Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ece7b648-fee3-3d1e-aa03-d834d30ef8fb.roa
File:                     ece7b648-fee3-3d1e-aa03-d834d30ef8fb.roa (raw, json)
Hash identifier:          MEhxjAVVzerY3GwEasqL5omuKDd/AvxL5AaDtt9JrPQ=
Subject key identifier:   AE:C1:29:31:E3:F8:AE:98:EE:E0:C0:79:F3:23:EA:BF:29:B9:EB:25
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584B980A655E0ACA0BBA41C216F0
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ece7b648-fee3-3d1e-aa03-d834d30ef8fb.roa
Signing time:             Tue 21 Oct 2025 09:31:31 +0000
ROA not before:           Tue 21 Oct 2025 09:31:31 +0000
ROA not after:            Mon 19 Jan 2026 10:31:31 +0000
asID:                     35039
IP address blocks:        130.214.150.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:98:0a:65:5e:0a:ca:0b:ba:41:c2:16:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Oct 21 09:31:31 2025 GMT
            Not After : Jan 19 10:31:31 2026 GMT
        Subject: CN=7d5d759e-9c12-4651-8fd8-e364b46fb550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5c:98:da:79:3b:37:bd:f3:a7:d8:70:9a:87:
                    3c:48:8e:c0:23:24:8b:99:32:54:a1:a4:1b:48:a4:
                    62:af:d3:55:12:98:a8:45:7b:db:f5:b2:43:77:72:
                    43:24:c2:52:bd:aa:4f:25:4d:5e:3f:0e:a3:85:75:
                    74:13:b3:bc:ad:b0:06:40:8c:be:26:c1:bc:33:8f:
                    63:c7:1a:4b:78:7a:69:b7:ef:c6:60:bf:87:b4:f7:
                    c9:bf:1c:19:22:b8:6b:d8:11:ca:96:7d:2d:23:28:
                    12:99:20:90:71:6b:70:24:64:f0:50:9f:e0:ed:84:
                    2d:32:2d:ac:61:77:58:5e:51:02:00:b6:58:ea:8e:
                    41:25:9e:60:28:9d:95:0b:e3:a5:f3:50:71:ac:03:
                    9e:98:8d:28:58:99:58:bc:05:da:b5:d3:e4:b2:b4:
                    b8:14:ff:53:7d:5a:cb:c0:1b:e3:6f:e8:d6:10:57:
                    d1:81:b1:ab:bf:28:5d:5f:c8:74:fd:4f:be:64:a9:
                    f5:ff:02:58:f0:c8:27:11:c2:d0:80:6c:3a:a1:72:
                    0d:11:85:1a:a7:99:38:80:54:83:a6:89:c8:6e:70:
                    44:d4:72:c9:96:4b:be:e9:59:4e:ad:5f:60:cd:2d:
                    28:9d:86:64:cd:80:74:72:8e:d3:1b:69:d7:5a:41:
                    19:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C1:29:31:E3:F8:AE:98:EE:E0:C0:79:F3:23:EA:BF:29:B9:EB:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ece7b648-fee3-3d1e-aa03-d834d30ef8fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.214.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:59:3b:b9:c4:1e:44:89:33:01:0a:ed:42:5c:5f:76:b9:f6:
         d7:0d:ea:49:91:72:f2:c3:00:5b:d0:f9:df:68:02:87:fd:9d:
         2f:a7:f3:b3:09:37:6c:15:3a:21:bc:ef:b4:3b:0e:07:4a:16:
         78:c7:95:45:8b:0e:0f:af:2e:bf:d4:7f:5b:de:49:09:72:fc:
         16:29:71:07:de:ea:21:1d:5d:23:53:37:c0:c4:b3:88:e6:58:
         a5:ad:0e:09:a2:73:69:67:58:7c:b9:82:86:49:eb:c9:62:2c:
         9c:b3:4e:a8:11:9c:d6:2b:e3:1f:37:30:8b:b9:4c:79:e4:11:
         8f:35:35:67:b8:98:1c:09:14:13:5f:df:bb:63:6b:36:b8:3c:
         09:29:af:97:4e:cf:68:15:77:71:38:77:22:a5:39:66:af:eb:
         d2:4d:05:74:e6:5d:65:e8:14:d9:64:18:62:f1:97:55:5b:9e:
         7f:70:4a:17:50:19:74:33:f1:0b:1d:83:60:48:f2:11:69:4b:
         9f:9a:d9:2d:eb:8f:4f:0a:eb:75:7e:7f:c6:b1:7b:d9:12:50:
         ed:68:27:0e:1d:be:e6:2e:e4:ec:46:0a:d7:a1:10:1c:b9:03:
         13:a5:3b:76:d2:36:fd:05:48:6e:1d:8a:c2:6c:28:f1:eb:9b:
         44:9f:83:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:05:02 2025 by rpki-client