Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/16e4edcb-336c-3921-b8fa-7f894f76cbab.roa
File:                     16e4edcb-336c-3921-b8fa-7f894f76cbab.roa (raw, json)
Hash identifier:          nTFbpM7Ds0hUf/E7L49/UiZrLASs61tWDOwbh/1b2X0=
Subject key identifier:   6A:27:25:8F:A0:56:80:1A:22:27:00:CA:5B:7F:CF:42:FB:03:F7:25
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584B2CF6E57F5AF8C67004C080E0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/16e4edcb-336c-3921-b8fa-7f894f76cbab.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     30103
IP address blocks:        149.137.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:e5:7f:5a:f8:c6:70:04:c0:80:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=7bf6714c-1a22-4e9c-8f43-042090108966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d6:10:34:51:e6:07:e6:cc:59:b5:da:8a:aa:
                    d5:91:e2:fe:37:f9:4c:98:03:2d:e0:bc:67:6a:9d:
                    ac:99:fe:29:1c:3f:0d:bf:4f:89:ce:d5:55:22:02:
                    91:de:ce:3a:8e:9f:14:d8:e6:23:44:58:28:c5:69:
                    af:76:64:bb:0d:f3:c3:27:0d:6e:df:e2:01:23:15:
                    52:48:28:a5:be:e3:0f:ff:07:6f:9e:c3:b5:e8:76:
                    1f:d4:b4:2c:d8:4d:a6:87:af:12:9f:3b:9a:b6:62:
                    32:a5:df:2e:df:e7:48:1f:d7:74:ec:15:c8:db:23:
                    9b:8f:22:08:9e:cf:a4:06:05:81:6c:7b:3f:19:fd:
                    45:7f:a2:64:d6:9c:9a:b8:eb:9c:67:23:d4:7a:28:
                    50:99:c9:9c:43:64:ae:a5:73:76:f0:52:7b:a9:d3:
                    f6:f9:6d:e4:46:b4:dc:16:9d:3f:44:63:7d:3d:05:
                    5a:7b:50:3a:7e:37:36:ba:b1:8a:fe:a1:3a:13:6b:
                    de:b6:06:3f:63:e7:8f:9b:5c:2a:4a:ac:28:e0:7a:
                    e4:21:1e:ee:28:63:c0:f0:44:8e:2b:d4:6b:0e:97:
                    19:66:f8:9d:7d:64:e1:94:e6:ec:7b:5e:30:7f:22:
                    1e:ca:22:35:d2:ed:d3:97:c2:ea:24:df:e0:f8:70:
                    79:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:27:25:8F:A0:56:80:1A:22:27:00:CA:5B:7F:CF:42:FB:03:F7:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/16e4edcb-336c-3921-b8fa-7f894f76cbab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.137.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:d6:8c:e0:94:e1:fc:9b:28:ca:70:c5:37:43:92:92:67:90:
         dd:1c:44:33:94:e2:4d:54:61:a7:4f:1d:72:e8:07:98:36:12:
         8b:7c:ae:a0:0d:4a:81:3c:78:27:5d:c2:bb:3b:2e:93:d8:8e:
         96:85:98:54:c1:9e:01:30:15:0a:91:16:a2:b4:94:91:52:52:
         90:28:c0:8b:b1:a6:38:21:4a:86:82:bc:41:1b:e8:58:6c:57:
         23:8d:e6:ea:b6:fe:0c:05:47:e0:bf:f6:7a:78:47:f4:55:ee:
         d0:ce:61:3c:52:6e:5d:23:f8:ac:fc:d9:7e:4e:87:3b:c1:3e:
         df:3c:7c:94:1c:ad:f4:80:24:ef:f4:f6:e0:4a:02:46:3b:ac:
         01:b5:44:f3:99:9c:ce:89:6f:08:1d:d5:11:de:40:67:1c:e0:
         55:15:8a:af:c2:b8:24:c8:41:cb:b0:9f:c2:ff:e4:43:42:3b:
         dd:6c:58:43:cd:19:85:50:d2:c8:bd:90:d5:d1:db:97:9f:a9:
         4c:ce:43:5d:53:77:38:c0:a7:e0:bc:34:33:25:44:a9:fd:c0:
         37:ba:5c:67:ad:77:37:8c:b4:62:c8:b2:1e:4f:73:6b:15:45:
         ef:a7:a9:07:c7:28:0a:9d:f9:f4:2b:08:26:71:07:5e:5e:e4:
         4d:3b:23:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:31:41 2025 by rpki-client