Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/5173c91e-d697-3bbc-b247-976d5b9dd576.roa
File:                     5173c91e-d697-3bbc-b247-976d5b9dd576.roa (raw, json)
Hash identifier:          ks3+Q+2m+ot+i8obY/j9qIPtoSeEL/2fVV+7Za7UElg=
Subject key identifier:   26:A3:C3:D3:E5:22:04:7E:2F:0A:E0:8F:A7:77:1A:46:59:BF:58:C8
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F4328584BA7CD193549504FE0B6B3F140
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/5173c91e-d697-3bbc-b247-976d5b9dd576.roa
Signing time:             Mon 27 Oct 2025 01:00:31 +0000
ROA not before:           Mon 27 Oct 2025 01:00:31 +0000
ROA not after:            Sun 25 Jan 2026 02:00:31 +0000
asID:                     0
IP address blocks:        169.145.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a7:cd:19:35:49:50:4f:e0:b6:b3:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: Oct 27 01:00:31 2025 GMT
            Not After : Jan 25 02:00:31 2026 GMT
        Subject: CN=5a25bf80-de22-48f4-afb9-8952aa9d8933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:36:6d:65:6a:b8:28:41:64:12:d4:6b:ee:e3:
                    af:0e:cc:61:1d:e0:b2:1d:4f:1d:d9:17:36:8c:f0:
                    c1:42:2c:d2:8c:a7:a4:12:38:c8:ea:6c:64:76:72:
                    49:4d:41:99:6f:c2:fb:94:06:5d:54:90:15:68:e3:
                    97:3e:b1:9e:ad:db:c6:ae:75:8b:aa:39:05:98:7f:
                    59:37:b2:27:77:0d:a9:78:64:ac:b2:17:1a:18:1d:
                    df:d8:fb:37:c0:1f:b4:0a:e6:0a:21:9c:97:b0:db:
                    61:d9:08:6e:74:a2:d0:96:61:9b:30:f4:44:1c:0a:
                    71:6a:9c:5d:d8:04:ff:2a:8c:58:8c:d6:7e:4c:17:
                    ae:10:80:c1:33:c7:61:b4:e9:e6:db:93:80:1f:49:
                    e5:5d:ed:35:1b:5a:c4:c4:80:e5:6e:17:e6:b0:05:
                    a2:ad:59:03:65:91:75:7a:10:8a:c9:92:cd:67:38:
                    c4:1b:51:09:dc:c8:d2:b9:23:f6:7d:a2:94:66:72:
                    2e:ae:1f:ce:71:28:21:8e:e5:3e:0e:9a:14:a0:73:
                    6b:9d:61:01:5d:d7:11:f4:2c:e3:f2:e9:20:4c:85:
                    3d:b4:98:24:c9:22:fb:8b:bb:54:95:fe:66:17:b3:
                    06:40:59:b4:4d:2d:c7:24:e9:42:bf:6c:66:9c:71:
                    eb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:A3:C3:D3:E5:22:04:7E:2F:0A:E0:8F:A7:77:1A:46:59:BF:58:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/5173c91e-d697-3bbc-b247-976d5b9dd576.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:19:98:c4:6a:bd:76:64:75:c2:2b:16:31:aa:dd:bd:2d:fb:
         8c:85:e0:72:fa:27:7d:be:0c:17:bc:b4:6e:57:97:da:35:42:
         94:a5:bd:c4:86:52:44:b7:9c:67:4d:0a:aa:63:cc:7e:d3:13:
         3f:6e:24:ba:fd:c0:22:de:69:33:42:b9:07:96:ac:0d:a0:45:
         bb:d7:2a:f9:cd:e8:26:fe:16:92:2d:79:5c:19:05:94:5e:d9:
         02:18:c4:d8:01:4f:f1:e0:91:b7:58:b5:ec:87:4d:fd:7b:e9:
         cc:85:d1:9a:e6:96:85:0e:0e:ea:e0:54:3b:d0:50:fc:c5:d6:
         b8:cf:95:43:9c:4d:db:7c:78:89:f5:e8:4d:22:c1:03:21:b2:
         8b:c9:37:31:91:a0:f2:83:56:ac:98:41:d7:37:57:85:3f:55:
         87:d7:64:79:e5:dd:3b:78:12:94:43:f0:5b:26:74:f7:6f:4f:
         9e:d6:1c:35:b2:0b:89:9b:7d:db:26:11:3f:7f:6c:c2:c5:64:
         f2:f6:fd:ab:ab:c2:ec:6a:dd:fd:e2:75:53:5e:a7:b3:0d:00:
         ae:58:5d:f3:b5:01:0f:4d:4d:38:93:ec:d6:2b:4d:cc:30:74:
         12:8f:dd:ba:08:51:77:6f:99:91:88:2d:fd:16:31:6b:16:18:
         97:19:91:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 09:46:37 2025 by rpki-client