Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/f682982f-95dd-3510-9ccb-847695c6ea56.roa
File:                     f682982f-95dd-3510-9ccb-847695c6ea56.roa (raw, json)
Hash identifier:          NGctBQ2YFq62Z/9b04HBDJZj0oWLdU69m4GWdr8RWAw=
Subject key identifier:   53:0A:6F:6E:6E:8F:9B:DB:F3:FB:E8:A8:5E:B9:1F:F0:E5:84:22:9B
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584B2A2C4F09C0FEFF946DB56700
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/f682982f-95dd-3510-9ccb-847695c6ea56.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     14114
IP address blocks:        157.133.104.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:4f:09:c0:fe:ff:94:6d:b5:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=6385042d-735a-42a1-86bd-6949ade3cdf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c6:28:a7:36:57:5b:67:03:d3:08:3d:7c:4d:
                    49:8c:a8:de:16:c6:56:87:5c:35:0a:35:cd:9f:72:
                    46:20:33:e0:e5:2e:37:9a:e4:c9:dc:9b:1a:d8:49:
                    09:bb:9c:c5:4e:bd:38:2c:58:19:04:6e:e7:1e:f0:
                    99:c3:02:05:af:04:50:0b:73:bd:66:7b:f5:77:27:
                    72:e2:9e:52:a3:2f:97:87:80:39:e9:f6:d5:39:54:
                    1f:cd:81:13:fb:b6:c8:43:ab:a9:3a:2e:c4:84:ca:
                    6e:ae:ec:d4:36:d0:37:d3:17:40:0c:82:f2:c3:17:
                    8e:73:8a:02:42:8a:47:a9:8b:25:ee:b2:0d:dc:41:
                    f2:b4:d2:5f:4b:9d:fa:c2:d7:ff:22:01:a2:d1:eb:
                    87:2d:2e:c7:18:3d:44:de:a7:66:0d:5d:7e:7e:b5:
                    bd:f9:df:8b:25:a9:b5:94:7f:95:3a:04:2d:f3:b6:
                    5c:24:84:33:4a:fc:3a:78:ca:a7:a5:36:cc:91:82:
                    0d:36:56:7b:fa:86:82:01:c6:38:b8:13:f4:46:4a:
                    f2:e5:50:68:a1:71:f2:08:55:52:46:52:6a:f0:85:
                    f7:52:5f:40:1c:1e:16:59:8e:c1:42:3e:43:07:9f:
                    de:ee:35:5d:1b:fa:5c:65:a0:04:7a:de:fd:c1:3e:
                    93:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:0A:6F:6E:6E:8F:9B:DB:F3:FB:E8:A8:5E:B9:1F:F0:E5:84:22:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/f682982f-95dd-3510-9ccb-847695c6ea56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:f2:96:bd:5b:a8:37:b7:ee:a5:96:1e:6e:f0:58:be:73:9c:
         3c:a2:d9:0d:9d:29:1f:36:1e:a2:be:06:81:8d:9f:39:6f:4c:
         da:d2:ab:a4:6b:4e:65:3a:31:a3:a3:6a:b8:74:4b:a1:d2:56:
         2b:37:bb:ed:8e:d0:fb:84:23:7f:86:a8:db:e9:f4:d4:c9:87:
         07:a8:6f:04:3e:c5:97:7b:b8:39:27:d5:04:b1:7e:04:31:00:
         8d:99:2d:71:45:cc:5f:9f:f9:b1:24:15:7c:31:02:b0:98:d5:
         0c:36:14:dc:68:28:19:5f:82:11:9e:1d:1b:0d:44:3b:cd:d8:
         c6:c6:1b:43:ff:e7:74:7e:ba:2c:d5:54:d9:a4:9b:cd:3c:46:
         ce:7f:52:78:47:af:eb:1a:ed:ce:7a:2a:ee:4e:59:10:bf:b5:
         12:4c:92:45:12:80:e7:0a:a1:b0:23:6a:bb:96:f9:20:c3:4b:
         dc:18:18:15:a8:bb:90:00:a7:80:46:1e:bb:0c:88:08:45:c2:
         ad:fb:71:d3:6f:df:ca:3d:bb:e3:eb:a3:d6:20:77:1c:15:ad:
         1f:a7:d5:bb:02:60:53:30:a4:11:75:05:68:6c:76:02:62:3a:
         b9:41:dc:50:15:07:d0:b5:2a:5a:7b:0e:94:34:57:b6:9a:cf:
         f5:72:5c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 18:04:53 2025 by rpki-client