Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/28f0139c-9371-3365-b4df-a8964e3aa355.roa
File:                     28f0139c-9371-3365-b4df-a8964e3aa355.roa (raw, json)
Hash identifier:          8MN2qkVnu8+wUH33I2xS5ueVVd0osJ588idnTYaSMag=
Subject key identifier:   D0:77:D3:72:71:40:88:1A:B3:4E:C5:91:47:CC:A7:A5:09:FF:42:87
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B9E07C76A596475E18A7D24C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/28f0139c-9371-3365-b4df-a8964e3aa355.roa
Signing time:             Thu 23 Oct 2025 13:00:38 +0000
ROA not before:           Thu 23 Oct 2025 13:00:38 +0000
ROA not after:            Wed 21 Jan 2026 14:00:38 +0000
asID:                     54113
IP address blocks:        157.52.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:07:c7:6a:59:64:75:e1:8a:7d:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Oct 23 13:00:38 2025 GMT
            Not After : Jan 21 14:00:38 2026 GMT
        Subject: CN=f77e3a8e-4643-481c-8a9a-71b4155bb36d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cb:e4:65:c8:66:f8:70:2f:22:76:cd:a1:14:
                    32:6b:25:c0:0d:e3:af:71:b5:6f:84:99:8f:19:9a:
                    09:ff:cd:43:ff:9b:e0:19:1a:b0:dd:ae:96:6e:23:
                    2d:93:3c:6c:2c:f8:49:73:d6:ab:84:92:65:22:7f:
                    7a:36:3d:be:ac:51:19:3d:43:8e:d8:e7:6a:81:22:
                    81:fd:bc:90:f6:cb:2b:f7:bc:dd:50:65:e4:c9:99:
                    f0:03:35:4a:b1:91:fd:83:11:b7:9e:8a:22:2d:0c:
                    e8:ff:44:21:e6:0c:70:67:27:45:e2:ff:12:13:67:
                    ba:b5:07:56:cc:99:42:cf:9f:e6:d3:11:37:33:54:
                    e5:3a:18:62:f3:1a:6d:49:2f:64:39:65:18:98:29:
                    a3:0d:65:f6:63:b6:e4:c7:f9:8c:cf:6c:15:df:48:
                    72:f7:85:5a:3f:40:76:86:81:20:84:ab:c8:2d:df:
                    9f:cb:f7:ec:d4:ee:21:62:71:38:1d:77:2c:e5:8f:
                    fe:9a:80:2a:46:6f:4f:43:61:07:a5:3c:d4:61:7d:
                    14:ae:6b:54:da:a7:66:09:0f:d6:20:7e:e3:47:c9:
                    00:10:83:e9:30:4e:d9:d6:b8:78:6d:53:79:39:33:
                    26:50:81:c8:f8:85:a0:d5:4d:08:59:d1:53:d3:76:
                    57:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:77:D3:72:71:40:88:1A:B3:4E:C5:91:47:CC:A7:A5:09:FF:42:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/28f0139c-9371-3365-b4df-a8964e3aa355.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.52.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:a1:70:76:06:57:4d:8b:95:11:8d:e9:a4:66:2a:16:76:60:
         24:3e:27:cc:4f:d2:85:63:b7:a0:3c:21:94:20:bc:91:08:90:
         61:cb:05:92:93:fd:d1:c5:fd:70:c9:9d:9d:54:3b:81:74:7e:
         a4:f0:6a:d8:1d:66:68:33:84:48:f2:34:50:14:0c:75:73:c6:
         c4:e7:a8:d1:d0:cf:d2:1c:a5:4c:fa:2e:14:65:6f:36:38:3b:
         ca:d9:45:f5:85:10:01:7a:c7:09:1b:86:78:b4:03:bd:af:60:
         2e:af:73:2f:27:0f:60:6d:33:19:72:98:01:64:50:6f:9a:47:
         4e:c4:78:09:71:c1:a9:5d:cb:ce:b3:0a:a2:0c:11:ab:cb:7e:
         0f:bd:8f:92:2a:29:11:e8:8f:e0:bc:84:f8:89:66:d3:45:04:
         3d:0c:95:26:37:4e:5c:df:9a:f8:95:7e:f7:e1:70:36:c8:df:
         f5:07:18:11:34:21:39:ce:99:b7:ec:86:4e:8d:88:0a:52:1a:
         ad:8c:b5:a6:11:5a:9a:56:54:1d:f4:86:38:1a:1b:d6:95:a8:
         94:53:f3:51:ee:5f:0d:13:8b:50:06:37:51:4b:b0:98:e9:2a:
         e6:12:17:39:79:a8:bd:9c:fc:34:12:8a:18:0a:5e:a4:5b:11:
         48:f0:5c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:03:47 2025 by rpki-client