Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa/48a75400-de9e-393e-923c-1c1c7fa95ef9.roa
File:                     48a75400-de9e-393e-923c-1c1c7fa95ef9.roa (raw, json)
Hash identifier:          Zn8KDgsgsbPiGasfDVXBSjTsekamqUUEEwQ3YDYnWoA=
Subject key identifier:   10:49:0D:1F:83:4B:40:81:A9:A4:C8:9B:87:AF:20:F7:67:CE:67:38
Certificate issuer:       /CN=7beaa622-f870-437b-961c-9027fea120aa
Certificate serial:       010D0C9F4328584BBFA5A106683D3598271BAA00
Authority key identifier: 18:CD:F6:C2:EA:52:E7:DC:0B:83:9E:9C:BE:96:B4:70:74:F0:3D:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa/48a75400-de9e-393e-923c-1c1c7fa95ef9.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     8075
IP address blocks:        209.151.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa/7beaa622-f870-437b-961c-9027fea120aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa/7beaa622-f870-437b-961c-9027fea120aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:a1:06:68:3d:35:98:27:1b:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7beaa622-f870-437b-961c-9027fea120aa
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=4f9ee923-a0ca-4fef-94ed-5704582b84ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1a:4c:75:48:72:70:35:4f:85:27:2c:d4:e2:
                    c5:e3:73:de:24:45:c0:cf:7a:4c:06:9e:e3:f4:80:
                    cc:f7:fc:40:f8:8c:96:43:a1:c0:58:a9:a2:27:1f:
                    07:f5:3c:99:0b:6c:05:82:17:d0:67:c0:24:d7:c6:
                    94:c9:f4:51:1a:f1:db:c8:96:ac:d8:0f:e7:60:7c:
                    1c:80:cc:88:75:47:1a:86:e5:92:29:1b:c3:cf:4b:
                    d2:ce:0f:59:44:09:14:dd:02:60:59:74:da:b6:f2:
                    95:15:60:37:cc:cc:42:51:76:0e:51:86:eb:40:81:
                    ba:18:65:38:8a:fe:12:08:b0:68:6c:15:af:8c:b9:
                    88:21:5e:82:7a:b0:87:91:30:7a:29:de:f2:1f:58:
                    ac:cc:3c:12:5f:a9:77:9e:9b:36:92:c8:ce:93:3e:
                    79:d6:4a:1e:fc:38:f4:76:90:d4:cf:43:88:99:af:
                    d0:28:4b:36:2d:4c:31:06:59:47:7c:80:54:97:ee:
                    92:73:eb:a4:52:de:36:93:6c:83:5b:bd:a9:d6:1f:
                    c3:24:9e:f5:23:6f:13:25:5e:76:0f:3e:5e:1d:f1:
                    e0:0c:f0:4c:a6:c1:80:e0:b9:49:7c:17:81:60:20:
                    52:7f:7c:f7:18:f1:cc:26:4c:98:8d:d2:32:52:9d:
                    4a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:49:0D:1F:83:4B:40:81:A9:A4:C8:9B:87:AF:20:F7:67:CE:67:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa/48a75400-de9e-393e-923c-1c1c7fa95ef9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa/7beaa622-f870-437b-961c-9027fea120aa.crl

            X509v3 Authority Key Identifier:
                keyid:18:CD:F6:C2:EA:52:E7:DC:0B:83:9E:9C:BE:96:B4:70:74:F0:3D:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7beaa622-f870-437b-961c-9027fea120aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.151.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:76:24:5b:2f:65:39:0b:6d:5d:17:a0:e6:e2:f2:ab:bc:cb:
         8c:03:38:8c:ad:df:4c:f7:33:cc:26:ed:eb:10:6e:d9:22:f3:
         5f:87:af:05:80:6b:ae:ef:a6:4d:f3:92:d4:6b:b5:63:cd:12:
         65:f9:e2:64:02:64:b5:bf:02:2f:71:6b:51:bb:19:f2:3c:41:
         5b:00:3a:d5:22:fb:62:a1:b2:1e:31:c9:5f:35:83:ab:00:e6:
         e9:64:c6:06:af:4d:fe:c0:7a:3e:f4:0b:d2:fb:a6:35:25:e9:
         9d:06:6e:9b:6b:c2:7e:4c:f9:35:06:ba:f8:98:42:03:91:88:
         78:da:d0:4c:dc:49:2d:e9:8a:5a:4d:2c:4a:21:0a:e0:c2:10:
         54:47:9b:66:23:7b:87:e0:0b:e5:14:f9:f1:62:54:24:95:ba:
         c4:f7:8c:f4:aa:d7:b4:80:7f:9a:8e:62:9c:e3:8a:f9:0b:70:
         68:8d:49:85:80:5c:81:67:3e:7e:a4:ef:0c:c1:46:ca:b7:d9:
         9c:7d:5d:13:96:98:bb:96:d0:a5:47:1e:f5:c6:22:9c:d1:ef:
         e1:75:5c:5b:f9:4b:ce:5c:1d:2f:59:0b:71:c2:2d:77:6a:7e:
         41:52:a9:91:29:dc:91:b6:0f:e8:fe:d4:e7:8a:d1:95:14:e4:
         aa:27:c6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:22:42 2025 by rpki-client