Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/3d45397b-6ad7-3cfd-a45d-815ac66fd5df.roa
File:                     3d45397b-6ad7-3cfd-a45d-815ac66fd5df.roa (raw, json)
Hash identifier:          dKxCXw9YKr/nNYLhveXtFFAzYPCQr1FCYHoAmpN2arU=
Subject key identifier:   6A:02:66:C3:A4:D6:73:08:43:BA:09:86:67:50:9A:2B:D6:E2:08:FD
Certificate issuer:       /CN=219f6136-3599-4e41-920e-eccbe6592210
Certificate serial:       010D0C9F4328584B79BCAC719899A9FABB2116C0
Authority key identifier: CA:17:52:0D:8C:6C:0E:05:CA:71:2C:B1:E2:49:6D:FD:F0:71:44:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/3d45397b-6ad7-3cfd-a45d-815ac66fd5df.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     17001
IP address blocks:        140.193.0.0/16 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/219f6136-3599-4e41-920e-eccbe6592210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/219f6136-3599-4e41-920e-eccbe6592210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:ac:71:98:99:a9:fa:bb:21:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=219f6136-3599-4e41-920e-eccbe6592210
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=9d5078f5-d1a1-444f-8c42-6d5e2cd86447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:37:e0:11:cb:d4:3d:93:5b:85:4f:19:dc:43:
                    12:2a:f8:01:ef:a2:36:4a:b8:69:9d:cc:25:80:dc:
                    7f:48:b8:91:57:57:e5:19:40:31:bc:3e:a0:92:54:
                    27:f1:ed:bc:97:c8:5e:9a:d9:ab:30:72:6c:f6:0d:
                    93:4b:29:24:68:8b:62:4e:ab:4a:58:4a:f7:75:60:
                    ef:2c:e4:2b:cf:7d:00:db:90:f5:e9:ff:81:2f:e3:
                    2c:9b:71:97:44:a3:02:64:5a:a8:b8:b2:8a:d9:be:
                    d2:c8:9a:9c:ce:4a:48:c4:bf:19:e9:ae:2c:52:32:
                    e0:8b:26:ae:40:c1:97:bc:ec:18:be:ee:a4:cb:d0:
                    2b:71:85:dc:76:cf:ca:a1:b9:a1:d7:44:d8:0d:68:
                    67:a3:46:e9:4a:5f:af:6f:37:58:cd:1c:11:11:7f:
                    36:78:84:aa:6f:36:e1:64:e6:1e:56:08:35:48:4f:
                    98:79:6e:dc:4f:18:5b:5c:43:66:05:a3:43:1d:c0:
                    a2:6d:b7:4c:62:85:73:2e:07:07:4b:32:c2:fb:56:
                    aa:b3:ad:3c:52:1b:5d:ee:99:ef:80:ff:8f:d0:65:
                    99:43:89:a5:ea:d2:b1:45:30:3a:1d:e6:fb:57:6f:
                    6f:ff:b4:d4:b6:b0:11:4e:de:e9:7f:29:78:50:01:
                    a7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:02:66:C3:A4:D6:73:08:43:BA:09:86:67:50:9A:2B:D6:E2:08:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/3d45397b-6ad7-3cfd-a45d-815ac66fd5df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/219f6136-3599-4e41-920e-eccbe6592210.crl

            X509v3 Authority Key Identifier:
                keyid:CA:17:52:0D:8C:6C:0E:05:CA:71:2C:B1:E2:49:6D:FD:F0:71:44:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.193.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:9e:2f:5a:c5:54:8c:a9:17:00:1d:15:ff:17:fd:42:2c:8a:
         98:f6:34:cc:3f:29:98:d0:0f:52:ab:90:2d:36:5f:c3:09:72:
         92:2e:4c:0e:5d:e6:60:71:4c:36:41:05:29:12:22:88:b7:64:
         9a:39:31:c1:95:86:8c:32:35:0a:76:58:5c:7e:6a:73:f2:57:
         4c:86:19:55:93:bb:d6:a2:66:f1:c3:32:01:e4:c9:14:c0:63:
         2f:49:26:a7:52:cd:a4:58:04:ac:59:f0:80:14:c7:e6:e0:ff:
         a2:eb:12:d7:35:88:f4:b4:37:bb:fe:87:86:47:59:96:38:f5:
         b3:a3:ad:21:26:fb:29:61:be:6a:19:df:7d:db:5a:6c:dd:74:
         7d:ab:4f:cb:96:78:8b:09:17:9a:2e:1b:13:6f:10:6b:37:dd:
         6c:4d:6a:46:ae:1d:a6:08:ad:99:3f:b0:ce:20:b4:4b:7b:d1:
         a2:9c:0f:10:96:04:1d:36:22:71:43:62:52:c3:33:3c:ac:46:
         66:b4:30:02:67:3a:e2:38:42:69:56:df:8f:0a:45:b1:ac:34:
         22:a8:81:86:47:27:dc:4c:c8:6b:c8:4b:89:ee:b2:57:50:c6:
         dc:10:66:5a:8b:09:7e:14:40:76:63:f6:72:e9:4f:3f:63:32:
         dc:c8:59:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:57:13 2025 by rpki-client