Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/28664a9a-e120-3701-b0b7-b5858658be81.roa
File:                     28664a9a-e120-3701-b0b7-b5858658be81.roa (raw, json)
Hash identifier:          dh5oXTeqH0In/l2pAJIEZ8AtDVC28QEvgJnTzA2eCn4=
Subject key identifier:   AB:76:BA:27:40:80:F0:10:A3:2B:68:DB:AF:7A:EB:39:9F:BE:E9:42
Certificate issuer:       /CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98
Certificate serial:       010D0C9F4328584BB45D1093E34A9871D93015A0
Authority key identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/28664a9a-e120-3701-b0b7-b5858658be81.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     14618
IP address blocks:        52.144.58.0/24 maxlen: 24
                          168.245.151.0/24 maxlen: 24
                          192.139.134.0/24 maxlen: 24
                          199.19.89.0/24 maxlen: 24
                          199.19.90.0/24 maxlen: 24
                          199.19.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:10:93:e3:4a:98:71:d9:30:15:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=973a29ce-3f29-4f1c-9e58-3c8a9b45cf3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bd:7b:14:bf:57:30:f9:07:db:d0:13:8c:99:
                    ab:d2:53:3d:80:e0:ef:82:75:6e:76:01:3d:a9:a9:
                    24:a3:08:a5:74:aa:e2:55:ec:39:79:35:8f:1c:8b:
                    ad:94:50:42:b5:20:bf:86:e2:b6:72:ea:43:be:ac:
                    7c:cc:0f:d4:78:44:7b:82:6a:53:62:bc:90:43:54:
                    f7:ae:25:4b:2b:95:19:77:b1:e2:d3:c6:e3:a9:8a:
                    50:6a:9f:86:aa:e2:13:f4:11:b3:fe:3e:d2:56:bf:
                    00:a6:3f:08:15:4d:e3:e9:3e:39:78:2d:97:00:2a:
                    54:04:a2:30:d7:8e:8c:c9:ee:d9:9c:2c:2d:ce:2c:
                    63:34:f3:c4:97:a6:82:7c:22:74:a7:4b:63:cb:8e:
                    c1:f4:da:a7:3d:f8:56:76:05:4c:ef:73:ac:b9:72:
                    23:8d:01:9d:6b:ce:3d:16:df:a1:ab:f7:5d:3f:3a:
                    91:63:f0:02:4e:22:9f:35:ac:36:1b:99:b2:f4:0b:
                    0b:60:42:28:66:2f:7f:df:37:c0:e2:5b:8d:78:5e:
                    8f:34:fc:7e:97:1f:6e:c0:cd:6e:a4:e1:ad:d6:00:
                    aa:1e:2b:74:45:80:64:0a:23:a7:f1:17:1c:55:f2:
                    f1:23:5c:83:8b:a7:70:03:10:fb:03:42:e4:0a:7c:
                    fd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:76:BA:27:40:80:F0:10:A3:2B:68:DB:AF:7A:EB:39:9F:BE:E9:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/28664a9a-e120-3701-b0b7-b5858658be81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl

            X509v3 Authority Key Identifier:
                keyid:C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.144.58.0/24
                  168.245.151.0/24
                  192.139.134.0/24
                  199.19.89.0-199.19.91.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:fb:ca:25:83:4b:1f:79:96:75:4b:61:91:f2:c2:b1:09:c3:
         0f:17:5e:76:27:fa:61:b6:44:40:29:a9:51:22:f7:8f:25:92:
         d2:1a:57:e3:b2:a5:0a:ee:0c:c9:09:fb:e7:9e:8b:80:f2:c2:
         67:43:94:7e:26:b6:87:46:35:c1:e1:d3:c7:22:3f:6c:da:95:
         9b:8c:7f:9e:cd:32:0c:95:18:d0:d3:f2:ad:29:76:fc:ee:75:
         10:9c:bf:1f:28:c9:4d:af:70:2b:52:04:3a:98:29:ae:4f:3a:
         ed:5b:6d:c3:aa:81:ef:6c:26:81:6b:a6:ee:cb:77:b7:19:4b:
         da:cb:3c:9a:64:57:d8:25:cf:d5:ca:0e:de:74:91:ad:ad:98:
         83:f4:dd:ef:3b:7a:b0:d4:11:cd:8a:bb:4d:ea:d3:42:fb:29:
         ee:67:4d:bf:21:68:a4:a1:cd:5a:2f:a5:e8:0f:2a:b3:7a:bf:
         da:ae:9f:18:1f:cb:86:13:d1:9b:d7:94:33:2b:94:8a:db:fe:
         8f:06:3a:74:dd:ad:36:3c:c3:82:13:f6:d5:0a:a0:e7:d6:0b:
         9a:31:b2:42:b0:71:70:bf:64:af:3b:7a:1a:4c:b9:73:53:87:
         fd:9e:2d:63:d3:1f:4b:4f:2a:ad:d9:d1:dd:e5:d3:be:bf:a3:
         76:1a:05:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:45:14 2025 by rpki-client