Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d03a193-10c3-35f5-a570-a05c4616b50a.roa
File:                     2d03a193-10c3-35f5-a570-a05c4616b50a.roa (raw, json)
Hash identifier:          AyCCKIHYcKDd38GiiqzgcEmTG/QSiVFdkjtv570L9GU=
Subject key identifier:   04:58:3E:62:D0:7B:51:AC:A8:E0:D0:FD:1B:56:0A:39:CB:81:64:1C
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584BB02D05258C9D1BDC986EE140
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d03a193-10c3-35f5-a570-a05c4616b50a.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     54113
IP address blocks:        131.125.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2d:05:25:8c:9d:1b:dc:98:6e:e1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=add7d185-af4e-4492-a239-947192a56e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b1:12:dd:87:7d:dc:4c:9f:66:cb:5f:e1:be:
                    6d:40:4a:c8:4a:2c:41:a9:85:bc:24:a4:43:aa:4a:
                    4d:8f:54:d3:09:a4:23:8e:84:8f:12:c8:1c:6b:99:
                    66:8d:e7:35:0e:cc:9d:f5:46:2a:cd:a6:02:d8:6e:
                    3e:57:eb:de:bc:e4:59:55:0c:b5:93:b3:dc:ef:19:
                    51:1c:46:dc:d4:2d:dd:98:fb:d9:ad:c8:f0:df:1e:
                    da:c2:6f:a6:fd:d3:86:f2:16:f4:9d:ce:c2:e8:62:
                    40:b5:21:bc:ea:87:1d:88:33:a6:ab:cf:97:12:4f:
                    d6:8b:e5:b8:cb:fb:2a:f6:e8:f7:01:3d:72:ce:8a:
                    52:82:e9:dd:ad:78:01:fe:a1:1c:90:1b:4a:59:76:
                    ff:c8:d7:75:8a:43:ee:70:6d:3e:3b:96:67:86:54:
                    14:ea:33:0a:9d:16:4d:da:18:83:d6:f2:fe:b3:3e:
                    7c:35:87:c5:cb:f1:0f:96:c6:26:54:7e:05:0d:e9:
                    ce:67:98:16:f5:74:26:50:f1:70:d2:33:53:d2:eb:
                    0d:df:54:5e:a8:47:33:05:2d:bc:f7:f8:f6:79:99:
                    5e:c2:53:45:03:80:01:3e:b9:11:e3:d8:c4:6b:d9:
                    72:50:e9:53:76:2d:c5:6c:bc:59:2d:7a:61:a6:70:
                    d7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:58:3E:62:D0:7B:51:AC:A8:E0:D0:FD:1B:56:0A:39:CB:81:64:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2d03a193-10c3-35f5-a570-a05c4616b50a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:c7:2b:24:3d:e6:0a:ab:b0:29:69:19:63:8f:18:d7:94:48:
         e9:7f:66:e6:38:89:a4:9c:f5:23:81:5f:58:a3:99:61:ec:89:
         b6:41:e6:95:7c:0e:0e:65:b5:56:c3:a5:0b:52:6a:e5:29:be:
         20:3d:48:9b:94:87:cb:cb:f3:7a:37:a0:74:51:67:c6:6a:2a:
         49:75:3d:04:ad:66:6d:19:d2:dd:34:06:41:01:52:c2:5b:bb:
         fe:90:f1:11:26:bf:c2:62:2b:ae:ef:67:95:5f:50:09:73:51:
         f4:31:b7:79:b0:99:a9:b7:27:f5:29:8d:49:f5:8b:c3:24:1f:
         79:fc:bd:ff:90:3a:27:c2:a4:17:b3:12:53:73:0a:69:60:06:
         e1:af:82:2d:d6:61:1c:ba:ae:a2:a5:fd:a3:6d:45:ab:e2:6f:
         4b:66:fc:0e:7e:2c:77:a0:82:20:2b:e8:09:75:0e:6c:cb:84:
         d7:dc:96:ec:84:59:08:74:a3:74:24:18:a9:1b:8c:d1:9c:b9:
         f3:6b:e2:6f:60:95:8e:57:5b:8c:56:9b:da:aa:fd:df:dd:f3:
         97:44:a5:a6:fe:be:26:b5:3f:31:91:5e:5c:f6:f1:09:c1:bd:
         98:e5:87:4e:29:2b:b2:d1:6a:7e:17:d0:de:ca:7e:26:97:cf:
         7e:09:1e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:12:29 2025 by rpki-client