Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/331337f9-45ca-33c2-be93-6ef2703fcc91.roa
File:                     331337f9-45ca-33c2-be93-6ef2703fcc91.roa (raw, json)
Hash identifier:          N7WaNq4yXoaVqnZRMGMZ4VA4+hxWOstMoOBLq7z4D6s=
Subject key identifier:   C3:D5:BF:45:9B:FA:AB:92:75:D7:3E:D8:99:C6:A3:0F:DD:1D:47:B9
Certificate issuer:       /CN=52cae98e-9a01-4898-90d2-074cdeea24fa
Certificate serial:       010D0C9F4328584B8EACEA582468EC967FF18700
Authority key identifier: 04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/331337f9-45ca-33c2-be93-6ef2703fcc91.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     13325
IP address blocks:        136.181.195.0/25 maxlen: 25
                          136.181.195.128/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:ea:58:24:68:ec:96:7f:f1:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52cae98e-9a01-4898-90d2-074cdeea24fa
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=92d93374-c49f-453a-b965-2a7dc227205b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:61:f8:6c:ae:8d:85:73:d5:18:88:25:b8:3b:
                    57:19:79:56:15:12:2d:de:1c:c2:f9:c7:1a:5a:aa:
                    d4:8e:44:ac:48:3a:c5:e4:a9:70:59:05:9d:d6:f0:
                    e3:13:c6:4c:dd:f1:75:ae:59:c7:04:57:f4:37:65:
                    2b:f6:52:33:08:65:ae:95:b0:2d:50:18:34:54:9f:
                    c4:e7:a5:84:68:98:14:98:48:bd:56:72:fe:1a:6b:
                    27:8d:46:09:60:af:d2:11:d5:5a:ce:57:86:34:e3:
                    e0:eb:1d:e9:ec:21:17:5b:73:96:b5:e2:f0:73:ce:
                    35:5e:de:84:e3:e5:20:15:5e:6e:b2:f4:73:e9:cb:
                    77:7b:4b:61:a1:18:5e:ba:40:ed:9d:7f:cf:de:37:
                    92:98:f0:48:e1:33:73:93:60:93:c0:44:3a:16:56:
                    06:25:34:f5:b0:ab:04:82:23:e7:ab:40:47:7c:cd:
                    c8:3a:b5:5b:50:16:76:af:e9:d1:a8:50:67:45:b2:
                    d4:00:45:2e:08:08:8a:ea:14:dd:a9:90:fd:1f:14:
                    ab:05:78:0d:c4:0e:f9:4a:99:87:60:15:18:61:8a:
                    3b:52:0f:a5:38:1b:2a:6e:f5:40:62:18:59:52:5a:
                    14:88:e2:03:a4:40:22:e7:07:21:ba:8f:4e:45:9a:
                    19:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D5:BF:45:9B:FA:AB:92:75:D7:3E:D8:99:C6:A3:0F:DD:1D:47:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/331337f9-45ca-33c2-be93-6ef2703fcc91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa/52cae98e-9a01-4898-90d2-074cdeea24fa.crl

            X509v3 Authority Key Identifier:
                keyid:04:32:C6:95:F3:17:21:AC:38:14:2D:1B:34:49:13:9A:4E:D7:FD:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/52cae98e-9a01-4898-90d2-074cdeea24fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.181.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:da:85:21:8e:ba:1d:f1:dd:af:36:26:13:33:6a:0e:6b:47:
         51:55:06:a4:c8:6a:12:b8:87:05:00:c2:33:4d:3c:ca:10:84:
         0c:4d:ba:98:ff:74:26:bc:27:64:5e:c0:5d:7a:dc:60:d8:eb:
         39:52:c7:7c:48:66:6c:33:02:9b:b7:cc:a5:12:c8:3b:f2:23:
         52:38:e1:db:ad:29:57:a7:5e:dd:e9:bc:50:55:fd:02:70:2d:
         9f:5f:50:e0:5a:a5:95:d3:6f:29:6b:5f:a9:3b:a0:a4:fb:bf:
         84:08:c2:4f:c3:6a:54:2f:d3:e9:2e:8a:86:b2:1f:8a:39:e8:
         1b:35:64:e1:d5:fb:bf:e8:5e:4b:b1:88:6b:09:9b:7d:96:a2:
         4c:db:4f:59:3f:61:aa:2e:ec:1f:45:d6:7a:29:f9:3f:11:d3:
         cd:2f:7c:e3:cb:76:9c:19:f4:90:b5:b2:c8:fa:d5:2d:ea:f9:
         24:0e:49:78:c2:b5:5e:52:8a:10:80:b6:79:36:87:b7:7b:3c:
         b3:56:02:76:4f:fe:6f:e1:d0:9b:96:23:a1:47:a2:6e:80:9a:
         01:ce:52:e0:49:56:f9:8f:62:29:84:22:b1:d6:de:c5:d5:f9:
         f5:2e:38:29:49:49:cd:e1:98:ea:6b:46:f5:ee:db:90:e6:45:
         a8:a0:4a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 15:51:54 2025 by rpki-client