Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e1dce588-9e68-346f-b534-f20542057fe9.roa
File:                     e1dce588-9e68-346f-b534-f20542057fe9.roa (raw, json)
Hash identifier:          nqWuFUrl3tS/mwnxQg36TWnmq8g7BI7O606NI/HaXMg=
Subject key identifier:   D5:68:15:F9:FA:F3:88:1B:35:A3:8C:12:B9:EC:56:97:1A:0E:9D:9C
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584BB2F7A952EF85252944FF4B00
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e1dce588-9e68-346f-b534-f20542057fe9.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     12189
IP address blocks:        131.153.36.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:a9:52:ef:85:25:29:44:ff:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=8418c6ed-9670-45e7-8a5c-30fe92899ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:dc:9d:5e:19:9d:3e:f1:cb:2d:82:2b:2b:f6:
                    77:a4:44:30:c4:bc:d7:3e:61:c7:c0:a5:6c:97:74:
                    43:3a:fe:92:f7:da:72:89:8d:29:17:f2:4e:ea:1c:
                    1f:59:00:99:54:0c:0e:de:9f:3b:2d:31:e2:f5:e2:
                    22:84:56:b8:8e:c4:33:f2:84:14:f2:4e:a3:f4:1b:
                    91:0a:63:e4:6d:1b:70:fb:57:11:d6:fa:f0:85:80:
                    b7:d5:0c:76:d9:e5:5f:ea:94:5a:fd:ec:c6:c5:fe:
                    b1:14:d2:09:27:01:a9:fd:57:8d:b1:ec:a8:fd:b0:
                    ef:1d:bd:ed:e4:97:df:56:58:f8:02:d6:fc:83:a6:
                    d8:9d:06:2d:7e:08:97:f1:5c:2a:6c:61:73:ce:e5:
                    83:84:99:a5:b0:07:31:bb:1a:e5:6d:85:07:08:0a:
                    d3:92:d2:b1:ac:4e:ec:99:6a:28:62:fe:c8:08:5c:
                    4a:8a:77:59:15:f0:4e:8a:53:14:52:3e:23:56:57:
                    9a:cc:55:c4:af:7d:6f:43:36:7e:51:5a:ba:6d:3a:
                    90:41:21:1b:19:d0:eb:8b:0a:be:87:e4:0a:c8:b4:
                    2d:80:a1:ec:ec:44:4b:04:1e:28:41:32:7e:76:c2:
                    d4:ee:0a:5f:50:ba:ad:84:cb:e4:fc:1b:90:df:0f:
                    06:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:68:15:F9:FA:F3:88:1B:35:A3:8C:12:B9:EC:56:97:1A:0E:9D:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e1dce588-9e68-346f-b534-f20542057fe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:21:58:81:6d:e4:4f:d0:0d:27:fb:c8:14:2d:54:77:18:78:
         96:90:a0:8a:44:32:15:1e:24:8c:90:97:5b:df:69:db:d4:a8:
         c6:1a:bd:a2:a7:2b:ab:30:f4:eb:76:92:38:d4:21:b5:2e:b5:
         b9:4a:72:4d:f4:91:4a:f3:bb:6d:c1:8d:6b:c2:e0:fc:3f:76:
         b7:09:79:e5:a3:b8:32:b8:23:16:1d:46:16:82:0e:93:62:87:
         82:8b:30:3d:63:16:0f:58:4e:4a:17:c5:fd:c7:f9:2d:f0:db:
         fc:90:9d:72:2c:a3:3b:21:e3:c5:82:6e:e0:37:09:62:7a:60:
         30:91:c5:ab:62:40:20:6b:cf:79:79:bb:27:85:4d:80:af:21:
         6e:32:18:1e:0a:34:aa:d0:fe:96:44:95:c9:39:4a:2d:97:bf:
         a5:53:b8:d2:52:a0:85:d6:fa:79:28:98:dc:d7:77:83:9c:73:
         fe:a5:22:fa:5b:2e:ce:f0:f3:38:3e:71:e1:f4:6d:c7:6b:6b:
         5f:55:83:04:d9:10:13:7a:89:3e:7d:67:29:e0:da:ce:60:41:
         f7:42:8a:10:9d:14:13:77:2d:d7:9b:a0:84:67:3d:9e:6f:36:
         45:e3:4e:1f:8d:9a:d4:87:26:3b:2a:2b:f5:b7:a5:a8:08:df:
         44:8c:ce:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:02:26 2025 by rpki-client