Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/dd10681c-9d05-3b70-aafb-f5510f585252.roa
File:                     dd10681c-9d05-3b70-aafb-f5510f585252.roa (raw, json)
Hash identifier:          BDqePrWusL79weCZwAzCl8BGr59J7n+6OnQnmhqXLSk=
Subject key identifier:   67:C5:15:16:6A:18:6F:65:61:34:46:4C:B8:1F:21:BD:BF:44:A4:FF
Certificate issuer:       /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial:       010D0C9F4328584BBA105932B036951A88F6FA00
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/dd10681c-9d05-3b70-aafb-f5510f585252.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     54535
IP address blocks:        146.197.44.0/23 maxlen: 23
                          146.197.50.0/23 maxlen: 23
                          146.197.52.0/23 maxlen: 23
                          146.197.176.0/22 maxlen: 22
                          146.197.184.0/23 maxlen: 23
                          146.197.188.0/23 maxlen: 23
                          146.197.198.0/24 maxlen: 24
                          146.197.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:59:32:b0:36:95:1a:88:f6:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=b9f11214-4259-46c8-83ba-66993260da7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:08:eb:66:e0:a0:86:1a:81:35:8a:7e:57:e6:
                    04:c3:79:fc:d7:c1:1e:8b:d9:b0:b3:69:aa:d9:f5:
                    f2:c6:f7:a6:3a:f1:76:37:c5:b2:80:78:5c:0a:d0:
                    2c:e6:60:e6:41:2e:b0:13:d4:1a:4a:31:87:81:84:
                    de:02:c8:bc:f3:61:60:d1:bd:72:37:81:60:e4:ab:
                    b4:02:b4:23:b6:29:c5:9c:1d:a7:6f:41:3b:46:4a:
                    ad:a7:18:26:90:97:1c:8e:ba:e6:03:28:56:52:18:
                    af:7e:65:ab:af:73:38:67:a5:db:b3:28:38:31:25:
                    36:95:c9:28:b3:81:38:24:db:57:b1:4d:76:c3:8d:
                    8c:20:08:53:ee:91:f9:77:81:a4:bf:5e:f3:40:f7:
                    41:38:39:52:a8:89:b2:3e:a8:67:b4:6a:d3:1d:c3:
                    c4:76:c5:76:57:02:38:d0:f6:bd:87:5e:f3:e8:c7:
                    17:96:b7:41:42:f6:71:15:f0:fe:34:08:76:7e:e0:
                    ae:d9:c2:f0:59:34:f2:20:ba:67:91:25:2f:8e:ae:
                    da:6f:27:ac:bb:38:86:03:e5:2a:69:99:8b:9e:24:
                    fa:d8:de:08:9e:ad:43:34:e0:ad:66:e7:28:02:54:
                    a9:a4:9d:ed:c6:b7:ad:94:af:78:75:72:89:9e:39:
                    3d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C5:15:16:6A:18:6F:65:61:34:46:4C:B8:1F:21:BD:BF:44:A4:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/dd10681c-9d05-3b70-aafb-f5510f585252.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.197.44.0/23
                  146.197.50.0-146.197.53.255
                  146.197.176.0/22
                  146.197.184.0/23
                  146.197.188.0/23
                  146.197.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:df:cb:b1:8d:aa:1b:4a:ec:62:9e:08:5a:95:49:a5:ab:78:
         c0:a5:7b:32:c3:be:28:5b:eb:9d:2a:8b:36:2d:61:02:6b:cd:
         f1:08:ef:a8:4d:78:86:a5:ee:60:e6:a3:43:6d:ce:7f:69:03:
         7f:d3:4b:41:f5:07:fc:22:82:d0:6f:e1:28:b2:07:66:fa:2c:
         6e:fe:76:1e:80:a5:6e:f4:b0:dc:78:1f:cd:77:b9:3f:d2:b3:
         36:85:94:00:41:c9:d1:96:3c:5d:2e:53:02:b6:51:fe:aa:e5:
         eb:55:38:51:0b:e3:4b:f9:93:52:43:f2:dd:26:f1:7a:62:13:
         ce:27:4c:83:7b:08:f0:a5:ff:7f:e0:5e:cf:75:c5:b8:ed:3f:
         69:e3:70:9b:97:b3:f9:b1:56:33:b9:83:f7:a0:8b:6c:59:23:
         45:d7:f2:d2:d8:2d:ab:f9:b0:a5:9e:54:a8:8f:0f:bc:2e:56:
         6d:70:37:99:58:73:a6:50:2f:91:9f:6c:41:d4:63:ac:52:1c:
         98:26:ad:dc:ed:b9:0c:c4:3d:21:3d:22:00:e3:07:a6:8a:92:
         15:4f:bd:c5:0c:e7:7d:34:68:af:b9:9d:b1:a9:19:45:7d:a3:
         9f:ff:bf:86:ba:c5:33:03:e2:39:bd:b8:7c:9c:37:bb:38:92:
         d6:8b:1c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:51:53 2025 by rpki-client