Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/1e3a3fc8-43ed-3ce6-a976-6122ba663fa6.roa
File:                     1e3a3fc8-43ed-3ce6-a976-6122ba663fa6.roa (raw, json)
Hash identifier:          xq2j/qtUthrHuI3U5xNR+Af66cn4r8hgRJba027qiXQ=
Subject key identifier:   3C:18:91:92:8E:16:A2:46:D7:D6:08:ED:06:71:A2:B9:FF:F2:12:F5
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584B28C6EE594211A1A888E880A0
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/1e3a3fc8-43ed-3ce6-a976-6122ba663fa6.roa
Signing time:             Thu 11 Sep 2025 13:00:41 +0000
ROA not before:           Thu 11 Sep 2025 13:00:41 +0000
ROA not after:            Wed 10 Dec 2025 14:00:41 +0000
asID:                     13763
IP address blocks:        141.140.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:28:c6:ee:59:42:11:a1:a8:88:e8:80:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Sep 11 13:00:41 2025 GMT
            Not After : Dec 10 14:00:41 2025 GMT
        Subject: CN=edc17144-09e1-4cce-88f4-c4da0dbdb4ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c5:be:88:2b:0c:84:cd:81:65:3b:ba:6e:35:
                    94:ea:f8:62:64:45:3d:3d:35:e2:51:44:56:2c:05:
                    ae:98:9d:42:a5:d6:af:1f:e6:1a:f5:66:15:ef:45:
                    1c:da:54:9a:be:ac:b8:e9:9d:61:f2:9f:19:3e:6e:
                    7b:4b:7f:a3:7c:a1:59:ba:83:35:02:47:a3:20:b9:
                    55:16:7c:fa:38:36:14:f1:a3:7a:5c:1a:44:6f:06:
                    ae:1c:a5:cb:96:d5:cf:ab:e3:02:9f:53:a3:70:c9:
                    55:23:74:1b:6e:73:a2:8d:09:4f:69:c5:0c:4a:45:
                    c0:f1:30:33:47:d5:15:ea:a7:e7:8d:92:84:33:c8:
                    ad:1b:05:40:d3:cf:1a:87:cc:55:d6:58:33:26:f1:
                    0e:7c:62:55:65:b5:97:fa:da:b3:83:d3:2a:01:73:
                    dd:12:fc:b9:3d:66:7a:09:21:1d:25:aa:15:11:c3:
                    a5:a3:bd:28:e2:f6:9f:64:bc:e1:46:5b:7e:73:43:
                    34:99:ac:2e:95:98:5a:0b:9b:df:d5:80:46:f8:fe:
                    24:d7:16:73:20:d2:a1:38:15:95:16:14:45:a1:31:
                    ef:3b:4c:ea:6f:ec:c1:85:68:b6:af:a6:7a:62:58:
                    0e:4b:0d:92:9e:ba:94:9a:31:b1:3f:db:2c:6a:b4:
                    c9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:18:91:92:8E:16:A2:46:D7:D6:08:ED:06:71:A2:B9:FF:F2:12:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/1e3a3fc8-43ed-3ce6-a976-6122ba663fa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:fe:5e:cd:b8:6a:10:17:e0:35:43:f7:5e:6b:c7:3e:58:ad:
         cb:1b:48:56:06:15:18:d4:51:90:63:69:dd:34:ed:b8:37:b7:
         4a:e2:62:39:29:8b:56:54:19:01:08:53:03:8e:0e:b3:b0:f6:
         0d:9d:9e:5d:0e:07:84:bf:0d:99:e0:ff:5e:98:68:a5:cb:1c:
         cb:cb:23:42:7d:5a:bc:56:4d:59:89:63:76:e5:df:f3:af:57:
         08:95:d1:05:1a:76:66:76:62:a8:74:73:3f:67:48:ac:3e:e3:
         94:a1:d4:b1:e0:7f:3f:0d:59:01:0c:78:b4:33:d1:19:fe:fc:
         84:f5:64:ed:72:94:88:a0:09:d5:0d:f5:0e:d4:a8:ce:74:43:
         a0:95:b5:a7:38:ca:d7:e2:f9:e0:36:e5:38:0d:69:1d:84:a6:
         ec:46:e9:74:d4:6d:2a:72:de:f6:6e:01:39:98:35:6d:55:58:
         c9:4d:25:f6:98:b8:0e:14:f8:19:af:df:c9:e9:91:d8:7e:60:
         fa:08:5c:34:b3:b6:ba:09:0f:cb:9e:9c:cb:61:42:c9:d8:24:
         fe:48:7b:ed:e4:63:da:74:1b:37:2c:ba:b4:c1:ec:76:2c:9a:
         53:0d:35:75:38:c2:fd:4b:78:d6:b0:56:c2:52:89:4e:18:95:
         d6:03:a5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:31:05 2025 by rpki-client