Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619/c311eb8b-7961-38df-8d36-a48785e3afa5.roa
File:                     c311eb8b-7961-38df-8d36-a48785e3afa5.roa (raw, json)
Hash identifier:          jjinzeWI+BfI5IPxyAr1BVGZ1QgKchXToRGOtYmqhjI=
Subject key identifier:   D9:1F:2C:BF:2A:A4:18:4F:C5:47:52:3C:7F:3E:3E:54:68:EC:0D:4F
Certificate issuer:       /CN=cc2bfc06-2668-422c-ab3c-525935f88619
Certificate serial:       010D0C9F4328584BA39D28A26702B0C51F27AEA0
Authority key identifier: 6D:CD:1F:EA:8C:A4:4B:87:A1:E7:0D:C7:D7:D1:66:45:01:C0:74:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619/c311eb8b-7961-38df-8d36-a48785e3afa5.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     14618
IP address blocks:        165.124.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619/cc2bfc06-2668-422c-ab3c-525935f88619.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619/cc2bfc06-2668-422c-ab3c-525935f88619.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:28:a2:67:02:b0:c5:1f:27:ae:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc2bfc06-2668-422c-ab3c-525935f88619
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=ed956971-fa5d-486e-ae8f-cafd35dc8f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:37:39:55:9d:5b:be:9e:cb:3d:fb:e9:de:b9:
                    cb:ab:e1:1f:19:2c:8a:43:cc:10:e7:99:b5:e0:ec:
                    ba:2e:f5:6b:03:8a:38:be:b2:57:b6:48:41:93:72:
                    01:c4:8f:44:66:a6:29:69:79:a7:ea:3f:f2:3d:77:
                    b9:f5:5d:7b:6a:ab:b3:76:57:4b:db:93:a1:77:57:
                    61:7f:26:48:ba:ad:45:37:5d:78:8f:52:ab:35:61:
                    99:74:93:fe:d6:00:f0:b4:29:fd:17:dc:f7:55:ce:
                    44:18:e7:75:c4:bc:3a:36:09:77:d8:e0:c0:c3:ac:
                    48:08:fb:5e:02:1a:3c:eb:e1:41:2f:3f:63:91:07:
                    8d:8e:f0:e0:8d:44:7e:81:02:27:f1:2e:40:45:8f:
                    56:35:a5:f9:eb:01:95:a1:df:6a:14:38:b9:c0:ac:
                    0c:89:51:f1:91:e9:2b:89:cc:c1:2c:c9:72:84:d7:
                    cb:f2:a1:67:2e:5d:e9:06:53:fc:d1:f0:e4:3e:ff:
                    98:79:c2:09:30:ec:31:da:88:17:51:82:e8:bb:5d:
                    88:f5:2e:f3:5f:c2:5f:b6:6a:55:57:4f:04:53:b0:
                    23:96:d3:b4:f4:5f:7c:80:84:e9:a4:30:8d:3c:7a:
                    5c:9b:b7:d4:9b:c7:b9:97:fa:61:f9:cb:fc:c3:3e:
                    87:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1F:2C:BF:2A:A4:18:4F:C5:47:52:3C:7F:3E:3E:54:68:EC:0D:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619/c311eb8b-7961-38df-8d36-a48785e3afa5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619/cc2bfc06-2668-422c-ab3c-525935f88619.crl

            X509v3 Authority Key Identifier:
                keyid:6D:CD:1F:EA:8C:A4:4B:87:A1:E7:0D:C7:D7:D1:66:45:01:C0:74:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cc2bfc06-2668-422c-ab3c-525935f88619.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.124.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:84:5a:a2:01:b4:a9:9d:30:93:b9:00:92:a2:7b:c9:3f:b9:
         29:75:95:13:91:fb:1b:5c:3d:a2:02:ee:a7:f7:ad:59:2c:bc:
         e5:70:32:e4:11:b4:49:bd:8e:d2:6c:23:de:00:9f:94:f2:f6:
         87:af:b4:ea:82:5a:a5:5d:fd:35:f8:3a:d5:8c:2c:c7:e5:2b:
         f7:1b:ec:77:6c:d1:5e:e7:9f:b5:bf:db:4c:6d:9d:a8:94:97:
         ab:f9:02:47:37:59:51:a4:15:41:f8:ec:71:64:fe:f6:39:70:
         19:26:bc:88:20:e3:c8:65:89:32:07:42:5f:9f:03:a5:1e:9c:
         82:d6:d2:ae:70:81:cd:73:3c:22:50:a9:22:66:6f:a2:96:d9:
         55:ac:37:7c:90:d5:1b:72:8f:27:1c:57:6b:c4:e8:e1:cd:09:
         f5:40:9c:1f:9d:61:3d:a2:7d:54:db:44:74:55:c7:bb:d6:4c:
         8a:6a:d7:31:b4:43:4d:a3:3d:2b:5d:8d:b0:c7:9a:eb:c0:df:
         b7:e5:10:3d:5f:9a:9b:bd:cd:b9:84:75:50:f7:46:f0:a1:e5:
         aa:8c:d0:8b:6e:9a:5c:fc:ee:91:60:8b:36:de:96:97:1a:d4:
         95:aa:48:f2:0f:aa:a4:60:bd:1f:38:ee:94:50:62:0d:ac:78:
         1a:77:12:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 08:50:05 2025 by rpki-client