Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/5dbc9527-5290-3cd4-9b7e-1aaffe364a60.roa
File:                     5dbc9527-5290-3cd4-9b7e-1aaffe364a60.roa (raw, json)
Hash identifier:          Hff+QBZrLmgKFRBxQufQIMRnRMk7ecAkNokdH5t7YAo=
Subject key identifier:   7D:35:7D:A7:42:BF:48:2A:F0:5B:2E:9D:C6:20:DE:32:3B:B7:72:18
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F4328584B22864A6C3DB0E50227A30280
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/5dbc9527-5290-3cd4-9b7e-1aaffe364a60.roa
Signing time:             Tue 09 Sep 2025 07:15:46 +0000
ROA not before:           Tue 09 Sep 2025 07:15:46 +0000
ROA not after:            Mon 08 Dec 2025 08:15:46 +0000
asID:                     2914
IP address blocks:        128.254.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:22:86:4a:6c:3d:b0:e5:02:27:a3:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Sep  9 07:15:46 2025 GMT
            Not After : Dec  8 08:15:46 2025 GMT
        Subject: CN=199fb401-4822-4876-ab62-a5a4cb6e7da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5c:52:a8:fa:35:7e:2a:1d:d1:06:8e:9f:0c:
                    1e:56:97:d2:32:2e:ee:8a:21:e5:f9:ea:57:e5:2c:
                    5d:b8:48:bf:c1:54:1b:6a:a9:af:66:52:17:72:ee:
                    9f:b4:54:29:56:d5:c9:60:87:5a:be:ed:ba:15:43:
                    e6:7c:a8:bc:b9:8c:3b:29:b5:e2:56:a6:46:71:22:
                    57:89:45:9a:3c:61:b0:1e:bc:db:bd:13:0c:cb:5c:
                    6f:f6:6e:0d:69:20:05:15:5a:23:5e:c5:8f:45:40:
                    57:c2:41:5d:ff:42:a3:85:5c:51:d1:22:94:b8:a3:
                    da:88:43:ed:fe:c8:43:ff:be:c6:45:ed:b1:03:58:
                    2e:f8:80:c3:80:e2:9e:0d:70:52:a3:fa:dc:dc:ab:
                    9c:a3:22:60:b4:3e:90:aa:97:6a:90:02:c8:84:de:
                    3e:86:d0:3a:b0:05:66:30:e2:3d:aa:09:67:b8:9b:
                    55:99:1b:57:4f:6e:96:47:82:15:4a:6f:60:a5:b4:
                    1f:b5:10:c9:77:5a:7d:ce:f3:ed:82:45:bf:11:a5:
                    db:95:e6:f8:df:ba:f8:03:49:b8:4d:8d:4c:37:37:
                    63:9b:cc:9b:ba:13:39:32:fe:87:37:66:6f:dc:07:
                    f0:7f:07:6c:f3:b1:7e:dd:4e:b3:4b:dc:ed:a6:02:
                    41:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:35:7D:A7:42:BF:48:2A:F0:5B:2E:9D:C6:20:DE:32:3B:B7:72:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/5dbc9527-5290-3cd4-9b7e-1aaffe364a60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:60:63:e9:3b:eb:9e:96:34:5d:42:b6:2f:d7:b6:83:14:62:
         a2:ab:9d:f2:93:ee:0b:22:b3:31:60:a8:bf:91:fe:a7:ca:99:
         81:ec:65:01:f6:11:cf:bf:fd:35:ab:3d:62:2d:ff:da:f7:9c:
         ba:24:2d:31:a0:0e:fe:5d:5c:68:bb:28:26:4b:f1:7c:18:67:
         42:9c:54:26:6b:e6:48:f8:dc:ea:0b:18:d9:c5:fd:70:72:38:
         f9:36:13:32:97:bb:b1:c1:a0:bd:40:c7:0f:e9:15:78:16:bf:
         74:67:53:12:39:a7:76:ff:f2:d4:af:cb:9d:1f:9b:ee:f7:aa:
         99:88:e1:2f:00:5a:7b:43:49:24:f9:9d:1d:f7:41:dc:4f:62:
         7f:cb:0e:06:e7:5f:7f:28:7e:0a:55:15:f5:2c:80:5f:b3:db:
         0c:fd:fe:11:f6:a3:a0:cf:9c:a0:7b:dc:e9:0b:b0:ed:90:7a:
         d1:2e:6e:d0:b9:91:1b:9a:8a:3e:30:85:e1:88:85:44:82:a9:
         4a:b8:88:d1:df:0d:4c:d9:f6:14:f2:17:03:8c:e8:b9:0e:88:
         79:42:34:1b:67:8a:9e:7c:2c:18:e9:32:6e:8e:f6:05:2f:74:
         9d:a0:b6:11:2e:77:18:1d:98:19:58:4c:ce:ad:71:9a:8b:d9:
         87:9c:2c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 12:01:35 2025 by rpki-client