Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1ceb3013-08d8-34fd-a9d7-99fb3bec1919.roa
File:                     1ceb3013-08d8-34fd-a9d7-99fb3bec1919.roa (raw, json)
Hash identifier:          12pbb5TWxRIAuT3tC2wi7yxbiGpAHfNDA2IwhuO747Y=
Subject key identifier:   D9:E0:32:B0:40:92:A3:C1:97:9C:36:DC:DC:97:AC:34:0D:94:C9:08
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584BC270ED6D5E8052E7CDB52B00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1ceb3013-08d8-34fd-a9d7-99fb3bec1919.roa
Signing time:             Wed 05 Nov 2025 14:00:38 +0000
ROA not before:           Wed 05 Nov 2025 14:00:38 +0000
ROA not after:            Tue 03 Feb 2026 14:00:38 +0000
asID:                     577
IP address blocks:        184.148.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c2:70:ed:6d:5e:80:52:e7:cd:b5:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Nov  5 14:00:38 2025 GMT
            Not After : Feb  3 14:00:38 2026 GMT
        Subject: CN=b5508a4d-c1d2-4453-a7e7-1b7e433de3f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3d:4a:6c:09:77:d4:a3:4d:27:1e:b1:44:c9:
                    31:41:41:a2:85:95:62:35:4b:30:a4:c1:9b:37:ea:
                    41:e7:a9:4b:df:b7:d4:64:34:80:6b:a3:f1:57:6a:
                    54:df:0e:51:f8:a2:ed:40:00:6d:84:76:1c:44:a6:
                    de:4e:0d:f7:f8:3b:90:d6:77:02:21:57:fa:c4:0d:
                    3d:84:31:cf:24:27:e9:1b:13:42:f4:38:08:66:69:
                    6f:89:74:4a:33:ba:17:c2:64:f8:88:68:f3:3c:5d:
                    f4:1a:2e:ea:bf:f5:b9:bc:ef:67:b6:7b:9d:99:eb:
                    c6:ab:27:72:d0:e1:e7:d3:89:3c:41:30:fd:57:76:
                    c2:8f:be:c9:01:a4:c9:b9:b5:19:c6:f1:f4:23:ae:
                    db:e3:94:0d:55:56:3c:85:02:49:c5:31:88:63:d7:
                    75:54:3b:5f:f3:62:d2:58:ac:c0:f5:d8:81:0e:09:
                    c5:c9:65:a5:e0:2a:02:9c:f7:50:4c:03:ac:60:4a:
                    ff:d7:4f:91:f2:d4:19:0e:08:04:1f:da:ba:0f:cd:
                    76:6b:db:cc:95:e6:fc:c7:2b:e8:24:38:0e:07:1f:
                    bc:38:21:99:6c:9e:2e:68:cc:2f:5f:ae:1d:63:94:
                    42:91:a8:06:bf:ac:23:93:f4:3c:b7:c8:9b:86:37:
                    33:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E0:32:B0:40:92:A3:C1:97:9C:36:DC:DC:97:AC:34:0D:94:C9:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/1ceb3013-08d8-34fd-a9d7-99fb3bec1919.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.148.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:6e:45:b6:2f:e9:2e:ab:eb:80:02:07:7d:94:46:f5:28:08:
         9c:33:44:77:50:bc:d6:0f:28:7a:d1:27:c5:81:bb:4f:5c:88:
         a5:14:bc:eb:b0:8b:0a:49:5a:1d:52:9d:bc:72:8d:3e:86:80:
         32:b8:de:3d:d7:7e:63:ae:97:ed:7a:9b:49:ec:2b:f2:80:0d:
         b4:3a:87:db:5b:c4:d7:d7:06:34:bb:d5:c7:80:f4:8f:7b:9e:
         d7:da:15:d1:90:aa:f4:eb:1c:e4:51:4b:11:a3:88:4a:f3:af:
         17:05:2e:d9:19:2f:49:df:c6:7d:ef:83:82:53:19:1b:1b:7c:
         3f:0e:44:1b:13:23:71:b6:5d:df:1c:ae:8f:fb:b0:52:74:ae:
         47:e7:1b:7a:5b:a4:73:c3:26:d5:e7:86:6e:77:1c:c7:13:fa:
         c2:13:cd:f3:1a:58:36:a5:23:a0:7e:f8:19:f4:f7:e7:9f:f3:
         78:ea:06:83:aa:98:08:10:8e:df:65:b4:4e:9b:a8:05:ce:1a:
         fc:00:fc:fb:99:84:eb:42:7c:91:09:0d:e3:c5:75:cd:b5:d7:
         f5:56:20:b9:ec:70:e3:9e:90:3d:ff:df:25:f8:89:20:7f:82:
         24:c1:af:18:df:c2:68:6d:f4:54:c3:0f:e0:dc:9d:07:67:d4:
         a6:28:26:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:17:38 2025 by rpki-client