Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/10d49d5c-b633-3f67-8315-94c511151349.roa
File:                     10d49d5c-b633-3f67-8315-94c511151349.roa (raw, json)
Hash identifier:          8bT3/17B5KjyZnJNJbETUIx8gR4ITq7+PGoZEOd4ybQ=
Subject key identifier:   33:A5:32:57:E6:A5:18:E2:BA:3D:84:24:E3:E6:83:D1:A6:29:01:CD
Certificate issuer:       /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial:       010D0C9F4328584BBFA5AB684D81ED93196CC0A0
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/10d49d5c-b633-3f67-8315-94c511151349.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     16839
IP address blocks:        149.96.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:ab:68:4d:81:ed:93:19:6c:c0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=caf7e093-36d8-4a98-ae16-ed8214873c4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e1:02:9f:d1:82:0f:8f:86:b1:e2:38:25:80:
                    a4:ce:e4:df:5e:f9:81:ae:39:5f:a3:7f:6a:f2:20:
                    1e:dc:6d:b8:31:f2:bc:c9:18:55:2b:88:53:0c:95:
                    fc:40:e4:4f:a4:c4:dc:16:e3:16:39:ea:a4:f2:19:
                    16:9f:23:bd:f5:4d:29:16:81:1b:9d:7d:b2:64:03:
                    a5:92:f4:2f:dd:cb:12:4c:ed:72:70:6a:4f:88:c0:
                    45:a8:87:92:d7:7e:8d:b4:99:d0:72:bf:8f:2f:26:
                    a9:69:af:a6:53:40:03:c7:55:74:97:84:58:7a:7e:
                    dc:e0:9f:06:dd:70:48:5c:47:f0:fc:89:6e:e5:77:
                    49:57:c1:99:f1:6c:15:f1:38:6e:2b:6b:63:14:49:
                    e8:b9:f8:86:e3:3f:ad:ee:a9:aa:30:ec:57:fd:c9:
                    95:31:88:d6:76:75:82:27:7f:d2:46:4a:06:3d:8a:
                    77:c6:97:4b:4f:8c:53:5b:0e:3d:29:51:cf:95:9b:
                    bb:bb:5d:33:80:fc:fd:d0:fd:bd:b9:c2:d6:58:45:
                    95:95:8b:32:07:b9:35:33:79:1e:1b:77:e2:b9:f6:
                    9e:de:a3:3c:3e:82:9c:79:ab:85:0e:65:2d:da:33:
                    5c:6f:a9:8b:b3:cf:b1:7c:b7:45:17:ed:2a:45:59:
                    ea:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A5:32:57:E6:A5:18:E2:BA:3D:84:24:E3:E6:83:D1:A6:29:01:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/10d49d5c-b633-3f67-8315-94c511151349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl

            X509v3 Authority Key Identifier:
                keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.96.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:b4:6a:98:f8:e8:8b:dd:ec:9c:2b:e8:a8:23:c8:8c:92:5d:
         a9:c7:65:94:e9:c0:65:4c:70:a9:d3:ab:00:44:a8:e8:66:32:
         ea:f1:46:4e:2b:7a:35:f3:b4:f7:19:90:0a:8a:17:03:4c:55:
         73:46:69:c1:6f:75:c4:6a:b3:34:b1:8a:6e:f3:55:b6:b2:da:
         40:b9:47:c6:3b:7d:78:36:58:38:09:57:eb:b3:f9:d4:96:4c:
         62:8b:38:41:bb:d3:6a:8c:b2:1f:e0:0b:8c:a6:96:aa:d7:2f:
         ae:2a:37:cd:aa:91:2c:7d:77:b1:e7:8c:fd:57:6a:82:09:5d:
         33:ed:88:7f:85:a6:7d:59:39:ad:23:e4:fa:f4:c4:f1:81:0b:
         7d:43:62:6b:26:f2:fc:05:bd:ef:70:7c:1d:83:4f:31:4c:44:
         04:2f:21:78:49:1b:08:53:dd:1a:91:2c:88:88:23:e8:b1:50:
         64:93:5b:ad:6f:d9:e0:3f:73:e6:77:ce:26:fa:a8:92:c4:20:
         c1:13:9b:26:aa:71:09:23:00:c7:d8:b3:db:5f:ff:cb:f8:1b:
         ff:ba:c0:6b:fa:00:5d:bd:51:69:19:4b:fd:3f:50:4a:af:61:
         a4:7c:a2:de:95:5e:62:82:7e:f0:5b:84:52:63:5e:b5:82:58:
         9f:ae:fb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:03:12 2025 by rpki-client