Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/a60a9b00-d731-38a8-8ec7-2870a2014055.roa
File:                     a60a9b00-d731-38a8-8ec7-2870a2014055.roa (raw, json)
Hash identifier:          FPp51fepxeRIW+j7KJOFJ0Sl0Vi3cbCVoOmJ44Z6sog=
Subject key identifier:   BB:D9:DF:E4:13:C2:9D:D7:D4:FE:78:42:49:CE:C8:C1:68:F5:E3:30
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F4328584B0CDC1E41EEDF3FD5B2DB8380
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/a60a9b00-d731-38a8-8ec7-2870a2014055.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     20473
IP address blocks:        155.138.128.0/17 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:1e:41:ee:df:3f:d5:b2:db:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=288e1259-20ac-48e3-a47d-9b40adc1dda8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fa:76:14:33:b3:80:0d:ae:04:09:7e:de:4e:
                    58:16:f0:a7:6b:22:9d:c2:24:82:43:49:b8:89:0e:
                    c5:9d:9a:99:5f:b7:f4:f0:ae:62:92:fb:d4:37:dc:
                    ba:cd:30:6c:f8:8e:1b:55:26:ce:69:a6:5a:18:be:
                    0e:0b:fe:f1:05:ca:9c:4e:4a:c7:ca:66:52:15:50:
                    ee:83:13:0d:ca:e0:d2:df:b4:f3:63:57:12:1c:86:
                    86:c3:70:fb:67:bb:57:fc:de:c4:eb:70:0f:2d:53:
                    75:19:00:9b:0f:d2:24:9e:6d:72:d1:8b:85:b9:46:
                    11:bf:02:35:22:14:7c:ff:43:4c:eb:22:3e:af:a1:
                    52:ef:bc:02:71:cc:cf:14:75:90:bf:32:3c:6c:50:
                    f6:eb:ab:39:98:f9:76:80:9e:0a:2f:1f:a5:68:bf:
                    13:2f:30:48:ad:be:81:b2:cf:9d:14:26:64:65:65:
                    0e:14:7d:32:6b:38:37:92:27:99:1e:80:ad:c7:ca:
                    bd:0a:7f:13:69:17:d1:85:ea:c1:5a:41:4a:8f:ce:
                    e4:d9:8a:b9:fb:c5:8f:ac:bb:5d:d9:54:d5:ff:40:
                    77:89:de:e1:eb:d0:5e:61:6e:00:34:0a:04:30:b9:
                    0d:ad:80:6c:4d:05:59:2c:24:d2:38:c5:96:bc:f1:
                    70:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D9:DF:E4:13:C2:9D:D7:D4:FE:78:42:49:CE:C8:C1:68:F5:E3:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/a60a9b00-d731-38a8-8ec7-2870a2014055.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.138.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:6a:0e:a3:6a:41:b0:63:1e:0f:ad:ee:db:e9:5d:2a:af:fb:
         84:89:5c:28:64:07:1e:8b:77:48:45:40:b6:fe:17:52:f4:85:
         01:6b:f9:93:be:ac:4c:5d:5c:b0:f2:4d:52:c6:f3:4d:8b:bc:
         93:5b:2c:93:e6:61:65:f7:21:50:67:10:ac:bb:45:1b:16:56:
         52:25:a9:a8:b2:28:22:7d:b1:db:af:5d:83:13:6e:8b:3f:7b:
         d6:8d:6c:ec:c7:36:4e:3e:90:9c:61:d6:7c:a1:74:f9:f7:06:
         21:d1:dd:6a:e7:59:73:74:cb:c4:f3:6d:07:ee:3a:c1:29:ad:
         1e:5f:a2:f6:0a:c6:65:40:38:ac:5a:00:96:c5:30:05:02:59:
         52:17:61:84:a0:d0:6e:23:38:04:72:74:b3:20:6f:e6:e4:8c:
         ad:2b:49:07:c8:70:df:0f:c0:34:dc:52:7a:f2:35:c6:85:6e:
         d5:0c:97:16:22:56:5f:b0:76:b0:cd:33:83:60:3e:c6:58:1e:
         6d:bd:37:4b:2e:90:53:f1:2a:19:c8:c7:df:5b:02:cb:07:97:
         82:f4:4c:bd:55:65:10:19:d5:ec:fb:cc:3e:3e:3f:e2:f4:3c:
         e1:e4:56:b4:44:c0:f9:ff:71:16:45:d3:56:be:99:b5:3c:f8:
         55:40:41:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 13 22:15:44 2025 by rpki-client