Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/405ad53e-4398-3d9c-bb19-5ecd2425e6f0.roa
File:                     405ad53e-4398-3d9c-bb19-5ecd2425e6f0.roa (raw, json)
Hash identifier:          qHLbzAaMIMQeg9tMOK/BQcB2d+n/vpkeuva3PpzYdJ0=
Subject key identifier:   A7:A5:FA:59:C4:BF:E7:15:63:7F:80:01:24:F9:49:8E:60:B0:17:81
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584B0316987728253673E5869440
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/405ad53e-4398-3d9c-bb19-5ecd2425e6f0.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     1273
IP address blocks:        146.135.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:98:77:28:25:36:73:e5:86:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=8038985b-c7b5-4b22-880b-6e69d4e7358a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:82:27:8e:63:c2:b7:02:93:fb:eb:22:81:3b:
                    5b:f3:73:2f:a6:39:95:f0:43:c8:96:eb:95:25:37:
                    17:64:a1:f6:d2:0d:0d:8d:9a:fb:80:43:e7:c2:58:
                    98:3d:67:7c:2e:40:60:71:6b:61:df:0f:c4:15:eb:
                    02:0b:03:c9:5e:6c:49:33:37:2f:50:99:b3:62:45:
                    f9:04:be:a6:1b:94:cb:f0:39:18:f9:43:08:5b:b2:
                    f8:cf:6c:bd:37:54:be:1d:66:1e:a7:ac:3c:35:51:
                    63:70:a7:18:db:59:a7:b2:68:6b:a3:7d:9a:1b:e5:
                    84:ac:40:a9:1f:1b:98:33:5e:6a:b4:90:13:4f:d7:
                    f5:53:6f:72:98:8e:d6:59:dc:69:06:d7:26:28:3e:
                    2f:39:a9:e6:46:fb:77:26:40:5b:46:aa:0d:39:1a:
                    b2:63:ae:99:21:03:99:62:1d:04:b1:05:4f:e8:4f:
                    e4:eb:80:aa:0c:a6:56:5e:0c:86:dc:42:8e:1d:3c:
                    bf:96:66:06:74:ff:39:51:2e:3b:b3:64:3f:a3:f8:
                    d6:bc:f1:e7:34:7a:8e:ab:b5:6d:6d:a9:96:60:03:
                    6f:d7:2f:ae:e8:63:6c:8f:18:e1:b2:82:46:e3:80:
                    8d:13:c1:34:d0:df:39:f9:f0:09:72:5b:74:61:c6:
                    30:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A5:FA:59:C4:BF:E7:15:63:7F:80:01:24:F9:49:8E:60:B0:17:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/405ad53e-4398-3d9c-bb19-5ecd2425e6f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.135.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:fd:ce:51:e3:86:2c:85:df:1f:56:de:61:00:37:d7:9c:c8:
         4e:eb:9d:11:5a:ee:23:06:77:d7:9a:7d:6e:83:66:16:77:73:
         8c:4a:c4:df:b1:11:11:46:87:c1:81:5b:cd:81:ee:d3:8e:66:
         8b:b8:56:42:a4:ae:8e:34:84:9f:57:fa:b6:d8:1d:c6:b3:8d:
         5b:1d:9c:15:2b:56:58:9a:e8:98:c0:2d:25:ab:8a:b1:77:3c:
         52:f5:bf:b9:4c:13:61:75:1d:53:8e:8b:37:86:ad:c0:6e:ab:
         ec:9a:b0:df:76:a0:6b:92:d2:9d:0a:37:06:29:ef:bc:f4:81:
         79:d8:98:a1:73:ae:a8:80:6f:d6:36:ca:01:07:19:a2:f2:a2:
         40:7a:a4:58:2a:91:6c:ce:74:53:72:cd:02:c9:1b:3a:bf:54:
         cd:58:ee:eb:30:d6:f4:d9:30:03:1b:42:40:fb:d8:5c:25:87:
         e8:ec:2c:cf:0b:9a:27:94:6d:47:0e:23:58:48:82:f3:4e:0d:
         d4:6a:76:cc:78:70:9f:01:34:d5:51:ab:e3:dd:2d:1d:0c:fe:
         27:67:c9:5e:fc:dd:86:59:e5:e4:5a:7f:6d:20:f8:24:48:e2:
         53:44:6a:65:b0:34:b7:8e:1c:49:13:88:b6:40:b2:13:c0:56:
         e3:d5:b8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:30:07 2025 by rpki-client