Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/83ea19b6-07c3-3470-89ff-0f9c435c6eb8.roa
File:                     83ea19b6-07c3-3470-89ff-0f9c435c6eb8.roa (raw, json)
Hash identifier:          //HKXdA3GXQRSHFzPCGkya/VkRFyl2btTYSjOa9jZf4=
Subject key identifier:   FF:0C:16:8A:62:72:3C:D0:F9:3C:2C:CC:45:B4:84:91:10:63:73:3C
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584B2A2C35F74B81977402E53100
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/83ea19b6-07c3-3470-89ff-0f9c435c6eb8.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     14114
IP address blocks:        157.133.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:35:f7:4b:81:97:74:02:e5:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=94ace788-27dd-47b4-b714-bd59013140f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e3:9b:ab:a8:08:a5:92:61:b4:e5:12:ae:e3:
                    da:b7:43:7e:40:da:17:d2:d1:1a:65:a5:91:a2:4e:
                    f8:cd:84:38:3a:cd:3b:3c:dc:ff:03:84:70:0c:a8:
                    2b:9c:6d:de:94:b0:d9:e9:51:be:ee:3e:ad:4a:f6:
                    10:87:f3:44:f1:2e:f7:ca:13:3f:e5:08:8e:c9:39:
                    33:4b:c4:1e:c2:04:79:15:5b:09:66:73:b3:ce:67:
                    10:2e:a0:04:f2:ac:d6:4e:4d:98:62:de:68:d2:f9:
                    3f:4b:20:ca:b5:d5:de:f5:58:58:9f:83:4e:4c:6d:
                    76:89:26:1e:54:56:26:98:8e:3d:72:1a:ce:8e:33:
                    f9:11:c4:7e:84:e3:22:1b:3b:16:9f:c7:f0:2c:f0:
                    1b:a9:59:24:1f:e6:ba:e2:2e:a8:59:c2:d5:55:e9:
                    62:49:ea:ea:3d:bc:e1:11:81:ac:e5:6c:d2:b7:0b:
                    da:7a:1b:3b:8e:14:4d:25:21:2b:8f:1b:31:23:cd:
                    2f:99:ee:09:4c:70:36:e0:4a:12:23:1d:f1:d4:35:
                    68:68:db:ef:5e:c7:0a:91:38:2d:46:f1:3a:c9:26:
                    39:3c:8f:33:d7:14:dd:15:93:88:e9:ff:71:65:89:
                    52:fa:c9:ee:19:66:0d:47:f7:c2:ba:d1:5a:f2:da:
                    55:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:0C:16:8A:62:72:3C:D0:F9:3C:2C:CC:45:B4:84:91:10:63:73:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/83ea19b6-07c3-3470-89ff-0f9c435c6eb8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:d0:fd:87:ae:2b:e8:35:da:40:78:8a:c0:8f:4b:17:69:3c:
         0e:62:fe:77:82:64:de:98:5d:39:27:f4:b3:b7:d3:5e:f0:3d:
         b3:9d:37:e5:d2:b5:dd:8a:96:ef:79:17:78:a3:a6:56:a8:a1:
         65:51:b7:7c:8c:ab:2a:8b:d6:d7:2d:31:7f:44:05:62:ac:10:
         38:cf:c9:df:0b:ea:20:b8:b0:ae:16:1a:47:99:dd:f8:85:94:
         4a:2b:8b:d4:42:1d:3e:29:3c:e0:a8:68:78:33:69:95:28:4e:
         92:11:64:37:e8:e1:82:32:d4:ba:64:a7:d2:a8:1d:ea:92:c1:
         0b:8a:79:53:31:58:62:64:32:63:cc:91:45:98:5e:8b:0b:6f:
         d6:2a:c2:d9:e4:ee:b8:95:31:fe:0b:f2:5b:71:de:a2:6f:2a:
         3e:11:8a:90:f2:15:22:a9:b0:55:21:6e:08:28:55:05:04:5a:
         7c:be:94:bd:db:c2:1a:b7:9a:ab:a5:fe:03:9c:a7:a8:a8:53:
         bc:a4:83:c8:62:04:dc:14:5a:56:94:12:d0:c8:68:8d:c8:fc:
         eb:2a:98:43:5a:b5:8b:87:1d:1c:2f:b2:be:0a:ed:68:d5:85:
         4f:5b:1e:88:71:2c:cd:14:1b:f5:58:ac:76:2d:59:1e:0b:b9:
         2d:92:a6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:19:43 2025 by rpki-client