Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/2132281d-835d-3d1c-b6fb-84a24a22b51d.roa
File:                     2132281d-835d-3d1c-b6fb-84a24a22b51d.roa (raw, json)
Hash identifier:          3wNBQ/WRGWMDpl9CRH3MvS2hqfcc2hMK23IF+kn4JU4=
Subject key identifier:   38:37:C8:D8:48:D0:7B:9C:0F:84:DF:A2:E4:89:B2:72:E5:40:BE:2E
Certificate issuer:       /CN=c235459b-705a-42fb-9059-b6a9bf0c853f
Certificate serial:       010D0C9F4328584B5DD1E25868C1E24345572D00
Authority key identifier: 15:F5:EC:4A:5E:00:41:2A:E7:D7:5D:8E:11:BF:89:80:9E:D7:3E:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/2132281d-835d-3d1c-b6fb-84a24a22b51d.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     393905
IP address blocks:        164.152.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:e2:58:68:c1:e2:43:45:57:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c235459b-705a-42fb-9059-b6a9bf0c853f
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=d3486806-9ad6-47b9-bca4-d1982422d45b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7b:08:f3:df:31:78:c6:96:92:db:68:36:d2:
                    94:eb:38:24:34:38:59:57:1a:a0:dd:f7:af:9b:70:
                    64:14:86:55:31:5d:c1:37:c1:c6:92:37:1a:3f:f4:
                    68:8e:5a:08:b7:7d:0e:5e:7b:be:75:d0:e8:a2:c6:
                    0b:a0:35:93:d8:5f:c7:5d:5b:57:99:fd:67:95:21:
                    f0:3c:a9:c8:b0:2d:c6:df:bf:c2:d3:e3:15:b4:39:
                    06:6f:63:b2:27:40:70:9f:ec:1c:1d:fd:92:40:6d:
                    d8:9a:2c:a5:4f:30:f9:77:f4:81:f2:cc:6c:da:10:
                    a5:4c:e3:a6:ea:8f:0b:04:e2:58:86:01:b9:7f:fa:
                    ec:fa:cf:82:9a:38:f1:53:d4:d0:bf:1c:6b:4a:35:
                    96:61:58:13:e0:b2:b1:b3:a5:28:f7:83:92:37:eb:
                    ca:85:5c:a2:96:0d:81:43:4f:33:e0:f2:3b:3a:cb:
                    00:e4:81:a9:d7:e1:7f:44:af:a5:94:92:85:6a:d0:
                    1d:d9:8c:01:6c:53:be:27:a4:9a:ef:63:70:99:c6:
                    a5:8b:cb:cc:92:4f:9d:22:4f:08:88:2d:ae:98:05:
                    c8:b6:e0:69:1a:fc:1b:91:58:9f:83:de:7e:f4:9c:
                    e1:e3:97:a4:19:f3:10:69:92:e7:9e:f9:71:eb:fe:
                    91:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:37:C8:D8:48:D0:7B:9C:0F:84:DF:A2:E4:89:B2:72:E5:40:BE:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/2132281d-835d-3d1c-b6fb-84a24a22b51d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.crl

            X509v3 Authority Key Identifier:
                keyid:15:F5:EC:4A:5E:00:41:2A:E7:D7:5D:8E:11:BF:89:80:9E:D7:3E:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.152.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:a6:9b:18:f1:f7:a1:23:c0:17:64:28:1c:97:a4:e0:0b:e4:
         d4:bc:2f:44:db:b2:14:a5:f3:90:f8:11:54:ae:3e:ba:5d:0f:
         b7:2e:3b:28:c3:e8:50:55:9c:6f:fe:d8:bd:18:4c:9b:1f:ae:
         22:3b:f5:ce:7a:b2:ab:79:d5:c8:3d:1b:70:5e:05:a7:ca:4b:
         37:0a:51:2a:46:5b:77:38:48:6b:3c:d1:b7:5c:3b:31:53:db:
         30:86:52:e5:48:11:ee:78:ae:3f:df:8c:ea:06:25:c9:18:1c:
         f7:fa:fe:e5:75:1f:88:7f:0f:51:f8:eb:23:ad:20:b5:75:85:
         d7:ff:56:ee:96:ef:10:1a:0a:c7:ab:df:63:8b:5d:ba:8c:3f:
         78:5f:98:a7:4a:4a:56:29:7d:7a:5d:25:e9:ed:60:a8:ed:16:
         a1:a8:c3:3c:5b:71:b3:bd:fe:ba:f1:25:20:77:f9:01:6d:b3:
         3b:46:62:e9:d0:f6:d4:f8:4e:74:20:80:78:96:6f:2a:9a:52:
         25:e0:d5:ca:f0:4a:25:1d:2e:ad:a7:82:d4:b4:18:df:7b:8d:
         2d:c1:61:8e:fc:04:e1:ee:23:c1:8a:64:3a:2a:ec:bd:f7:14:
         ec:b6:91:f9:ed:ea:d3:60:b9:03:c2:b3:c6:22:fc:29:3d:4d:
         87:bd:fd:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 15:11:29 2025 by rpki-client