Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/d384f6c1-81ba-3117-b845-8648caee45fe.roa
File:                     d384f6c1-81ba-3117-b845-8648caee45fe.roa (raw, json)
Hash identifier:          lPCQN9n7+E10fwlPXrIZeSJzkMQwhlr9elf2XDWxC20=
Subject key identifier:   9E:16:2B:15:6A:A2:0C:37:3D:96:58:10:FA:9F:9A:4A:D2:25:2D:00
Certificate issuer:       /CN=fe165f6f-fcf3-4c06-b884-36e60521c216
Certificate serial:       010D0C9F4328584B21CC2193CB0D46A45D010680
Authority key identifier: 25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/d384f6c1-81ba-3117-b845-8648caee45fe.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     396982
IP address blocks:        142.147.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:21:93:cb:0d:46:a4:5d:01:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe165f6f-fcf3-4c06-b884-36e60521c216
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=b905c466-6d65-4de1-9b7a-6464be072542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:95:43:14:3b:9c:fb:67:36:ba:59:b4:b1:e6:
                    44:e9:44:e3:d8:96:87:db:21:6e:46:11:39:e6:0e:
                    ca:92:46:d6:13:62:9d:67:87:d2:e6:79:3f:e7:4a:
                    20:e0:3b:52:ab:f9:80:59:e6:c8:c7:5f:03:fb:cb:
                    10:e0:24:17:95:15:aa:03:78:66:99:92:fe:9e:6d:
                    b0:59:fb:71:de:40:c7:8e:cc:4b:98:71:c0:b4:be:
                    dc:a3:91:9e:ba:4e:dd:5c:2d:5c:68:be:fd:13:87:
                    df:d7:42:74:ff:c1:52:f2:39:c8:67:5a:b1:21:c2:
                    f9:42:83:25:65:c6:38:80:7b:d9:61:01:3d:cc:66:
                    0b:9e:69:7b:ca:4b:99:be:91:5e:d7:32:21:7e:4d:
                    79:5f:1f:4e:51:ef:c6:a7:8e:5f:01:33:e4:85:63:
                    26:22:9a:0f:3a:a0:c5:a5:19:73:a7:d8:69:8b:fa:
                    5b:76:b6:68:2d:f0:71:ec:24:32:d8:ca:3f:e5:63:
                    0b:8d:17:22:27:b0:ee:73:16:53:6f:61:a0:a1:76:
                    f3:99:d7:79:39:42:71:b1:4d:59:88:61:2f:fd:b7:
                    05:a9:11:45:d8:8a:19:b1:b9:ab:a9:a2:67:e8:03:
                    a0:c0:17:9f:3b:ae:56:b3:75:6a:37:11:de:21:f4:
                    4e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:16:2B:15:6A:A2:0C:37:3D:96:58:10:FA:9F:9A:4A:D2:25:2D:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/d384f6c1-81ba-3117-b845-8648caee45fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216/fe165f6f-fcf3-4c06-b884-36e60521c216.crl

            X509v3 Authority Key Identifier:
                keyid:25:C0:3A:93:32:8F:E5:EA:E5:38:B0:6D:4B:B8:EF:C2:B0:F7:3D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/fe165f6f-fcf3-4c06-b884-36e60521c216.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:0f:2b:20:0b:5b:81:c0:4c:23:d8:c2:31:6d:74:fd:0f:4a:
         18:72:d2:04:d0:4e:4f:25:77:8f:af:87:96:a0:38:14:0d:13:
         c4:31:99:d4:22:4d:70:89:85:98:40:55:9e:62:2c:38:f0:42:
         9d:d6:3f:c0:6d:3c:7c:86:8a:5d:0c:de:2a:10:ff:c0:77:b8:
         10:38:6c:67:64:17:33:5f:fb:c6:fa:e4:84:91:cd:29:49:04:
         21:c0:b2:ef:cc:a7:df:91:08:58:68:a4:1c:e3:0f:34:be:5d:
         53:77:33:e8:dc:f7:ec:a8:61:09:63:cd:02:ed:71:43:c8:ce:
         aa:83:2d:e9:37:06:50:2f:d6:d7:f8:fb:04:84:e0:0b:84:07:
         b9:62:85:b7:5c:69:fb:a7:dd:c8:9c:24:7e:a3:b5:2b:28:17:
         63:b0:af:92:21:21:82:c1:56:26:19:8a:46:18:cd:bd:e0:de:
         b9:be:89:24:4e:b1:44:f7:c5:68:0f:40:e0:6b:d6:42:7c:ba:
         8e:a9:a8:58:50:ea:e5:4c:45:4b:17:27:2b:ae:18:1b:ff:53:
         b1:03:01:04:e4:aa:1c:13:86:73:1a:cd:6c:71:46:2f:2e:45:
         a0:24:eb:53:ba:07:a2:c7:2a:f8:4d:60:64:65:41:5d:89:af:
         68:7f:49:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 02:43:22 2025 by rpki-client