Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/d0d04f5b-3727-3483-9bd2-8a6b7fbb4d05.roa
File:                     d0d04f5b-3727-3483-9bd2-8a6b7fbb4d05.roa (raw, json)
Hash identifier:          rPElX9bcm3Q9xHZmU4BCrDOBHMIKQh2uK1+KdFIJMas=
Subject key identifier:   5B:D8:6B:CF:BD:2E:00:8E:5B:82:CD:4B:F1:3E:E1:67:2A:30:4A:16
Certificate issuer:       /CN=6526224a-84e8-40af-a273-87e57f2e0cc0
Certificate serial:       010D0C9F4328584B9B3CE3F8A2F41BBDCDA5BD80
Authority key identifier: 65:F7:77:32:1F:14:BA:E9:4C:CE:0E:16:74:46:4E:A4:2E:6A:2E:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/d0d04f5b-3727-3483-9bd2-8a6b7fbb4d05.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     8075
IP address blocks:        144.203.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/6526224a-84e8-40af-a273-87e57f2e0cc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/6526224a-84e8-40af-a273-87e57f2e0cc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:e3:f8:a2:f4:1b:bd:cd:a5:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6526224a-84e8-40af-a273-87e57f2e0cc0
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=6508973b-af30-41fd-973e-bd9b02764ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e6:dc:c9:12:ce:f3:3f:fd:52:74:dc:58:7d:
                    92:03:7f:5a:b2:39:12:2c:3c:44:77:2e:31:50:7e:
                    e4:fc:fe:ad:6c:65:f0:7b:53:46:79:53:96:d1:55:
                    c8:86:0f:86:2f:22:89:91:a6:17:2c:c5:1b:3e:69:
                    3b:ad:e2:e0:88:0d:0e:04:a1:d1:40:49:20:c8:4e:
                    60:f8:20:e8:fd:8f:0e:6b:6c:fc:76:b9:1f:33:7e:
                    76:eb:31:d0:90:ae:d4:df:f1:10:b1:07:78:45:50:
                    71:26:d8:5d:7b:48:7a:da:2e:05:8a:ec:53:c8:97:
                    32:3b:45:41:6a:21:c0:8f:f9:72:f1:2e:7a:fe:e7:
                    dd:eb:3e:ca:6d:96:9d:37:8f:f9:e5:54:3c:6f:1c:
                    54:77:99:57:81:60:48:ee:92:54:c7:81:c0:4a:8b:
                    15:41:9c:ba:97:36:32:17:7b:e3:63:44:4a:5f:06:
                    ec:be:4e:23:57:d8:0a:96:28:58:df:53:f6:49:56:
                    3f:ae:ee:cb:4a:57:6b:6e:e5:71:79:ed:ad:66:5a:
                    8f:61:a2:ad:cb:d3:f6:8d:4d:03:eb:65:9f:cc:6a:
                    54:e8:ab:c2:2f:7d:29:5e:52:89:0b:19:b6:c3:e0:
                    df:0c:a9:ed:f5:6c:ab:2a:b1:e9:47:2f:0b:0d:15:
                    d8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D8:6B:CF:BD:2E:00:8E:5B:82:CD:4B:F1:3E:E1:67:2A:30:4A:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/d0d04f5b-3727-3483-9bd2-8a6b7fbb4d05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/6526224a-84e8-40af-a273-87e57f2e0cc0.crl

            X509v3 Authority Key Identifier:
                keyid:65:F7:77:32:1F:14:BA:E9:4C:CE:0E:16:74:46:4E:A4:2E:6A:2E:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.203.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:b9:97:bf:2e:cd:5f:70:28:5d:2b:a2:0c:2a:26:98:31:e7:
         2f:04:04:16:99:fc:92:b7:66:b8:37:56:73:90:80:9d:29:83:
         68:c1:e2:9d:76:6d:aa:98:3a:b4:9b:d4:a9:c1:c4:a0:0d:d8:
         93:10:7e:37:45:29:53:04:2b:5b:8b:cb:33:f4:66:88:e0:f1:
         84:21:3a:18:43:51:34:c0:96:d7:b7:2e:6c:29:fc:cb:76:68:
         a7:5b:d0:0a:f3:39:e7:74:06:91:e8:d1:23:26:5c:1a:b8:ba:
         a3:83:a0:a8:5d:4f:d6:c0:dd:99:37:f3:65:f0:86:49:e9:3c:
         99:db:9c:47:36:a8:8d:b4:e1:e0:ff:54:fa:c3:5f:80:fc:dd:
         1f:5c:9e:31:3e:c7:c4:3e:3f:9f:36:ef:ca:0d:b3:75:a0:97:
         dd:cf:c7:06:ad:7e:78:b2:f3:98:09:b6:07:11:a3:91:0d:97:
         1b:02:6c:90:8b:42:a7:4a:40:53:95:fa:25:7b:db:50:24:4a:
         03:f0:70:65:84:35:64:1e:0d:ca:f7:fe:75:63:46:7d:a3:78:
         2d:bc:c8:45:c4:56:1e:b9:ee:20:da:3b:05:05:31:19:47:c1:
         aa:4e:62:07:a6:68:f5:1f:ef:3b:d2:1f:8b:58:23:1f:1e:32:
         53:b1:a8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:58:23 2025 by rpki-client