Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/892a7b30-2efc-3c79-b6b7-d71e141ae8e5.roa
File:                     892a7b30-2efc-3c79-b6b7-d71e141ae8e5.roa (raw, json)
Hash identifier:          bfwredD0nW+FHEw5EupXlfh9LADL7OAM7ViEudXfWVY=
Subject key identifier:   DB:98:BD:EC:56:0F:82:A0:07:B6:61:39:16:0E:74:A3:D5:95:3A:31
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584BAD62453E7A39B560AD807340
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/892a7b30-2efc-3c79-b6b7-d71e141ae8e5.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     19437
IP address blocks:        131.153.44.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:45:3e:7a:39:b5:60:ad:80:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=ed984184-fe96-4015-96e9-4ddd06419a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:06:25:83:74:35:26:51:48:38:65:a0:08:2c:
                    58:f8:3d:76:3f:e8:d0:43:05:99:cd:a0:2c:6c:91:
                    d9:c8:ad:87:5c:ac:fa:1d:36:d9:0f:7b:80:91:fb:
                    b5:34:95:7a:54:a5:dc:c8:f2:94:73:ce:82:25:57:
                    b3:23:3a:99:84:29:68:2b:36:79:68:0c:cb:38:0c:
                    e0:ce:0d:fe:a5:6b:99:0c:0a:66:bc:77:42:73:09:
                    1e:54:82:92:33:6e:a1:6b:6c:06:54:4e:08:c6:eb:
                    27:b9:fe:03:37:ae:a3:e4:ac:f7:db:0c:c0:35:92:
                    20:c8:30:42:39:d7:dc:cf:3e:ee:d7:93:6e:96:97:
                    00:ac:39:ab:5d:e3:ad:9b:36:4a:77:f4:6c:4f:5f:
                    4c:1c:04:ce:96:b3:f2:2c:7f:30:b6:a1:c8:1f:99:
                    dc:50:8f:44:71:93:e5:36:5c:66:b9:fa:5f:9e:7d:
                    ab:d4:3c:14:1b:6e:ba:65:ed:c3:32:e5:69:7a:62:
                    91:5e:65:89:8c:49:58:5a:b7:d4:ba:ff:8b:3c:b7:
                    f4:c5:aa:4a:23:50:81:80:ad:06:05:d4:62:8d:27:
                    f7:c9:c1:bc:a6:41:94:b9:2a:d4:7a:b5:29:78:55:
                    7f:83:5b:2d:dd:7a:83:72:6e:d4:9d:4a:5c:41:be:
                    13:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:98:BD:EC:56:0F:82:A0:07:B6:61:39:16:0E:74:A3:D5:95:3A:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/892a7b30-2efc-3c79-b6b7-d71e141ae8e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:b6:1c:dd:20:0c:26:c5:cf:00:d5:36:e1:e5:25:14:61:4d:
         e6:22:6f:fb:71:14:10:33:ef:7c:3d:0f:8b:ca:c9:f4:e0:60:
         87:24:d3:52:68:1c:3a:78:29:34:14:3b:99:28:7a:55:7d:48:
         ef:46:92:ab:da:95:fc:d6:f3:8a:b1:76:79:e7:58:8b:78:a3:
         f9:09:b6:fe:fe:f7:aa:cd:65:bd:ad:d2:ed:cd:80:42:b1:cf:
         72:e0:5c:97:b5:26:b1:a0:42:48:a7:df:30:ed:13:48:07:8e:
         1b:c4:29:6b:79:7b:a0:30:91:45:92:94:88:5b:49:b2:45:94:
         42:0b:fe:eb:ca:09:f1:55:b7:cb:01:e0:c5:c5:ae:73:76:9d:
         0e:33:f8:cd:c8:ec:8b:17:b5:93:d0:bb:0f:f7:35:60:09:43:
         2f:8a:ce:a7:07:d3:c2:f9:67:ad:2e:84:99:b8:7d:0c:d3:ef:
         b4:44:49:80:6e:9f:f2:f4:97:61:e0:0f:bd:11:1e:03:7b:07:
         cd:6a:71:81:43:01:bb:28:65:89:7c:35:e1:6f:43:3f:36:dd:
         27:48:45:dd:61:5b:ed:9b:bd:2b:3f:44:8f:8b:9b:5c:c7:64:
         0f:de:37:1f:e3:13:0c:c8:d9:46:55:75:05:ca:e3:d4:c0:73:
         47:da:c1:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:30:26 2025 by rpki-client