Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6/453527a2-dbfe-312b-9bfe-6a6e4386269f.roa
File:                     453527a2-dbfe-312b-9bfe-6a6e4386269f.roa (raw, json)
Hash identifier:          4E+isR+30FAMPC2hwFAVHpLSmPaT1uLEmCwFJEGLmn4=
Subject key identifier:   EA:09:63:54:76:00:B3:9B:B8:E5:9D:2E:E8:BA:7B:2C:F9:85:2D:E6
Certificate issuer:       /CN=623d1527-5b57-4129-8bda-7e41b87729f6
Certificate serial:       010D0C9F4328584B23319772E1C1E03298C49B80
Authority key identifier: 9A:77:E7:35:30:95:25:FE:9E:77:EC:C3:90:7A:1C:A0:44:67:0C:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6/453527a2-dbfe-312b-9bfe-6a6e4386269f.roa
Signing time:             Tue 09 Sep 2025 13:00:41 +0000
ROA not before:           Tue 09 Sep 2025 13:00:41 +0000
ROA not after:            Mon 08 Dec 2025 14:00:41 +0000
asID:                     376
IP address blocks:        132.215.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6/623d1527-5b57-4129-8bda-7e41b87729f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6/623d1527-5b57-4129-8bda-7e41b87729f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:23:31:97:72:e1:c1:e0:32:98:c4:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=623d1527-5b57-4129-8bda-7e41b87729f6
        Validity
            Not Before: Sep  9 13:00:41 2025 GMT
            Not After : Dec  8 14:00:41 2025 GMT
        Subject: CN=2de4b1ec-ec88-4c71-9052-f3f612e0b8cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:71:58:a7:45:51:95:e4:47:23:87:78:83:72:
                    6b:ce:52:96:e7:51:ee:41:6b:08:2b:40:98:6e:4d:
                    de:bc:92:2d:1c:c0:33:be:3c:5d:31:dc:81:db:dc:
                    eb:9c:d6:1c:df:b6:23:71:e9:18:0a:ca:39:1e:6c:
                    88:b6:0e:7d:95:c2:b5:b8:c8:f9:74:f0:28:e6:f8:
                    0a:14:0b:6c:88:de:50:37:c5:33:80:55:af:43:3c:
                    f6:ea:57:6e:bf:99:58:22:12:25:89:66:85:9d:fa:
                    65:7e:32:48:53:6a:e4:83:bb:27:f6:9e:39:77:f8:
                    bd:c0:85:51:fb:65:2e:04:93:ff:c1:18:32:bf:ae:
                    dc:a4:4c:92:72:89:27:17:0b:e0:d6:50:9a:aa:79:
                    3b:3f:20:0d:fe:f2:23:74:51:87:3c:89:14:8c:6d:
                    65:8d:7e:6f:7d:98:c6:46:4c:38:cd:d2:4f:a3:93:
                    da:49:03:96:26:8e:cb:ca:ae:82:4c:1b:a0:fc:3e:
                    4b:e8:28:8c:8c:83:cc:2b:87:0d:55:84:b2:be:13:
                    0f:25:83:54:85:e3:38:4b:63:01:dd:70:14:46:37:
                    6e:c0:ff:79:7f:42:b4:4c:18:8e:98:d4:17:ce:8c:
                    6e:33:19:61:6b:56:27:aa:82:a3:60:49:b8:d4:3a:
                    67:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:09:63:54:76:00:B3:9B:B8:E5:9D:2E:E8:BA:7B:2C:F9:85:2D:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6/453527a2-dbfe-312b-9bfe-6a6e4386269f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6/623d1527-5b57-4129-8bda-7e41b87729f6.crl

            X509v3 Authority Key Identifier:
                keyid:9A:77:E7:35:30:95:25:FE:9E:77:EC:C3:90:7A:1C:A0:44:67:0C:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/623d1527-5b57-4129-8bda-7e41b87729f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.215.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:73:ca:e3:5f:c1:c3:27:2f:db:5d:86:52:07:d6:91:c2:6b:
         be:a1:16:ad:5e:42:70:b5:f4:e5:87:22:9a:88:49:cf:aa:ac:
         dd:d6:b1:69:17:70:b1:3c:d8:3d:c3:b3:b9:01:8f:97:c1:23:
         e2:10:88:33:03:99:cf:08:08:7e:69:f6:de:d5:23:e0:ef:03:
         46:31:07:6b:9c:0e:d5:e1:a5:d7:2b:49:10:63:87:25:4d:d6:
         02:b8:f6:77:11:7f:59:8f:b0:12:78:0f:13:11:13:a1:90:53:
         a8:61:a1:6b:3d:06:39:69:20:12:bf:1c:d6:e5:c7:2a:52:f9:
         e8:02:bc:d9:3b:e9:4d:d8:d7:53:2c:d7:df:b3:4b:ae:6d:37:
         b6:93:d1:c2:c9:01:7e:ff:05:b6:f0:87:bb:9b:f8:5c:f1:48:
         d8:ad:dd:2c:ab:fa:ca:6e:45:d2:08:c5:a7:d0:14:78:af:a5:
         96:55:21:96:7e:84:53:a5:34:32:6f:b9:d3:45:08:bd:de:d1:
         15:08:d6:ca:7a:53:bf:63:e1:f0:ae:4c:10:cb:6f:01:93:7b:
         73:f0:2d:39:06:8e:02:6d:f8:c3:2c:0b:ad:57:c1:1c:a0:78:
         2d:87:a4:9c:0a:56:b5:31:56:8c:7c:58:56:81:26:07:e7:ce:
         5d:16:de:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 10:45:38 2025 by rpki-client