Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/fa6c4dbf-a86e-3149-81a8-144b64cb9cd9.roa
File:                     fa6c4dbf-a86e-3149-81a8-144b64cb9cd9.roa (raw, json)
Hash identifier:          2SfgQDZx8TGU+82czUOcOvLObVX1RFOJ0TBD29GPiMU=
Subject key identifier:   01:44:24:CB:4F:DD:02:B2:7C:E6:15:95:18:67:EE:27:94:E6:0E:39
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584BBB758D5CEE4D293DEFA4BC00
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/fa6c4dbf-a86e-3149-81a8-144b64cb9cd9.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     40317
IP address blocks:        137.119.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:8d:5c:ee:4d:29:3d:ef:a4:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=bb278b5b-4ad2-4a97-bc9d-ed849f26b4d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:df:e0:09:a9:5a:29:6d:e6:ae:3b:dc:96:20:
                    fa:8a:ce:31:42:fa:03:95:e9:8d:04:3d:36:8c:55:
                    26:df:4b:1c:8c:9c:64:c5:90:ba:ee:74:cb:48:24:
                    12:fc:35:7c:f7:b0:d9:89:4c:17:e6:db:0d:78:eb:
                    b2:fd:b3:21:fa:7d:88:8e:be:c6:3f:fa:0e:83:2a:
                    05:0b:d2:21:05:80:e1:86:7c:64:ed:0d:9d:22:53:
                    26:1b:74:11:ac:be:8d:77:de:4c:81:d4:51:7d:aa:
                    61:b8:00:90:2e:30:10:a2:02:85:20:2a:52:ab:88:
                    b5:58:0e:6b:77:2d:04:d2:8f:43:c1:c0:53:3d:05:
                    b1:2e:b4:12:51:3a:8f:bd:31:99:6e:56:b1:84:12:
                    d1:a9:ff:87:65:81:d2:23:d2:b8:4b:41:f1:86:19:
                    ba:43:65:0a:37:19:e3:20:d9:91:a6:5e:a0:e4:96:
                    a6:ab:11:a1:b2:dd:a9:be:b5:d3:76:a2:e3:0c:4e:
                    02:38:9e:cd:d0:67:52:95:9c:f8:5b:f9:71:62:5e:
                    66:be:76:b2:a4:53:39:b9:23:37:5c:0c:fd:7f:de:
                    55:ad:5b:2d:7e:92:96:39:ab:4a:8b:cc:33:c6:fd:
                    27:fa:c1:94:37:77:d8:53:1a:26:a9:e7:fc:2c:6d:
                    ec:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:44:24:CB:4F:DD:02:B2:7C:E6:15:95:18:67:EE:27:94:E6:0E:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/fa6c4dbf-a86e-3149-81a8-144b64cb9cd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.119.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:65:71:0e:72:f0:6d:9d:dd:7d:16:11:3f:28:2e:35:6e:6d:
         98:a5:c5:60:64:6b:17:ca:9b:45:30:15:b4:05:f8:63:bc:04:
         91:60:62:3e:f5:cb:76:95:c9:9b:be:65:01:0f:a4:6d:bb:bb:
         ab:c4:0b:39:dc:37:fc:ef:58:25:15:8a:25:13:2a:bf:87:05:
         2d:8d:5b:49:86:d1:fe:dd:81:a9:24:f1:31:a0:2e:e8:1f:bc:
         e7:4e:9f:29:11:3e:32:2f:17:54:b0:89:5e:f1:e2:b9:6b:e4:
         bb:00:bf:b2:5f:94:7d:d3:d1:94:fb:1e:5b:81:b8:89:9b:00:
         b8:ee:b7:5b:0c:24:b3:e6:71:24:36:9c:4d:01:f2:f8:e3:b7:
         62:5f:30:21:f5:71:75:a9:4f:0e:b9:f9:d7:fe:9b:3d:86:e4:
         c5:6a:2f:f2:81:f6:74:e7:24:af:81:ac:59:70:aa:a4:9d:72:
         a0:99:23:f7:bf:b8:d2:2a:4a:8e:05:e8:0f:96:a8:0e:82:8f:
         91:89:1e:58:3c:29:b1:eb:c4:f5:c8:71:60:09:1c:a3:e4:32:
         65:79:51:64:13:af:80:37:11:ba:db:f4:bc:ec:3f:36:3e:70:
         71:ea:eb:df:81:f7:da:f0:ef:76:57:21:bb:e5:ce:c2:6f:6e:
         a1:49:60:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:55:29 2025 by rpki-client