Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/61ccdaaa-d56f-34eb-ba36-f655103310f7.roa
File:                     61ccdaaa-d56f-34eb-ba36-f655103310f7.roa (raw, json)
Hash identifier:          0XaUvc1qMirP2G9pEp11TsyKnFgqn4WIOGZ0LTv1VaU=
Subject key identifier:   81:A2:23:3C:72:F3:FF:39:5C:2C:4C:C8:EA:75:AD:1F:AC:E1:6B:DD
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584BAEC7AF9F9D28F80C78BA9F80
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/61ccdaaa-d56f-34eb-ba36-f655103310f7.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     19181
IP address blocks:        131.153.166.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:af:9f:9d:28:f8:0c:78:ba:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=9bc37f4b-6c10-4864-8953-1466dba7c418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:37:54:b2:b9:3c:2f:b5:a7:86:5a:64:11:06:
                    65:74:cd:b7:67:7c:a5:fc:ca:a2:1c:58:f6:c4:20:
                    43:6b:ff:7e:ee:b7:23:e6:da:29:3e:27:f7:2d:00:
                    65:7a:2e:fd:e2:06:6e:29:b1:82:6e:8b:83:f3:cb:
                    a1:a5:93:a6:1b:45:73:1b:98:37:a2:95:6a:ba:c4:
                    fe:5d:d5:78:ca:91:5a:23:bd:8d:e5:6e:fc:8f:9c:
                    64:6c:6e:ab:29:c0:dd:72:79:4c:45:25:de:14:23:
                    36:5f:25:b9:f0:39:14:77:f6:8c:4d:bb:ec:03:a1:
                    99:ae:2f:d9:0e:40:d8:6d:13:2f:fc:28:cf:00:aa:
                    77:c7:58:ac:de:01:3b:64:eb:dc:a8:78:1d:91:5c:
                    62:95:b3:bc:df:10:e2:5b:4e:26:5d:95:7d:95:d7:
                    12:67:63:6a:76:7c:fa:d9:b2:32:80:27:a0:8c:00:
                    32:fb:a7:17:c6:6d:00:3d:a1:6d:87:73:9d:45:38:
                    ff:dd:bf:71:5c:5a:4d:71:72:41:8e:fa:3e:12:7d:
                    7f:f8:a4:f3:aa:2c:98:63:05:55:b4:a4:7e:b5:5c:
                    92:db:aa:4e:0a:13:41:53:95:6a:8f:84:d0:e0:db:
                    47:af:d3:f3:d4:d3:1b:ac:8b:25:d0:fa:0f:af:99:
                    94:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A2:23:3C:72:F3:FF:39:5C:2C:4C:C8:EA:75:AD:1F:AC:E1:6B:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/61ccdaaa-d56f-34eb-ba36-f655103310f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:11:5e:93:08:77:ec:3f:6c:64:23:e0:bb:2b:cc:87:4b:23:
         e3:af:b5:aa:f6:a1:72:6d:00:93:54:4f:8c:dd:c8:5b:a4:5d:
         99:f5:74:a7:9e:67:30:2d:42:46:6a:cf:30:12:4a:08:61:85:
         e2:55:47:4c:cc:ed:df:94:58:46:41:31:7c:60:9b:66:33:0f:
         69:2c:aa:8e:62:56:6f:df:9f:e6:b2:e3:94:19:d0:a4:c0:73:
         db:1b:42:25:df:53:f5:e1:6e:86:ad:07:1f:8a:bc:91:ae:f0:
         10:ab:e5:67:9c:b1:81:08:bd:80:42:c6:f9:41:a1:b7:1a:ce:
         9c:01:c9:41:29:29:47:1e:07:73:0d:1a:5b:4b:ee:0e:41:ff:
         21:fb:59:07:f4:df:15:af:3d:da:dc:54:97:28:b9:a2:f4:05:
         c7:71:75:c3:1b:b9:80:2f:b0:51:95:5a:d9:87:db:6b:27:6c:
         ed:f6:5d:b5:37:f0:87:92:8d:9d:48:1f:89:e3:37:2f:8c:25:
         81:ac:b6:1a:92:63:b1:0c:c0:7e:d4:43:bc:7c:d4:8e:5f:13:
         b5:54:cc:d0:91:1c:78:e7:b5:3b:25:ba:04:44:e9:a5:e1:eb:
         25:4d:9f:0d:6a:eb:f1:81:c3:85:bd:bf:ed:d9:8b:a4:88:85:
         b9:0a:0f:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:33:49 2025 by rpki-client