Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/6d121940-07bf-3da6-8428-068bc37bce7c.roa
File:                     6d121940-07bf-3da6-8428-068bc37bce7c.roa (raw, json)
Hash identifier:          +vQs/D4XRpXobh4cw6y3hGBVHlpbsBrfetxrHV8zBpQ=
Subject key identifier:   A9:DB:BC:37:FF:ED:AF:2C:FA:B4:0B:B1:E7:6C:AD:F9:1F:8E:88:C3
Certificate issuer:       /CN=18291d4d-da48-4b25-84d6-3df88f2fed54
Certificate serial:       010D0C9F4328584AFEE69A29D815F7D5832CFE00
Authority key identifier: 33:D9:60:6D:D5:CC:2A:8B:C9:1C:D0:09:80:C8:00:C2:AE:58:82:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/6d121940-07bf-3da6-8428-068bc37bce7c.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     376
IP address blocks:        132.210.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/18291d4d-da48-4b25-84d6-3df88f2fed54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/18291d4d-da48-4b25-84d6-3df88f2fed54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:9a:29:d8:15:f7:d5:83:2c:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18291d4d-da48-4b25-84d6-3df88f2fed54
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=d386be2d-1663-4ba3-9628-e8e2ccd3390c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9f:90:c6:79:53:ad:63:e0:a3:ac:09:b2:6f:
                    e0:0f:66:e6:2b:92:6b:94:6e:60:2e:6d:02:6c:29:
                    98:73:15:ff:4c:8b:40:20:d7:56:f9:c7:35:6f:af:
                    61:73:77:b2:4a:e6:da:17:b4:0f:64:ca:3b:77:f8:
                    d6:1a:45:51:e3:c6:77:da:6b:d2:60:59:66:c6:35:
                    7e:3c:e1:cb:af:63:9b:7b:c9:5a:17:8d:3b:ce:d9:
                    a7:e9:e7:44:96:4f:e0:e8:d7:44:6b:40:df:16:e6:
                    81:97:78:8c:1b:31:5b:2e:90:74:34:df:cb:3d:b7:
                    5a:28:d1:12:c2:85:50:24:e4:64:92:fa:97:26:b4:
                    f0:3f:af:2f:6a:b0:e5:a7:5e:8d:f9:50:4b:9a:58:
                    a8:21:85:05:4b:9b:3f:94:e4:67:f6:e2:be:d5:87:
                    fa:91:31:5e:08:11:7c:a8:e9:c1:09:1b:82:c7:9f:
                    13:c7:9f:2c:d2:e2:cc:fe:5f:36:e1:c8:97:91:47:
                    01:f2:0e:d4:18:2c:a2:6c:74:1d:76:95:20:14:65:
                    b2:95:b7:d2:1a:bb:e8:0c:8e:5a:3f:73:69:fd:ca:
                    5d:3e:b1:46:29:a5:a7:6f:b4:58:2e:61:e7:a2:8f:
                    1b:8b:00:54:64:ac:e3:f0:0d:be:a6:ff:dc:7b:6f:
                    3d:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DB:BC:37:FF:ED:AF:2C:FA:B4:0B:B1:E7:6C:AD:F9:1F:8E:88:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/6d121940-07bf-3da6-8428-068bc37bce7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54/18291d4d-da48-4b25-84d6-3df88f2fed54.crl

            X509v3 Authority Key Identifier:
                keyid:33:D9:60:6D:D5:CC:2A:8B:C9:1C:D0:09:80:C8:00:C2:AE:58:82:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/18291d4d-da48-4b25-84d6-3df88f2fed54.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.210.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:f5:59:09:d0:db:48:df:42:89:2f:9c:34:61:97:19:fa:41:
         91:ec:e5:ec:1d:60:ec:f3:83:33:74:ed:34:ee:4c:17:b0:d0:
         fd:a0:67:7b:46:af:27:97:58:fe:02:f0:0d:f8:d5:11:9d:cd:
         b7:8d:5c:3c:fc:cb:53:18:53:7e:6f:92:5f:1c:5a:76:75:ba:
         73:b0:65:ce:ed:9c:a7:aa:24:24:a9:67:67:2a:17:c2:19:93:
         01:f4:ad:c3:4a:25:61:88:5e:5d:86:15:f9:98:05:d5:79:08:
         9b:35:05:67:74:21:4e:d5:22:e6:b3:82:9a:68:21:82:9b:ca:
         8c:6e:52:22:3a:12:8c:d0:6f:7d:eb:57:f4:07:40:e5:e4:df:
         1d:3f:22:77:a1:a5:d1:84:35:0b:af:4c:c4:5c:5a:00:b8:b3:
         82:61:5e:5f:12:0a:f3:4b:25:84:c1:12:e2:78:96:2f:8a:d2:
         f8:b7:ee:f1:1f:6c:fc:25:4c:38:d1:81:8a:4e:32:07:9d:ec:
         c3:c0:5e:53:e1:51:82:e9:a9:f8:e9:62:91:cb:e2:f7:03:fd:
         06:ae:f7:ce:2f:22:4b:98:41:66:07:d6:85:7d:21:a8:97:37:
         51:31:11:17:38:0e:39:5a:78:a8:34:62:26:a4:af:c0:30:65:
         95:5d:a2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:54:07 2025 by rpki-client