Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/5db49c05-03e3-3489-8caa-d2779c119a06.roa
File:                     5db49c05-03e3-3489-8caa-d2779c119a06.roa (raw, json)
Hash identifier:          bc0polhIlbkzRqCQ9mKmz4e3YS3jcsHw0MnE8DDJhZY=
Subject key identifier:   B8:02:EB:8E:87:3A:35:89:D5:9C:5D:7A:D6:C5:1F:AF:8F:E5:5C:61
Certificate issuer:       /CN=1931273b-f68a-4770-b714-cad22762621f
Certificate serial:       010D0C9F4328584BA947C53ADEE3DF4AE624B800
Authority key identifier: F7:16:90:B5:E3:C9:9B:72:25:C4:87:A7:EA:51:76:F2:4E:3C:F6:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/5db49c05-03e3-3489-8caa-d2779c119a06.roa
Signing time:             Mon 27 Oct 2025 13:38:49 +0000
ROA not before:           Mon 27 Oct 2025 13:38:49 +0000
ROA not after:            Sun 25 Jan 2026 14:38:49 +0000
asID:                     55201
IP address blocks:        130.12.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/1931273b-f68a-4770-b714-cad22762621f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/1931273b-f68a-4770-b714-cad22762621f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:47:c5:3a:de:e3:df:4a:e6:24:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1931273b-f68a-4770-b714-cad22762621f
        Validity
            Not Before: Oct 27 13:38:49 2025 GMT
            Not After : Jan 25 14:38:49 2026 GMT
        Subject: CN=733a2b12-d233-4e49-92f3-71c6eecfe4fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:23:64:4b:a5:9b:30:2e:11:90:c7:42:ff:af:
                    4f:82:cd:1e:92:a1:0d:f4:10:7a:d8:be:52:87:3e:
                    9e:4b:6e:e9:19:17:41:cc:9a:6d:71:d0:02:3a:70:
                    91:99:30:87:ec:c4:5e:ad:48:bf:07:5f:06:94:f2:
                    ce:65:4c:9d:27:33:f8:66:04:4e:c7:f4:e8:b8:e2:
                    76:f2:95:e7:69:70:68:dd:52:f9:04:00:21:eb:40:
                    60:ca:5c:38:3f:3c:e7:24:fd:fe:00:90:2f:fe:ec:
                    06:e1:0b:85:0f:32:de:6b:37:26:31:f4:40:08:42:
                    ae:2a:9c:69:45:3a:05:c4:d1:52:e9:66:bb:1d:e4:
                    fd:7d:ec:f8:a3:3e:59:98:bd:80:e5:17:83:a3:c9:
                    e2:19:ce:a5:ac:d8:93:04:73:00:33:8f:24:ac:ae:
                    9b:09:f1:e9:90:22:57:68:8a:4c:de:79:17:76:c0:
                    c5:dd:2e:84:e6:6f:06:2d:7f:59:8b:51:5c:87:05:
                    92:78:f5:2f:7d:59:be:34:e1:33:36:b2:fc:96:2d:
                    5d:8d:40:a6:51:24:bd:bf:c2:e8:29:f5:e8:6b:18:
                    c7:c5:01:2d:d0:0d:d5:02:61:b3:ba:56:ff:30:65:
                    f0:67:f2:ae:d4:8a:05:79:70:eb:20:24:d0:04:4d:
                    53:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:02:EB:8E:87:3A:35:89:D5:9C:5D:7A:D6:C5:1F:AF:8F:E5:5C:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/5db49c05-03e3-3489-8caa-d2779c119a06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/1931273b-f68a-4770-b714-cad22762621f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:16:90:B5:E3:C9:9B:72:25:C4:87:A7:EA:51:76:F2:4E:3C:F6:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:bc:56:a6:33:39:7d:8d:a3:6f:ea:fd:f2:04:ef:20:86:34:
         4b:93:53:5e:ef:67:ef:10:99:74:01:40:6b:8c:05:a7:b9:8c:
         b8:1d:1f:c7:21:31:27:91:cb:21:4a:75:2b:ec:3a:04:50:3d:
         08:c5:9f:d0:77:87:b4:31:aa:d7:91:4c:ba:5e:9b:a9:ff:87:
         e1:d8:99:2d:02:a3:d9:74:0a:31:8b:6f:90:de:62:28:f0:b2:
         46:41:d3:9e:53:c4:52:d0:95:4c:bb:a5:7e:b9:87:09:c7:f2:
         fb:ff:39:6f:b2:32:26:89:c2:1f:a7:bc:0d:6b:c7:a4:73:19:
         b4:d2:db:87:30:de:33:44:5d:7b:45:bc:48:42:63:de:30:f0:
         f6:28:bf:77:f4:a6:41:57:a4:fa:98:1f:34:f7:03:aa:f4:8c:
         4f:c8:64:f9:c1:d9:83:e7:f2:fb:c8:dc:25:2d:59:82:f5:5e:
         86:39:c6:5c:39:de:86:7c:62:7f:48:d4:70:a8:e7:e6:3d:6c:
         0a:7b:77:67:b6:2a:20:f5:58:06:e5:7f:9f:8e:a8:59:26:35:
         66:2b:91:d1:df:e6:44:a8:f0:c9:83:7f:6d:08:f0:3a:8a:05:
         31:90:1d:96:73:45:80:90:64:d5:51:86:66:2a:ec:41:2c:9e:
         c7:bd:18:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:02:02 2025 by rpki-client