Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/f659fb8d-44a7-3342-aee8-9856669159cf.roa
File:                     f659fb8d-44a7-3342-aee8-9856669159cf.roa (raw, json)
Hash identifier:          TkWyBOl/dmXwR5OvwXBfApfGeRoncjETq9RPTggCKkc=
Subject key identifier:   93:B3:65:62:F8:91:C5:C6:2E:B1:C3:B8:03:38:FE:EB:1E:6A:54:40
Certificate issuer:       /CN=e76368c6-7013-4f98-819f-c6329c83d1c8
Certificate serial:       010D0C9F4328584B1166C4E9B740B199974AA600
Authority key identifier: 54:D3:BB:D3:22:94:EC:01:29:86:F8:67:56:E4:78:C1:EE:17:1F:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/f659fb8d-44a7-3342-aee8-9856669159cf.roa
Signing time:             Wed 03 Sep 2025 04:03:31 +0000
ROA not before:           Wed 03 Sep 2025 04:03:31 +0000
ROA not after:            Tue 02 Dec 2025 05:03:31 +0000
asID:                     14618
IP address blocks:        205.201.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/e76368c6-7013-4f98-819f-c6329c83d1c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/e76368c6-7013-4f98-819f-c6329c83d1c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:66:c4:e9:b7:40:b1:99:97:4a:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e76368c6-7013-4f98-819f-c6329c83d1c8
        Validity
            Not Before: Sep  3 04:03:31 2025 GMT
            Not After : Dec  2 05:03:31 2025 GMT
        Subject: CN=1421d4c1-a32b-43cf-95b3-ee0e5556f67e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:37:75:16:80:98:11:b6:4a:24:d5:74:9b:f3:
                    e7:31:67:6f:a2:de:fc:bf:1e:5a:c6:ea:b1:e1:98:
                    27:c7:ae:54:a6:a9:5e:3a:41:7f:91:98:1d:4c:0f:
                    42:a8:0f:ae:2a:eb:b3:2e:c7:bb:7b:f1:53:49:99:
                    0d:90:fe:e7:ef:cf:d5:3c:ca:52:f2:28:d8:34:35:
                    ce:34:03:26:00:1e:b0:8c:a5:cd:b2:b6:06:58:f2:
                    8e:20:4a:c5:2b:65:71:47:e4:88:89:d2:66:5d:ee:
                    8f:ad:e5:1f:57:4a:b3:cf:c5:c3:06:f5:38:f8:c4:
                    3f:2d:16:e1:28:5f:80:43:9b:d0:2f:20:2b:db:f3:
                    c5:23:6d:a1:44:b6:c2:a2:f2:da:99:41:75:0e:e7:
                    55:7c:bd:b9:d2:35:32:0a:05:db:b6:7e:e6:1d:33:
                    ca:be:a9:17:6f:50:95:4d:3e:47:3e:22:42:ad:58:
                    8c:a6:85:54:5a:39:29:f0:66:a0:80:c9:d4:78:47:
                    9d:93:c9:fe:9b:fc:d5:68:82:c5:5e:d9:96:f6:df:
                    2e:41:73:fa:b5:b3:7d:ad:91:4d:f1:34:e3:0b:27:
                    65:ee:2e:9e:ae:b2:7a:e7:24:97:c2:99:4c:c2:2e:
                    3c:1a:97:dd:2d:8d:8d:9b:fa:9a:91:15:f6:58:00:
                    17:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B3:65:62:F8:91:C5:C6:2E:B1:C3:B8:03:38:FE:EB:1E:6A:54:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/f659fb8d-44a7-3342-aee8-9856669159cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/e76368c6-7013-4f98-819f-c6329c83d1c8.crl

            X509v3 Authority Key Identifier:
                keyid:54:D3:BB:D3:22:94:EC:01:29:86:F8:67:56:E4:78:C1:EE:17:1F:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.201.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d1:4b:ba:ba:90:2b:aa:94:5a:13:73:dc:e3:1b:cc:20:a5:
         7f:05:ee:3f:bf:a2:02:e9:bd:88:c7:81:f9:4f:17:d9:af:71:
         74:ff:e0:e1:db:95:73:93:ab:a0:d9:a2:55:4d:c6:45:ca:1e:
         47:92:4c:e2:a9:1a:76:14:88:45:6a:46:d5:1a:ba:a4:66:b8:
         0b:2c:c1:6d:88:95:1e:d6:0a:88:5e:af:93:e2:0b:0b:17:ef:
         1f:f9:f8:c3:b6:52:88:e3:bf:b0:04:06:7a:8d:4a:b0:7c:bb:
         9b:d9:4f:9f:6f:da:6e:58:aa:2a:28:e9:24:fc:22:1f:29:a7:
         ef:f3:64:28:48:bc:06:0d:9b:0f:00:91:87:db:05:1d:58:f5:
         b3:02:f0:2e:b6:37:9b:ce:07:28:6c:b7:c7:d8:7d:22:9f:2f:
         04:94:fc:ec:6c:7d:7a:1c:94:cb:6e:9f:b6:e1:6c:a0:f7:bf:
         e2:5b:0c:bb:6b:85:37:1b:b0:3e:83:fb:6e:1b:f3:39:87:4a:
         48:8e:68:89:6a:c0:27:3c:c5:62:8c:33:47:53:fe:70:73:48:
         e4:bc:a3:82:62:d1:33:bd:fa:75:1c:6c:7a:31:ee:d3:22:85:
         56:08:f3:71:8c:69:f1:ca:93:b4:36:59:03:0c:80:a7:d3:a4:
         9a:55:e1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 22:54:05 2025 by rpki-client