Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/0177c457-8123-3122-9946-667a61adf363.roa
File:                     0177c457-8123-3122-9946-667a61adf363.roa (raw, json)
Hash identifier:          p/woLA290kdXhYJezylHJxTQtHpJdo3VHZnqW39qWaU=
Subject key identifier:   BD:FA:A3:D8:F6:9D:1C:5E:30:24:9F:1B:ED:ED:73:A2:56:42:05:BF
Certificate issuer:       /CN=a8f51da8-e3ca-4fc9-acce-94103c57aebc
Certificate serial:       010D0C9F4328584BB02D00B32AAB56F8D4C14780
Authority key identifier: 3A:72:E5:B7:27:34:1C:D3:AE:09:F2:9E:7D:BF:99:D5:A0:41:FD:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/0177c457-8123-3122-9946-667a61adf363.roa
Signing time:             Thu 30 Oct 2025 01:00:30 +0000
ROA not before:           Thu 30 Oct 2025 01:00:30 +0000
ROA not after:            Wed 28 Jan 2026 02:00:30 +0000
asID:                     62862
IP address blocks:        81.21.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/a8f51da8-e3ca-4fc9-acce-94103c57aebc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/a8f51da8-e3ca-4fc9-acce-94103c57aebc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b0:2d:00:b3:2a:ab:56:f8:d4:c1:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8f51da8-e3ca-4fc9-acce-94103c57aebc
        Validity
            Not Before: Oct 30 01:00:30 2025 GMT
            Not After : Jan 28 02:00:30 2026 GMT
        Subject: CN=1cd6571a-b85f-47ea-a888-9f0926ae56e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fc:5a:2d:5c:d3:08:a4:bb:61:28:64:63:c4:
                    9a:28:9a:a9:bb:39:60:4c:5f:15:be:c6:d9:89:1b:
                    29:e7:88:65:30:79:48:75:35:9f:04:8e:da:78:be:
                    dc:47:02:ce:be:aa:72:d0:c9:38:ac:e5:94:3d:23:
                    ce:9e:81:82:bb:91:8b:04:aa:d3:0c:16:92:8d:e2:
                    c0:0e:6f:10:28:61:52:64:90:e7:3f:04:6d:9e:ca:
                    d2:1f:1a:e4:b8:10:09:ae:49:49:36:56:cc:ff:49:
                    73:32:4c:12:8e:7b:ab:5d:5d:90:49:13:13:c0:50:
                    31:c2:08:9d:37:97:6f:b0:6a:f0:a8:4d:a0:a3:da:
                    01:1f:ca:5f:c6:d1:da:d6:99:90:13:02:82:5d:cc:
                    37:4b:b5:62:f2:58:f7:b6:03:3d:28:4b:69:ca:2e:
                    0d:9f:b1:24:b1:d5:36:9a:d4:65:db:97:75:2d:d9:
                    bf:d5:e9:08:bf:43:b2:db:d8:4b:bd:0f:aa:28:e0:
                    0b:11:4d:a5:24:ea:d8:44:72:f9:f9:ff:26:e7:84:
                    42:f8:a5:70:dc:80:cb:3f:14:e4:50:dc:33:02:2b:
                    a1:ec:85:9e:89:3b:75:b5:0b:5b:aa:cd:5b:77:d9:
                    1b:37:77:e4:01:bb:1a:f2:94:36:ee:df:29:c3:c2:
                    73:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FA:A3:D8:F6:9D:1C:5E:30:24:9F:1B:ED:ED:73:A2:56:42:05:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/0177c457-8123-3122-9946-667a61adf363.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc/a8f51da8-e3ca-4fc9-acce-94103c57aebc.crl

            X509v3 Authority Key Identifier:
                keyid:3A:72:E5:B7:27:34:1C:D3:AE:09:F2:9E:7D:BF:99:D5:A0:41:FD:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a8f51da8-e3ca-4fc9-acce-94103c57aebc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.21.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:ec:c4:f8:eb:09:fc:ad:62:eb:e2:97:1d:f7:55:fc:76:da:
         f6:67:98:b6:76:51:d1:0f:fc:f1:04:f1:bf:9c:d3:c9:2d:64:
         19:be:55:22:b1:6b:fb:70:82:50:8a:87:d0:33:56:8b:bd:98:
         ca:ad:f1:b2:2a:82:2d:56:09:30:c2:f2:15:16:59:cd:d0:2a:
         1f:af:2d:12:84:00:a6:52:55:b9:25:e6:2e:3c:23:67:06:99:
         46:10:0a:bb:67:3f:b6:67:ec:4e:a6:65:ed:e5:63:09:e5:52:
         60:b0:95:c2:85:55:1c:1d:ea:a8:08:2c:5c:09:d6:2b:f9:f8:
         79:2a:66:96:6f:84:52:1d:0c:3d:54:b5:49:d5:38:25:9d:1e:
         cb:54:8a:4c:8f:42:7d:58:55:51:29:61:a9:49:6e:0d:03:58:
         37:d9:0d:77:e2:1d:8c:41:26:1f:3d:db:7e:8d:33:41:97:4f:
         e6:59:1a:52:c5:d8:af:41:5c:6f:e5:db:99:76:a4:b1:8c:b7:
         9b:70:84:a4:ed:68:fc:62:5b:9d:6d:f1:39:62:9f:30:f3:42:
         c2:31:23:14:f6:2f:4e:a2:e0:7c:20:5d:39:79:4a:61:02:a0:
         5c:6c:b0:d7:12:4c:23:bc:ae:00:64:8a:53:9f:88:04:b7:a0:
         b6:16:fa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:03:56 2025 by rpki-client