Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0d476707-0862-39f1-a07b-139b79e30ff0.roa
File:                     0d476707-0862-39f1-a07b-139b79e30ff0.roa (raw, json)
Hash identifier:          SFynqiQrVKctYX6Bo24rXAaFvND/w9Bq1eFt1vHZgpE=
Subject key identifier:   CE:C0:72:34:7A:C0:01:80:29:6B:93:8C:D3:16:DD:A0:1E:22:92:27
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584BAD62464BE9C62C169537F680
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0d476707-0862-39f1-a07b-139b79e30ff0.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     19437
IP address blocks:        131.153.81.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:46:4b:e9:c6:2c:16:95:37:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=e81b3d52-54b1-46ad-87e2-616bbab6d41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8c:58:8f:a8:1b:cb:ae:2d:bc:2a:e5:fb:91:
                    7f:07:21:37:69:15:d0:e0:d9:2f:fa:36:21:a6:80:
                    9b:83:a4:a1:95:bc:8c:37:7f:52:12:bb:e1:16:58:
                    47:05:a1:24:6b:1a:b3:c2:dc:d5:59:d6:2b:1a:d6:
                    9b:d2:c6:44:52:c0:68:7b:d6:cd:87:f6:6d:eb:5b:
                    1e:6d:ad:66:58:79:f0:65:a7:b3:63:d3:99:55:36:
                    36:fb:84:ef:8c:41:82:53:25:74:02:c7:af:fe:d9:
                    4d:42:77:28:65:80:8c:bd:6d:4b:b7:ca:cc:33:13:
                    9e:1a:aa:3d:53:81:99:fd:80:b0:4e:d7:4b:e4:7b:
                    9f:9a:25:c6:9b:d3:0b:fc:0a:ab:fd:4b:72:56:32:
                    e2:99:44:dd:db:2e:81:3f:ad:bc:5b:1c:cc:15:3c:
                    18:07:3d:c8:01:37:63:c9:83:1d:f7:a6:2e:76:11:
                    98:d3:93:3b:bb:6e:f7:7c:8b:4e:98:6d:a3:d4:20:
                    54:dd:2e:32:04:9f:19:b1:2b:8f:ef:ee:5a:36:78:
                    a4:11:10:31:e4:2b:2e:71:31:56:e6:33:57:ce:a7:
                    56:d9:9b:01:58:9b:d3:59:5c:77:cd:2c:74:ec:df:
                    bb:b4:21:6c:14:91:ca:1d:7b:05:b6:4a:ef:0b:d2:
                    9a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C0:72:34:7A:C0:01:80:29:6B:93:8C:D3:16:DD:A0:1E:22:92:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0d476707-0862-39f1-a07b-139b79e30ff0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:01:8b:42:c2:da:8e:79:d1:f9:f3:1a:51:0d:3c:cb:e1:47:
         bf:87:7a:fa:ce:25:43:ed:7f:24:20:e8:b0:b6:be:3f:9a:3d:
         1c:80:41:cf:f9:90:a8:9a:7a:c2:47:eb:74:d5:c3:40:05:4f:
         4f:86:8c:ff:ed:d0:21:15:80:27:65:db:bc:2b:0b:0e:8c:64:
         39:9b:e5:3c:fd:76:a6:71:07:a4:9f:7f:40:e0:20:21:36:94:
         45:7d:9a:ec:35:f7:aa:b2:57:14:b4:40:7a:fc:87:70:04:2f:
         60:c8:44:01:22:75:d5:0f:7d:f1:df:1b:1d:07:2a:63:b8:cb:
         02:61:26:11:72:6e:20:c4:5d:68:22:42:6c:69:23:e8:47:9d:
         fc:42:dd:c8:2f:31:28:73:48:9e:d4:74:f5:f8:19:c7:93:74:
         91:23:6f:b3:51:ef:f9:fd:bd:b6:7b:54:5f:ab:28:ab:0c:78:
         bc:01:98:6e:56:be:63:da:ba:44:13:c1:ce:85:9c:c8:f2:dd:
         2f:67:74:db:59:04:78:83:89:6e:d9:f5:c3:c2:3f:82:f0:cd:
         ba:17:4c:90:60:6f:c2:47:80:45:70:f2:1d:c1:2f:59:b2:06:
         cc:13:a3:f2:f0:ae:31:9b:87:fb:1b:84:c2:ff:02:8a:c5:bd:
         13:fb:01:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:55:57 2025 by rpki-client