Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a450c5e7-eed1-346c-a65f-9f9e86242ec6.roa
File:                     a450c5e7-eed1-346c-a65f-9f9e86242ec6.roa (raw, json)
Hash identifier:          05qHAVSKIUV1spnE6E4oT7I3D4T/em3+LtJDfsLgu0s=
Subject key identifier:   AC:B8:FE:35:A0:6A:56:21:FD:23:21:8B:A7:68:08:E6:6F:D9:58:67
Certificate issuer:       /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial:       010D0C9F4328584BB02D05B0E1B8A0068E63DD00
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a450c5e7-eed1-346c-a65f-9f9e86242ec6.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     54113
IP address blocks:        131.125.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2d:05:b0:e1:b8:a0:06:8e:63:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=422d786a-681e-40fe-8a6a-fe96edb4fe6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e2:c2:65:3c:48:6f:97:2e:bf:5f:e9:1f:39:
                    01:d5:7f:b7:6f:84:ef:80:47:0e:bc:04:e5:4b:e5:
                    61:ac:b2:c2:cb:4b:7c:87:4a:71:2a:7a:13:84:67:
                    f6:3c:5b:df:5f:d4:bb:52:cf:e8:fb:75:d4:3e:04:
                    c9:dd:de:b4:61:3a:05:61:ca:e8:a9:f8:6e:1e:e2:
                    b7:b7:39:64:51:22:34:95:f2:ff:5b:8a:c5:96:59:
                    66:6b:35:ec:b1:d9:d1:1d:dc:5a:98:50:e7:60:b4:
                    f9:69:93:11:fc:1f:4a:96:1f:9d:89:16:a4:1d:68:
                    19:af:da:42:ee:38:40:cb:a6:ef:ec:51:01:18:e0:
                    8c:f7:c4:fa:b5:f1:56:7e:12:30:52:4d:1e:39:96:
                    9a:05:5b:7a:b5:b9:45:04:c0:8c:35:34:64:b1:c1:
                    ba:21:10:bc:ed:8f:39:5c:1d:59:45:be:2f:a5:86:
                    84:71:56:ce:8e:b9:14:32:ee:ce:00:e9:f7:14:cc:
                    1c:84:63:10:54:70:ed:5c:e9:74:0e:25:df:ae:b0:
                    df:4b:4a:6b:f5:ee:a0:d0:9f:3d:b2:ef:e5:33:ee:
                    1a:0f:ed:37:76:7b:71:69:53:9e:f3:35:e4:b8:c4:
                    c5:1c:f0:f8:88:a6:3a:ea:87:93:fb:01:1a:d1:03:
                    ff:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B8:FE:35:A0:6A:56:21:FD:23:21:8B:A7:68:08:E6:6F:D9:58:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a450c5e7-eed1-346c-a65f-9f9e86242ec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.125.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:6b:27:14:71:ce:5c:df:6c:66:94:ff:af:3b:fa:f2:a4:cb:
         3c:ac:71:78:1e:3d:12:bd:17:36:6d:af:c9:6e:06:25:a2:35:
         c3:6d:f1:da:05:58:27:1a:27:0b:ce:b7:92:0b:e6:42:99:62:
         36:26:dc:b0:e2:ab:09:8c:42:20:dd:c3:8e:bf:65:b9:8b:b8:
         d8:7d:a0:19:6b:e3:20:f7:a5:e7:f1:cf:11:db:ea:9c:8d:20:
         86:1a:e4:ed:f8:f6:9c:0f:4a:a8:3c:7d:9f:cc:f6:ba:c1:5f:
         25:58:53:49:1f:13:2b:99:83:88:d8:37:c6:78:74:e2:13:33:
         06:70:f6:be:d0:cb:47:29:7e:52:cf:05:e8:6f:fe:3f:65:2a:
         45:ed:e9:04:fc:76:c5:f8:05:a2:3b:5d:1f:fe:ef:e5:37:46:
         71:d6:22:55:86:b5:bd:11:1e:2b:6f:5d:79:15:b7:b7:ec:28:
         1b:2b:f5:45:fc:7b:08:d2:30:2e:a1:15:33:49:85:20:45:0a:
         fc:7e:01:2a:4f:f1:b3:31:4d:44:37:82:f3:fe:1f:f2:69:b0:
         25:d8:8a:85:6e:50:9c:af:18:06:df:d0:28:b1:e5:58:8c:12:
         64:d5:19:b7:a0:61:85:3f:10:53:82:a6:be:12:5d:4b:ea:bf:
         1b:6b:08:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:20:00 2025 by rpki-client