01:00:5a:24:
         29:32:c1:9a:86:59:f3:e8:5f:8f:cb:ce:2a:af:90:4e:0a:aa:
         56:c3:dc:26:6b:d8:67:fb:9e:0f:1f:1e:d9:a3:70:37:42:1e:
         56:85:bf:c7:07:98:4e:94:f6:79:23:a5:77:5a:74:28:c2:23:
         10:a5:af:a3:80:4f:53:6a:ea:d2:ba:41:41:5e:e8:f4:50:b0:
         15:3a:69:ef:4c:59:8f:fa:98:62:ff:07:65:90:2f:da:c3:b5:
         49:af:e6:fd:07:7d:fe:b7:ea:05:4c:ab:04:d7:9f:f2:bf:ba:
         4b:0f:a1:d6:32:48:f6:c6:a1:c5:a8:01:21:f3:fc:36:8f:2f:
         37:4f:5a:f1:c5:82:8d:9f:e8:35:f5:36:6a:a8:18:ee:32:8a:
         0c:59:12:77:5a:ff:e5:cc:26:f8:1c:76:60:bb:48:e4:b9:7b:
         f4:da:dd:43:0e:2c:3d:67:bb:d2:52:8f:e9:3b:5e:f3:f8:34:
         c8:4b:e5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:12:00 2025 by rpki-client