Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/db37a8e9-1554-3623-947a-ba037e2d89d1.roa
File:                     db37a8e9-1554-3623-947a-ba037e2d89d1.roa (raw, json)
Hash identifier:          UqG0l9xRK3TjBxTnNeedWYsOFFpwP+6n0ZWmZAhbnAU=
Subject key identifier:   21:F3:49:1D:7E:27:5D:89:63:15:DA:CA:96:6F:61:15:55:84:91:A4
Certificate issuer:       /CN=d39fc6b6-445d-497a-8eb1-4a04472d7335
Certificate serial:       010D0C9F4328584B78B1548F8704C1DDFF769CA0
Authority key identifier: 00:B7:E9:FA:72:8B:1E:9B:86:EA:98:EF:07:FB:7B:B0:7F:F8:CE:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/db37a8e9-1554-3623-947a-ba037e2d89d1.roa
Signing time:             Fri 10 Oct 2025 04:02:00 +0000
ROA not before:           Fri 10 Oct 2025 04:02:00 +0000
ROA not after:            Thu 08 Jan 2026 05:02:00 +0000
asID:                     41378
IP address blocks:        142.249.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/d39fc6b6-445d-497a-8eb1-4a04472d7335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/d39fc6b6-445d-497a-8eb1-4a04472d7335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:78:b1:54:8f:87:04:c1:dd:ff:76:9c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39fc6b6-445d-497a-8eb1-4a04472d7335
        Validity
            Not Before: Oct 10 04:02:00 2025 GMT
            Not After : Jan  8 05:02:00 2026 GMT
        Subject: CN=83339165-8820-461b-b59e-59522c47bb18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6c:9e:88:5f:ad:34:af:0f:97:bd:c6:b0:b0:
                    38:b6:22:57:58:b2:18:60:d6:81:60:50:23:c4:7e:
                    ac:58:f4:16:76:f7:3a:44:3c:14:25:1c:ff:8f:8b:
                    9c:0b:ab:6b:ad:6f:54:0d:ff:63:05:29:74:6f:56:
                    3d:44:89:66:f5:cc:b4:27:91:37:a2:36:e3:8e:79:
                    65:0d:51:9a:73:b9:e0:56:d8:2e:4f:4d:66:31:35:
                    e9:ef:d7:d1:c6:a0:d2:fa:9e:b1:f4:4c:0e:6a:6e:
                    2b:fa:e5:63:43:ef:ba:5d:40:67:16:08:41:fb:08:
                    88:98:f8:3f:3b:6e:1d:c2:a3:22:82:79:64:37:fd:
                    2e:79:20:7c:5a:b0:1c:7f:2b:52:6a:1c:e6:4e:22:
                    01:b6:42:cc:a6:68:28:53:8d:8a:14:69:3c:28:b7:
                    53:d0:5a:b4:f8:7c:3b:31:9b:63:2e:34:e9:b6:c1:
                    3e:22:ae:6b:cf:12:9e:93:ae:2a:33:bd:9c:3b:64:
                    06:fb:4f:e8:47:8d:d1:e2:ba:2e:56:bf:fc:ce:e4:
                    d4:f4:59:8a:60:44:e7:75:57:28:53:42:8e:2e:5d:
                    80:85:9d:d3:e7:21:44:41:dd:e3:51:27:54:74:c7:
                    7b:e9:6d:b4:b8:77:fd:3f:9e:f2:e6:1e:ca:30:ab:
                    66:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F3:49:1D:7E:27:5D:89:63:15:DA:CA:96:6F:61:15:55:84:91:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/db37a8e9-1554-3623-947a-ba037e2d89d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335/d39fc6b6-445d-497a-8eb1-4a04472d7335.crl

            X509v3 Authority Key Identifier:
                keyid:00:B7:E9:FA:72:8B:1E:9B:86:EA:98:EF:07:FB:7B:B0:7F:F8:CE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d39fc6b6-445d-497a-8eb1-4a04472d7335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.249.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:82:4e:57:16:29:6e:d6:a7:ff:ac:60:83:68:3a:c4:36:33:
         d9:75:31:32:83:61:08:f1:75:4c:14:67:b9:53:e9:2d:ac:38:
         18:9d:4d:14:67:ee:88:55:b0:fb:d5:40:90:7f:c4:52:20:ba:
         f9:a3:a8:fd:7c:5b:ef:c6:86:e3:9e:8a:8d:5a:ca:7e:2b:ad:
         e0:64:61:b1:32:3d:3e:06:46:10:1b:4d:eb:d4:41:4b:0a:85:
         26:fe:b9:5e:61:67:de:d2:fd:6a:dc:e8:8a:c2:92:ba:30:69:
         12:e4:03:f3:a6:ef:21:94:be:6c:ab:2e:d1:34:81:b2:80:8a:
         c9:97:09:2f:49:4e:0c:a6:55:99:53:b2:5d:a0:81:53:b2:7d:
         b0:2f:77:50:6d:24:f1:63:6d:25:55:3a:25:d7:e4:1a:b2:e1:
         1b:b7:2e:d8:10:78:df:76:75:f0:68:a4:0f:43:dc:5f:21:92:
         4b:f1:90:8e:fc:25:7f:90:25:a4:de:b5:0f:36:c0:3c:c3:2f:
         69:3d:6c:42:2c:fd:19:65:65:6d:d6:1a:5d:46:b8:7a:e2:ec:
         4f:1f:52:a5:79:45:f9:54:7b:a6:2f:9b:ac:e4:26:43:bd:1e:
         53:b5:1a:0d:0a:e4:0d:e7:e2:2e:07:8f:64:0a:80:1d:1b:c5:
         92:70:b4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 21:30:41 2025 by rpki-client