Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/527fa986-35bb-33c1-a1c2-8579672b73ec.roa
File:                     527fa986-35bb-33c1-a1c2-8579672b73ec.roa (raw, json)
Hash identifier:          PSot+6k8OHFwpjG7m7kn+uYp2iIQm5Yvd1GEt5zhoJY=
Subject key identifier:   37:CA:A4:4A:03:4E:70:DA:AB:C0:7C:5E:B5:26:E6:2A:1E:2C:F9:E8
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584B99D786636E5F454F4D75E740
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/527fa986-35bb-33c1-a1c2-8579672b73ec.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     16509
IP address blocks:        134.224.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:86:63:6e:5f:45:4f:4d:75:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=1a681f8a-98ca-4d1e-b88d-6fd3a2640c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:01:30:82:b6:4b:ca:9b:03:87:31:6a:88:ca:
                    90:01:e8:03:35:4d:5f:25:5e:ad:18:1a:35:8f:63:
                    70:b9:d3:8e:f5:a2:c9:d0:5b:59:9d:6b:5b:cc:3f:
                    46:b4:0f:88:49:81:21:97:80:28:e7:7d:ce:2a:51:
                    7a:d1:a4:ec:54:22:8b:ea:c8:ea:79:a8:3e:41:46:
                    70:39:d2:f8:5c:74:f3:f3:56:c2:6f:eb:29:6e:b4:
                    dc:b2:2b:7c:9a:b2:fb:1e:d6:8b:e7:c5:64:23:7e:
                    7d:ad:5f:e6:e3:93:26:98:0c:05:ad:09:b9:3f:7f:
                    3a:15:79:8d:3d:09:ca:86:b4:f0:44:cc:59:36:0e:
                    c9:d5:c9:f2:8e:d0:41:c5:97:64:b3:b7:2b:07:b7:
                    10:aa:27:a1:14:cb:35:c6:3d:c2:7d:4b:6c:e7:ea:
                    6c:fd:50:94:df:0c:d7:42:b4:35:75:e8:bc:08:1f:
                    3e:ec:52:3e:61:9a:f2:2b:37:1f:cd:bf:16:71:f5:
                    65:c6:b3:e5:13:de:71:f5:42:78:94:c3:c1:f3:b2:
                    2d:9c:d5:30:ae:c8:27:9d:1a:c6:6b:03:51:bb:12:
                    ac:d0:a9:a7:de:d5:b8:77:56:68:ec:99:40:0d:9b:
                    70:c6:e1:3b:ac:df:9e:04:f1:8f:20:bf:18:01:11:
                    20:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CA:A4:4A:03:4E:70:DA:AB:C0:7C:5E:B5:26:E6:2A:1E:2C:F9:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/527fa986-35bb-33c1-a1c2-8579672b73ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:70:47:b0:08:0a:9a:30:58:00:8d:d1:30:ca:c5:77:82:c6:
         d0:f7:92:43:45:6f:b2:2e:83:bd:f3:b9:21:f1:11:40:ac:7c:
         a2:2b:e9:e9:69:ff:71:53:9b:e1:94:5c:08:a4:de:ac:c0:33:
         84:ea:94:7d:29:40:d7:eb:d3:64:ee:ac:5f:dc:30:b8:40:97:
         86:4f:5a:6f:db:91:cd:d9:59:18:3e:0a:e1:03:32:52:4c:15:
         f5:40:f6:d9:27:20:f9:b3:9c:14:9b:c5:0e:ee:10:5b:3c:16:
         6b:44:e2:42:65:7f:bc:90:85:65:d7:cb:eb:4b:02:17:a6:3e:
         43:04:7c:2b:60:d5:ed:79:f4:8e:67:76:70:fe:31:39:d0:df:
         d7:f8:e4:31:47:04:33:ef:66:b9:4c:c0:5d:16:7e:02:c0:c6:
         ce:95:60:43:a4:00:64:da:8a:28:00:69:97:b9:c2:07:29:dc:
         30:2f:ae:2a:3c:b5:a2:6c:f2:eb:eb:e4:ea:c1:d0:94:22:04:
         d4:e4:3f:24:f6:90:3e:95:07:64:c3:2e:27:b1:10:15:d1:1c:
         64:ae:e2:06:6c:2a:e4:b2:e0:4e:9e:14:12:88:38:b9:38:43:
         c0:9a:02:90:9a:4a:10:84:8b:88:36:31:35:69:94:3f:7f:15:
         a6:9b:b6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:47:27 2025 by rpki-client