Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ff16de6c-4bf8-3010-8427-07ea37222961.roa
File:                     ff16de6c-4bf8-3010-8427-07ea37222961.roa (raw, json)
Hash identifier:          8+2VYQICkWasuBizAn6vlv8YZAvMKb6c69+OfOHAn7s=
Subject key identifier:   F5:AA:6E:27:CA:93:44:A8:FF:E3:74:62:2E:5C:3A:01:3F:83:1B:E1
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584B28C0F4E8F5638D57BE556300
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ff16de6c-4bf8-3010-8427-07ea37222961.roa
Signing time:             Thu 11 Sep 2025 12:48:49 +0000
ROA not before:           Thu 11 Sep 2025 12:48:49 +0000
ROA not after:            Wed 10 Dec 2025 13:48:49 +0000
asID:                     205356
IP address blocks:        157.133.68.0/24 maxlen: 24
                          157.133.69.0/24 maxlen: 24
                          157.133.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:28:c0:f4:e8:f5:63:8d:57:be:55:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Sep 11 12:48:49 2025 GMT
            Not After : Dec 10 13:48:49 2025 GMT
        Subject: CN=1510ec37-9ee8-4db0-ae2a-bb1963190daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:29:e3:65:64:ac:b8:d9:d2:11:c7:89:48:de:
                    48:7f:28:19:10:96:16:df:7e:0c:2c:93:68:a4:d1:
                    26:ba:ed:50:42:53:49:31:0a:44:46:3f:eb:67:24:
                    42:28:e7:aa:09:c5:5b:86:d9:72:5f:4a:ef:d2:18:
                    f7:9b:b3:fe:d9:80:77:c7:7c:6a:29:68:1c:52:60:
                    4d:c0:cb:ac:7b:ca:eb:86:70:96:24:9c:a3:45:c2:
                    21:72:42:3b:30:f2:36:c9:ae:90:b2:15:37:5b:04:
                    d4:67:a2:54:67:36:dc:21:35:29:53:48:2d:5f:96:
                    63:8a:05:82:f2:ec:ea:88:e1:f0:fa:e2:83:5b:7e:
                    35:7e:77:fc:1a:6d:7d:bd:66:76:47:62:95:08:19:
                    47:51:93:56:5a:1e:b9:bf:97:28:15:5c:60:84:dc:
                    1c:5c:46:a3:2e:b1:1b:23:b7:c3:d2:74:d6:63:50:
                    19:96:7b:bb:c2:2e:a4:9f:dc:b6:0c:3f:93:d4:5d:
                    3d:c3:38:94:12:a3:19:8e:02:ef:a8:49:70:0e:52:
                    0a:5f:19:bd:a2:f5:dc:fb:6b:d1:08:de:30:31:51:
                    96:80:36:ef:3d:c8:9c:a3:00:d4:d1:db:18:be:53:
                    f1:1d:a4:4c:c0:51:e4:d6:90:87:4b:c4:4a:b2:ee:
                    86:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:AA:6E:27:CA:93:44:A8:FF:E3:74:62:2E:5C:3A:01:3F:83:1B:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/ff16de6c-4bf8-3010-8427-07ea37222961.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.68.0-157.133.70.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:79:df:0e:78:b0:b0:10:2f:cf:c3:a6:a9:01:67:2c:26:2f:
         13:bf:08:bb:ef:5f:d9:f8:75:f5:ab:f8:32:32:ef:73:f2:97:
         1b:0b:b6:d2:7f:eb:31:1c:f7:e3:6a:9e:e7:3e:6f:36:22:fe:
         04:6c:02:c1:19:f1:13:94:61:b4:c7:73:53:09:5c:0a:7f:e8:
         5c:2a:7f:00:20:e7:56:e9:d5:ae:eb:b7:3d:58:b6:5d:a4:ad:
         08:27:6b:71:a0:62:85:55:5a:27:4c:25:ce:ea:2a:df:5a:ef:
         af:45:18:2e:1a:3d:64:5a:6f:c3:18:33:5b:7a:ac:ed:8d:d0:
         05:9f:f1:5f:98:37:31:57:66:e5:30:26:1a:a1:a7:7f:1c:8f:
         19:98:02:38:ee:e9:63:70:b7:66:2a:ad:3d:e6:f0:3c:54:63:
         73:fb:6e:79:81:49:8a:62:3f:17:f0:2d:28:03:c7:ab:69:1c:
         44:99:ad:87:06:ed:ae:58:1f:d0:ff:13:2a:b4:ec:16:00:b3:
         81:f5:c0:c8:5e:f5:97:86:b2:2b:6c:28:2f:c3:3a:f7:6f:f0:
         17:6c:b0:a1:f2:1b:41:4c:f2:f7:41:cb:fa:a6:ca:c9:50:b5:
         4a:9a:49:a2:8d:08:2f:2e:7b:46:d5:65:52:97:93:a0:2a:01:
         2e:22:b2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 15:53:45 2025 by rpki-client