Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/be97c91f-e7a5-3d64-a9ee-7537b3eb686e.roa
File:                     be97c91f-e7a5-3d64-a9ee-7537b3eb686e.roa (raw, json)
Hash identifier:          QoRfgpe7+XIDxD/Bnlb2W/SGPZZYXu7KIjXGLf4UsIA=
Subject key identifier:   8B:82:4C:AF:D9:D6:F6:85:9C:EE:ED:EF:61:D3:27:35:3C:2E:BF:29
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F4328584B9CA22EF37E38FE33CB3F6180
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/be97c91f-e7a5-3d64-a9ee-7537b3eb686e.roa
Signing time:             Thu 23 Oct 2025 01:00:31 +0000
ROA not before:           Thu 23 Oct 2025 01:00:31 +0000
ROA not after:            Wed 21 Jan 2026 02:00:31 +0000
asID:                     0
IP address blocks:        138.112.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9c:a2:2e:f3:7e:38:fe:33:cb:3f:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Oct 23 01:00:31 2025 GMT
            Not After : Jan 21 02:00:31 2026 GMT
        Subject: CN=a917896b-921e-47cd-93e0-bc32403234ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e8:1f:61:e8:99:cd:d2:5f:71:91:38:65:e3:
                    0f:41:68:8b:ce:75:d1:13:85:b5:52:27:c9:c5:80:
                    e2:a8:f2:1d:cf:4b:04:91:d6:ea:64:71:33:dd:be:
                    77:81:dd:9e:3c:d8:4b:42:f4:fb:b2:62:79:ea:ba:
                    d8:10:46:cb:e9:3b:7b:ea:0f:30:5d:b9:ef:bb:e9:
                    63:dd:bc:c6:c8:73:fa:de:73:6f:c4:b3:95:48:7e:
                    dd:a1:f0:2f:cf:a0:83:20:5d:0e:1c:ba:8d:f2:5e:
                    e9:9c:6d:99:f3:19:04:de:95:53:a3:cf:c4:5d:c2:
                    33:19:0a:1d:e2:8b:36:fa:c4:2a:c4:70:3b:f9:1a:
                    d1:82:41:6c:e8:33:0b:a2:22:f0:90:19:72:5c:b3:
                    bf:e0:4c:81:b4:b3:f9:3b:c0:36:42:bb:68:53:99:
                    98:a8:9c:1f:bc:ce:79:db:c9:68:fe:b0:1c:c8:ef:
                    f3:80:13:fe:70:e2:d5:d4:f4:30:5b:49:07:9d:c6:
                    53:04:48:3a:db:dc:75:96:78:38:ff:72:58:00:53:
                    82:7d:08:55:5c:15:e6:72:71:cb:1d:2d:dd:fd:67:
                    d4:22:66:21:dc:5b:c3:b9:e5:fd:31:66:52:a7:cd:
                    36:14:fe:88:6e:d8:7a:4b:5f:d0:30:64:7a:f7:0a:
                    6c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:82:4C:AF:D9:D6:F6:85:9C:EE:ED:EF:61:D3:27:35:3C:2E:BF:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/be97c91f-e7a5-3d64-a9ee-7537b3eb686e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:60:f7:01:48:fd:0c:e2:f2:41:1e:30:35:91:0c:01:a2:14:
         98:e3:34:9d:1b:18:18:a6:44:11:ec:a5:10:99:e4:b6:26:34:
         e5:65:f2:ce:87:e7:9b:ea:86:1a:91:16:c8:4c:e0:5e:64:35:
         d9:b0:74:21:74:98:e1:19:d5:db:06:cb:e7:29:3d:23:c1:a7:
         f6:9c:2b:3b:5a:31:85:09:0b:13:02:8f:46:a9:d6:c6:05:2b:
         8d:8b:f6:59:0a:0d:3e:d5:cd:84:70:2a:14:dc:55:2a:14:e3:
         e2:d9:30:72:e9:62:61:cc:3f:fc:4f:3f:55:04:48:02:33:ec:
         cb:59:e2:20:8c:75:c6:6e:6e:06:ef:19:78:fa:60:92:ea:2c:
         c4:de:01:68:e0:4e:04:53:e6:75:04:e7:cf:2c:95:90:52:e7:
         8f:d4:39:b9:ae:2d:30:a3:a7:b2:54:0c:d3:b9:1b:d3:e3:52:
         db:f4:bf:92:dd:f4:bc:2d:24:bc:15:16:37:c4:ed:5e:be:44:
         7c:af:cd:f8:13:92:7c:b7:e5:91:a6:6a:a9:da:32:8c:5d:d5:
         22:6b:9a:e1:12:dd:04:69:6b:58:fe:1d:24:3d:2c:27:f7:b5:
         5f:2a:1f:d3:5d:e7:70:0e:10:0a:88:4e:d0:63:11:66:89:99:
         58:5b:92:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:57:30 2025 by rpki-client