Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/77945582-4ddd-3fcb-bd7c-ec18d5e400c2.roa
File:                     77945582-4ddd-3fcb-bd7c-ec18d5e400c2.roa (raw, json)
Hash identifier:          fop6S6gKdEMlJd0J5isbXYytYAPVTitaqqMA7roOpnc=
Subject key identifier:   31:E4:8E:17:05:68:D7:F7:4F:D8:27:82:53:16:D0:F9:20:0E:8A:ED
Certificate issuer:       /CN=1b1fd062-f802-4363-ad37-7232f990c625
Certificate serial:       010D0C9F4328584BB2F7D7B7D2148F0DF4F41340
Authority key identifier: D1:C9:01:FA:B8:1E:C7:B3:77:02:B9:4F:41:BC:05:A5:ED:94:7B:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/77945582-4ddd-3fcb-bd7c-ec18d5e400c2.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     397593
IP address blocks:        158.51.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/1b1fd062-f802-4363-ad37-7232f990c625.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/1b1fd062-f802-4363-ad37-7232f990c625.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:d7:b7:d2:14:8f:0d:f4:f4:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1fd062-f802-4363-ad37-7232f990c625
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=7a779455-6e03-4377-972b-a4cb7b9ede69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1e:f2:76:01:44:fa:eb:d4:1e:62:0f:42:e2:
                    eb:2b:62:c7:40:2b:a9:19:d4:7f:f3:a7:1a:a6:b6:
                    73:a5:5b:4c:0b:7f:dc:c5:ae:00:bc:44:a7:43:93:
                    fb:7c:b3:70:96:2f:92:fb:ae:1a:47:4b:27:76:64:
                    86:23:08:1f:a8:4e:a6:58:15:54:0a:43:6f:8d:e7:
                    4c:bb:68:08:a8:d2:ee:0a:ae:d6:3d:ba:02:ee:2e:
                    54:f9:05:2f:3e:5b:01:ec:d1:4a:ea:a4:dc:63:c7:
                    44:38:3b:2a:0a:f2:9c:2a:57:1b:07:27:be:10:0f:
                    85:ae:d7:91:02:0a:8d:72:d7:fa:d9:3c:c1:74:6f:
                    7b:8c:42:02:8e:31:3c:fa:0c:4f:7e:a4:96:bc:91:
                    5b:a8:66:69:9f:c8:7c:20:24:f1:1d:af:4d:e0:2f:
                    3e:84:b7:f9:6c:20:50:4d:b7:74:75:77:61:b2:f2:
                    86:d2:4d:5b:d9:a5:57:48:12:67:b8:1a:9f:b0:05:
                    dc:6e:e9:7c:b4:b0:15:3a:2d:6c:91:6c:93:fa:1d:
                    39:70:9f:ec:fd:2c:b8:a4:1d:f5:59:b8:f9:dd:ca:
                    94:4b:41:3a:f5:bd:2e:c8:b2:f6:0f:74:2d:d3:92:
                    fe:7c:de:d5:72:bd:3c:91:69:19:cb:54:13:5f:ff:
                    b3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E4:8E:17:05:68:D7:F7:4F:D8:27:82:53:16:D0:F9:20:0E:8A:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/77945582-4ddd-3fcb-bd7c-ec18d5e400c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/1b1fd062-f802-4363-ad37-7232f990c625.crl

            X509v3 Authority Key Identifier:
                keyid:D1:C9:01:FA:B8:1E:C7:B3:77:02:B9:4F:41:BC:05:A5:ED:94:7B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:87:19:bb:f0:13:3a:18:ba:4a:b7:9b:b4:63:a4:7d:74:45:
         e2:5d:84:59:87:38:2a:0d:c0:6c:6c:92:a7:a7:16:60:be:d3:
         91:2d:62:cf:ff:56:1b:10:57:14:b7:4f:8c:38:e5:fb:d3:e5:
         d9:6e:fd:58:6f:bf:c5:00:28:21:fa:95:eb:bb:5f:51:ae:14:
         f3:61:c4:62:4f:1a:b3:87:a7:e9:ec:80:03:33:7b:7f:fb:89:
         b8:f4:c8:6b:04:5d:8a:51:fc:a8:74:75:cd:62:ea:6b:7a:34:
         86:4c:aa:19:48:8a:26:d1:a3:de:60:95:a1:b0:b4:91:7e:ff:
         1d:64:2a:17:8c:b6:4f:21:1d:54:7f:d9:1d:ff:dc:95:4f:92:
         76:69:ea:ba:6a:cd:84:72:14:25:ce:5c:2d:a3:92:2b:cc:98:
         d2:16:4a:8d:d5:df:d8:98:72:65:b5:c6:ba:2e:b3:a1:0e:1f:
         23:85:59:21:bd:44:32:2d:3a:6b:5c:2a:c3:e3:bc:ee:b4:62:
         8c:03:13:30:a5:a6:27:86:55:fb:30:4f:a8:d2:b3:3e:db:91:
         4f:82:20:d4:f8:cd:63:b4:a5:31:ca:dd:60:8d:e8:14:4d:15:
         c0:b0:47:17:4e:56:65:74:b9:d1:a4:cf:28:6c:0f:83:c9:d5:
         cd:97:e4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 08:38:36 2025 by rpki-client