Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/b4edabba-54d1-305d-87bd-c0b3b787d147.roa
File:                     b4edabba-54d1-305d-87bd-c0b3b787d147.roa (raw, json)
Hash identifier:          wOZtkJeKOfDHk6wMYscQsuEVO0Ro4w1vHkEHecXr+dA=
Subject key identifier:   3F:AC:97:17:94:25:EC:E7:C9:93:E0:75:2C:96:33:91:63:73:87:68
Certificate issuer:       /CN=213412d0-2e00-4f54-95bc-e72555790689
Certificate serial:       010D0C9F4328584B3DBA2722C3B021D3CB716AC0
Authority key identifier: D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/b4edabba-54d1-305d-87bd-c0b3b787d147.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     40509
IP address blocks:        169.155.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:ba:27:22:c3:b0:21:d3:cb:71:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213412d0-2e00-4f54-95bc-e72555790689
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=7a99575d-3fed-43e3-8b55-231a4a3a75a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:41:64:b5:65:d9:58:ed:07:af:2e:fd:87:2d:
                    c8:96:b8:ef:f1:60:a3:af:e9:5b:b6:0c:ad:0f:df:
                    4d:94:49:67:f0:85:5f:77:97:48:21:5f:0b:2a:9d:
                    45:bb:85:72:1b:ae:ec:73:2b:49:a7:b5:26:04:6b:
                    30:f0:8d:41:0f:a6:da:b9:fd:fe:17:e4:00:b7:5c:
                    59:68:f9:f7:6e:38:62:28:b2:dd:07:b1:61:a4:73:
                    60:6f:8c:06:34:f9:43:49:22:8c:6a:f4:71:6f:02:
                    e5:0d:76:45:dc:c6:6c:de:c9:0a:f7:cf:5a:7f:4d:
                    21:71:a5:89:86:cd:91:8d:cc:05:68:a1:b3:93:7b:
                    18:49:1e:ba:1a:78:0f:72:1e:9a:e0:45:15:92:2b:
                    b3:e5:c2:f7:e7:77:77:2d:e3:f5:f3:56:25:de:d2:
                    e8:27:b1:75:bb:78:f5:ac:7e:22:c0:cc:2e:e8:ac:
                    38:cd:ce:d2:75:68:6d:3f:b5:93:9b:da:f5:a3:1d:
                    c3:a5:1d:a6:db:78:cf:7d:5d:ed:4d:bc:02:40:83:
                    12:90:9d:82:df:8b:7f:f0:a0:a3:a9:9d:3a:e0:50:
                    2a:41:75:f6:86:3d:78:b3:3b:94:09:41:1a:6e:d9:
                    23:95:7f:39:e0:ee:31:c1:3b:e2:54:53:5c:be:4a:
                    30:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AC:97:17:94:25:EC:E7:C9:93:E0:75:2C:96:33:91:63:73:87:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/b4edabba-54d1-305d-87bd-c0b3b787d147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689/213412d0-2e00-4f54-95bc-e72555790689.crl

            X509v3 Authority Key Identifier:
                keyid:D1:AE:CA:03:6C:E1:D8:05:B4:04:FF:73:32:CD:40:80:F9:A4:E0:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/213412d0-2e00-4f54-95bc-e72555790689.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.155.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:08:b8:99:8c:c2:16:b9:14:cb:79:71:f9:66:b7:1b:ab:8f:
         29:92:c3:90:91:5b:95:ab:21:12:33:e6:b7:d7:41:d1:86:6f:
         c6:a8:6a:1c:93:03:06:1c:9e:2d:89:05:7d:b4:b4:b0:ee:75:
         59:8f:a5:05:72:6a:d5:1b:4c:06:86:51:94:87:fc:c0:32:de:
         e2:de:1b:65:28:56:cc:df:7d:32:b6:3b:3b:c9:fe:4d:4d:1c:
         63:93:e0:d6:ee:ce:2f:a0:0f:07:cc:d1:fc:e7:f1:6d:1d:cd:
         1c:ca:f9:fc:2b:34:7f:3a:4b:bd:6a:26:c8:88:87:b3:68:0c:
         0b:8c:09:ad:48:10:60:eb:d0:44:03:41:30:80:b3:be:0e:35:
         c9:98:66:01:f6:96:52:0d:51:96:c3:2c:ea:bf:40:6f:79:63:
         2c:f0:40:fc:3e:b0:d2:eb:32:76:f9:b2:e8:98:45:a7:d8:29:
         cd:e9:c0:e7:92:13:05:60:07:bf:89:2f:2e:0f:d7:64:35:fe:
         f7:90:66:5f:63:aa:35:24:39:b6:77:49:ee:b9:d7:6c:82:1a:
         29:5e:bd:c6:91:71:37:cb:20:30:e7:7b:23:6c:f8:2c:e1:67:
         59:bc:da:67:e3:4b:e6:cd:22:2a:f0:62:ee:8f:7b:ea:c4:cc:
         c8:16:62:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:09:55 2025 by rpki-client