Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/6c9e4248-be2e-3262-936b-f338fe8f9389.roa
File:                     6c9e4248-be2e-3262-936b-f338fe8f9389.roa (raw, json)
Hash identifier:          fYv3JdMYA7jcN87tRKgoHrfGpNBdUKjMNSykN+PC2Ns=
Subject key identifier:   B9:1B:8F:D4:02:FD:9A:54:57:BD:60:0A:00:08:A8:D3:0B:2C:A3:A0
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584B2A2C4C25C36E46045B13D2C0
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/6c9e4248-be2e-3262-936b-f338fe8f9389.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     35039
IP address blocks:        157.133.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:4c:25:c3:6e:46:04:5b:13:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=2682a227-fbfa-4818-b870-2bdf7fc9efd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e2:3c:22:7c:21:88:64:91:c9:4f:4f:c9:4f:
                    b0:3e:5f:ab:0a:d1:ef:ff:f7:78:59:55:d8:0d:a7:
                    b8:30:22:cc:85:d8:de:24:e7:0e:80:d0:cb:7f:29:
                    91:ea:3e:73:4c:00:3b:d3:48:99:e3:00:1e:69:da:
                    3a:5e:ff:90:79:73:28:40:31:ac:15:51:19:df:12:
                    e8:7b:f5:9f:d6:5e:6d:b2:e7:5d:0f:b5:bd:e1:80:
                    5d:be:55:2f:44:e4:d9:f2:85:32:5b:18:c8:39:87:
                    b9:f8:c9:9d:10:5f:45:55:47:df:9f:f7:b5:ea:56:
                    c6:10:4d:cf:d3:c2:f2:06:03:1f:b4:dc:5e:35:54:
                    a0:5d:57:7f:8a:83:96:69:58:1a:ab:55:17:d9:a1:
                    9b:88:2f:8b:7e:81:dd:9b:e7:ff:06:fb:51:19:65:
                    66:68:77:55:7f:71:6b:84:42:f7:95:de:46:e2:ae:
                    68:fc:bb:4f:4e:a5:b5:a2:26:85:d8:b0:25:de:59:
                    6d:08:a2:30:60:4e:35:c7:77:0d:65:1c:75:34:14:
                    40:c7:33:91:30:ae:6e:db:e2:cf:cc:82:54:ac:3e:
                    26:de:93:f7:6d:bf:36:88:91:d7:c5:89:af:9e:7e:
                    a9:e8:3f:dd:f5:8a:53:46:52:c0:34:1d:9c:3e:09:
                    39:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1B:8F:D4:02:FD:9A:54:57:BD:60:0A:00:08:A8:D3:0B:2C:A3:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/6c9e4248-be2e-3262-936b-f338fe8f9389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:6d:b0:b4:06:6e:8b:a9:88:4b:5a:9e:1c:66:f5:50:7e:e5:
         00:c5:b9:70:7c:0a:36:21:52:71:29:8d:a6:af:5f:64:e4:95:
         d1:ab:6a:e8:e6:17:8c:f1:73:04:a8:86:cb:53:78:53:e1:6c:
         81:5c:84:e0:e7:a2:04:b4:21:fc:e7:22:2b:f7:6c:cf:fa:e0:
         6e:f3:dd:96:d0:63:92:53:be:95:6e:c1:71:5f:23:ad:33:bc:
         b1:7e:86:b5:e2:13:e3:31:5d:1d:f6:c2:ee:37:f3:a8:66:a8:
         52:f5:ad:9d:0b:cc:04:2b:97:05:fe:98:f4:a6:ac:d0:05:9b:
         db:df:ae:d7:12:67:5c:e7:9d:16:6e:30:2c:60:8e:af:fa:61:
         13:4d:1d:93:66:18:cf:ac:be:cc:73:28:8f:1a:32:4f:f7:86:
         95:e2:df:d1:b0:be:4f:cc:d2:eb:9e:da:49:63:3c:a7:ad:c6:
         45:6f:d1:cc:92:4a:64:d7:2e:51:08:f6:40:9b:62:61:b2:a5:
         4c:3e:7b:1b:b5:8b:ae:ad:f8:47:b8:40:64:17:40:06:f2:eb:
         2a:ac:8b:83:0a:67:2f:68:d5:41:aa:9c:83:5a:7f:eb:2b:0e:
         99:2d:68:b5:8a:cd:7b:0c:3a:db:ae:21:6c:c3:80:73:5d:55:
         d5:6e:a3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 15:45:40 2025 by rpki-client