Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/83aeb353-4b83-3547-997c-8a4c20e6433a.roa
File:                     83aeb353-4b83-3547-997c-8a4c20e6433a.roa (raw, json)
Hash identifier:          8Ewfn1REfzAhOq2CAgz/KmKfEXOGFWuBTDTJnz9p7eo=
Subject key identifier:   35:CF:C8:57:9F:70:64:4B:98:86:2B:B6:60:34:18:43:A2:0E:15:DD
Certificate issuer:       /CN=32652e19-5988-41fb-a45a-66b23c523f3b
Certificate serial:       010D0C9F4328584B9F9A4A0F511FDFA6485A2480
Authority key identifier: AD:62:7B:72:F7:89:87:43:6D:64:C2:53:C2:E3:85:D1:6C:F2:B5:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/83aeb353-4b83-3547-997c-8a4c20e6433a.roa
Signing time:             Fri 24 Oct 2025 02:32:06 +0000
ROA not before:           Fri 24 Oct 2025 02:32:06 +0000
ROA not after:            Thu 22 Jan 2026 03:32:06 +0000
asID:                     11404
IP address blocks:        142.248.112.0/24 maxlen: 24
                          142.248.113.0/24 maxlen: 24
                          142.248.114.0/24 maxlen: 24
                          142.248.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9f:9a:4a:0f:51:1f:df:a6:48:5a:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32652e19-5988-41fb-a45a-66b23c523f3b
        Validity
            Not Before: Oct 24 02:32:06 2025 GMT
            Not After : Jan 22 03:32:06 2026 GMT
        Subject: CN=15a92bd1-0552-4758-b033-0a4c4c8552d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:19:9f:33:04:fc:3e:98:50:27:67:b6:00:b7:
                    f5:66:54:42:05:43:f1:5e:7d:a3:fc:75:82:3e:1f:
                    10:aa:c2:8e:5e:8f:89:50:28:fc:94:ba:3c:2d:de:
                    13:f8:25:64:56:7a:b7:d3:0b:48:e9:cf:d2:f8:9a:
                    8e:14:2b:1e:24:87:89:e6:ab:83:19:1f:85:21:78:
                    99:1f:9e:da:d6:b5:48:58:72:bf:12:05:a2:fb:ca:
                    fc:c3:fa:35:0f:08:cc:c1:b1:d5:17:de:24:76:da:
                    c3:2e:e6:da:a4:34:cb:84:25:97:bb:21:a4:19:b5:
                    6d:73:f8:a1:59:38:4c:46:36:f2:fa:75:d0:9f:b4:
                    85:0e:ab:f0:b3:1a:6a:30:ad:da:ae:20:d8:8e:23:
                    be:73:e2:68:ae:c6:28:9f:7c:4d:e5:ed:fe:0c:79:
                    84:e3:55:e8:5b:c2:1a:e3:db:80:ce:cd:4e:51:5f:
                    f4:10:f7:be:0e:22:24:2c:96:80:ae:a2:dc:8b:7f:
                    d7:28:1a:b6:a2:4c:e2:5d:c2:1f:f9:5d:9f:60:f8:
                    28:44:c1:83:a4:04:1d:8d:d3:de:2b:c3:f1:89:4c:
                    96:d3:9a:7b:d6:4b:ef:41:bd:a4:49:3d:9a:cd:a5:
                    e6:23:58:fd:65:1e:5a:c8:7f:1b:ae:34:21:d1:a0:
                    39:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CF:C8:57:9F:70:64:4B:98:86:2B:B6:60:34:18:43:A2:0E:15:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/83aeb353-4b83-3547-997c-8a4c20e6433a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b/32652e19-5988-41fb-a45a-66b23c523f3b.crl

            X509v3 Authority Key Identifier:
                keyid:AD:62:7B:72:F7:89:87:43:6D:64:C2:53:C2:E3:85:D1:6C:F2:B5:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/32652e19-5988-41fb-a45a-66b23c523f3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:4a:22:a3:fe:fe:e9:3a:b9:2d:e8:5d:85:ec:7c:0b:12:cc:
         15:d4:06:9f:8a:57:90:0d:30:86:f8:c4:07:f1:36:ef:84:69:
         b7:58:1e:e0:a3:b7:3a:7c:56:72:f1:5d:40:cd:37:b0:9c:e0:
         90:24:61:34:67:dd:a3:a6:5d:4d:08:c1:b1:59:02:c0:da:44:
         41:13:9d:45:6d:4e:65:9e:28:f7:2f:c5:ec:f0:2d:d3:d1:03:
         e2:a3:66:52:db:11:84:4d:b3:82:22:bb:61:df:ea:8b:16:b4:
         a5:60:f4:33:63:9a:67:19:82:e7:46:14:72:42:bc:b2:b9:cd:
         d8:29:e4:df:b4:ca:eb:f9:ce:1c:37:24:0c:f0:2e:c2:0c:9d:
         45:bf:e3:cd:51:05:80:ec:b3:ac:36:00:13:7d:2c:c5:1a:8e:
         90:b0:f7:3f:fc:3e:11:df:9b:f5:ee:e1:81:35:b3:33:08:89:
         b6:9d:d3:4a:ce:39:3c:33:69:ad:8b:bd:d9:4d:d7:86:60:99:
         70:7c:f5:5f:c9:c2:44:52:42:ba:fd:55:dd:66:34:45:32:06:
         0c:04:26:60:e7:52:e1:c9:ae:43:85:f1:56:cb:4e:78:22:3e:
         4d:c0:20:63:07:00:fb:bd:a4:25:77:f5:2a:08:1e:27:a8:0e:
         3c:dc:50:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 17:09:52 2025 by rpki-client