Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/fd5c5b02-d7bc-32a7-9a36-ea1d0cfa4470.roa
File:                     fd5c5b02-d7bc-32a7-9a36-ea1d0cfa4470.roa (raw, json)
Hash identifier:          Go3FwpYba7/wMyojSDPCayVsAeu7OhYocvIzM0gFAhA=
Subject key identifier:   CD:27:2F:56:26:18:0A:65:CF:E2:5E:8D:53:22:8D:7C:6C:34:37:61
Certificate issuer:       /CN=f4ef9ae2-f027-4028-a705-db1e3463a382
Certificate serial:       010D0C9F4328584B0CDC0F6463320A00957A5300
Authority key identifier: 78:43:63:5F:35:F7:A5:B6:6E:39:7B:D3:62:1B:21:CC:A2:E5:92:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/fd5c5b02-d7bc-32a7-9a36-ea1d0cfa4470.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     40339
IP address blocks:        202.83.112.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:0f:64:63:32:0a:00:95:7a:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4ef9ae2-f027-4028-a705-db1e3463a382
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=6755d745-203b-4afe-8ecd-1d42dd5b2c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ce:2f:e4:ff:16:12:b9:f8:01:83:a8:7c:a1:
                    6f:df:35:0f:12:d0:d4:7e:a6:99:f5:4b:51:f9:d6:
                    bd:7d:84:4d:7e:8d:ed:13:20:33:e9:87:57:27:0a:
                    28:ba:08:43:27:ed:7b:ab:b8:9b:3e:79:68:e9:21:
                    df:83:1b:81:be:b0:7f:be:40:23:fc:fb:2a:37:e5:
                    5a:f5:4e:a1:11:6e:f1:d6:08:7a:72:62:e0:ef:47:
                    6c:90:41:15:89:5a:7a:6b:60:f1:e9:b4:22:b3:aa:
                    2e:60:85:2f:34:0c:91:69:c6:5f:2b:1a:4c:0d:50:
                    8e:0e:27:2c:7e:50:a8:30:66:52:c5:55:8b:1d:9a:
                    93:05:96:a2:cd:e1:52:5c:3a:f9:00:27:b2:f4:b4:
                    1a:82:f2:f8:13:cf:69:0c:b6:1e:f7:2e:d3:ff:a2:
                    23:38:e5:0e:02:6c:f6:9b:af:d0:96:a8:98:f5:12:
                    41:2e:2e:73:d5:e1:80:66:5e:fc:c0:f5:35:c2:88:
                    ea:4f:e5:b1:9a:47:dc:15:61:e6:bc:bd:50:a8:5f:
                    cb:93:28:7d:43:7f:b5:93:5c:59:1e:3e:56:a3:60:
                    8b:38:9a:27:3e:fb:cc:73:89:5d:21:c0:25:6a:a2:
                    59:10:bc:03:1d:7d:a8:d9:71:b7:de:73:0e:c3:a7:
                    52:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:27:2F:56:26:18:0A:65:CF:E2:5E:8D:53:22:8D:7C:6C:34:37:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/fd5c5b02-d7bc-32a7-9a36-ea1d0cfa4470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.crl

            X509v3 Authority Key Identifier:
                keyid:78:43:63:5F:35:F7:A5:B6:6E:39:7B:D3:62:1B:21:CC:A2:E5:92:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.83.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:e9:08:02:2f:9e:61:4b:9a:52:32:16:3b:ba:9e:6d:9b:e2:
         5e:7c:8e:c7:fd:95:2a:42:69:8a:0f:29:6e:87:93:f9:26:c9:
         ad:02:ee:4f:d1:fa:b3:b2:49:31:0f:c6:10:47:e3:64:6e:0d:
         6c:2c:2a:bc:b1:e7:65:71:eb:ab:f2:ab:0c:7a:2a:ce:21:a1:
         19:10:43:b9:1e:40:78:de:22:d3:30:9c:b9:a7:26:8a:1a:bc:
         81:fd:c4:ee:42:57:d2:fb:d7:db:dd:8f:df:de:a6:31:9a:4e:
         11:18:42:53:51:62:58:29:4c:c4:5f:bf:23:bf:50:89:ae:52:
         b4:4f:76:6d:aa:75:30:7b:70:15:83:b2:5d:aa:b9:0d:34:88:
         81:1b:af:56:ca:89:1a:e9:29:ce:b1:98:33:3a:7c:cc:6f:fb:
         c8:48:69:cb:85:c8:46:72:49:2d:9b:2c:07:95:b0:b7:f2:45:
         a0:9b:5f:bd:57:38:4a:cd:64:9a:5b:6b:2f:0e:2c:05:21:89:
         38:65:60:c4:ed:ef:56:cc:b0:5d:30:37:16:9c:5e:b3:dd:d7:
         c7:07:70:b6:1a:72:06:eb:70:4b:5c:c8:e6:34:5d:1f:b6:fa:
         e1:86:21:a4:75:45:c4:fc:67:68:5d:a7:06:2b:44:1a:6f:77:
         f5:93:c7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:01:52 2025 by rpki-client