Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ec914c46-61ef-30cf-8167-eaf87809abdd.roa
File:                     ec914c46-61ef-30cf-8167-eaf87809abdd.roa (raw, json)
Hash identifier:          37+VOuD9KsED1wkLq4ZMZKclDnfp+0dnITNkQdXxGWQ=
Subject key identifier:   00:FC:D9:7E:C1:31:3D:8F:41:4A:8C:F2:00:EE:1D:66:68:42:1B:67
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584BAD624A693875A88A4C9AA080
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ec914c46-61ef-30cf-8167-eaf87809abdd.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     210266
IP address blocks:        131.153.109.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:4a:69:38:75:a8:8a:4c:9a:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=6427bfc9-4d0d-451e-9068-c02c145dc989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e7:b2:1a:86:92:e5:8d:ff:12:80:f0:23:4a:
                    0d:a6:74:a5:79:d9:a4:3b:a6:96:20:21:21:3a:8a:
                    51:1a:ad:7d:39:9c:a9:4b:33:6f:53:48:bf:07:23:
                    61:ff:e0:e8:ef:9c:be:36:41:ed:8f:3f:e8:3f:fb:
                    5e:7a:39:6c:b1:d1:ce:74:a2:93:7e:e2:e3:97:ed:
                    bf:60:b9:ea:c4:f6:52:19:30:a8:f2:b1:37:ba:28:
                    af:24:67:ea:b9:44:d6:67:46:17:65:a3:aa:24:ea:
                    fc:57:63:c5:28:5f:77:91:5f:bf:f2:fa:ad:02:7d:
                    10:e3:5b:7a:4b:e3:15:3a:18:51:b2:da:df:50:6a:
                    0b:65:c3:56:43:e1:07:d3:da:fb:24:99:41:4d:4a:
                    7a:95:d5:15:90:e8:b7:ef:79:0c:c6:b5:e9:4c:61:
                    49:4a:f9:92:16:85:3c:61:97:3e:fc:fa:06:d4:7c:
                    8b:08:80:92:db:89:e3:b1:35:af:0b:d2:81:f0:87:
                    23:cd:01:4b:ec:73:8e:1d:3a:da:d8:e0:76:4c:6a:
                    c6:e2:11:26:9d:3e:aa:c2:56:42:5f:ef:77:4a:22:
                    dd:3e:26:af:2a:26:de:50:ec:da:ac:ae:d6:93:cf:
                    e5:61:6c:fb:8c:68:e5:9a:70:34:f3:87:ad:93:7a:
                    40:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FC:D9:7E:C1:31:3D:8F:41:4A:8C:F2:00:EE:1D:66:68:42:1B:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ec914c46-61ef-30cf-8167-eaf87809abdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.109.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:dc:69:0c:dd:8a:aa:8f:93:8d:d0:24:fe:13:ca:17:86:72:
         eb:30:28:25:59:4d:ea:38:9c:e3:c3:2c:3b:d6:ec:56:f8:2b:
         e1:b9:9b:d6:6a:a5:ee:56:ee:ad:36:f6:75:5d:7b:23:a0:f7:
         82:19:33:15:17:1d:a9:97:11:db:44:4c:b9:45:d4:f6:1a:ef:
         3d:8c:26:0f:14:34:50:e5:51:7e:f8:53:e3:3f:fa:25:d8:26:
         df:86:6a:49:33:dd:8c:fc:26:63:81:2b:d1:10:9e:8b:6d:1a:
         21:f2:bf:11:32:d5:a1:ff:97:74:35:30:ea:8f:89:f6:75:0d:
         da:38:66:e1:77:1d:10:6b:59:da:c4:3b:8c:36:63:51:18:f1:
         13:05:9c:1f:f7:8f:54:d7:7f:0e:68:b0:18:cf:37:ff:fd:21:
         ae:41:93:66:e7:5e:4c:19:5f:33:d3:b3:30:af:2e:d8:e6:a2:
         f1:35:65:be:65:62:8c:fd:71:87:56:ff:49:91:b5:b5:7b:89:
         6f:80:69:23:fa:48:83:5d:24:4b:b8:a1:79:b7:c6:01:d1:9c:
         ae:27:62:2c:5f:6c:50:b8:ff:ca:80:d4:14:0e:27:30:62:fd:
         94:53:2b:56:9b:9e:3d:1e:8c:98:f6:f7:cc:3f:1c:96:c4:b2:
         46:ae:33:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:28:44 2025 by rpki-client