Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/7da17b62-e67e-3b51-aa96-be9f4a34c459.roa
File:                     7da17b62-e67e-3b51-aa96-be9f4a34c459.roa (raw, json)
Hash identifier:          dSCAgw4ChEfRfbTHCRdWdkgrBLgKSq3Ute3gtm13RMU=
Subject key identifier:   55:77:F9:79:2E:84:46:DD:6F:24:39:72:85:9B:1E:74:5A:2C:63:00
Certificate issuer:       /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
Certificate serial:       010D0C9F4328584BA99B44DC357D3EC45119BD20
Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/7da17b62-e67e-3b51-aa96-be9f4a34c459.roa
Signing time:             Mon 27 Oct 2025 16:32:10 +0000
ROA not before:           Mon 27 Oct 2025 16:32:10 +0000
ROA not after:            Sun 25 Jan 2026 17:32:10 +0000
asID:                     198584
IP address blocks:        216.75.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a9:9b:44:dc:35:7d:3e:c4:51:19:bd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
        Validity
            Not Before: Oct 27 16:32:10 2025 GMT
            Not After : Jan 25 17:32:10 2026 GMT
        Subject: CN=219fa74d-1f9d-48b5-90f0-3f918fd680b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5c:42:2e:7e:b2:10:8c:ea:4b:24:99:55:56:
                    b4:51:f7:9d:da:46:cd:15:fa:7c:39:3e:67:1b:ab:
                    45:c9:3c:e5:bf:ef:77:d3:52:9d:dd:a1:0d:50:1f:
                    c4:17:f0:34:92:40:09:cc:a9:00:8f:1c:fc:2d:74:
                    15:44:b9:57:f1:45:de:0d:49:3e:a8:b5:cf:ee:cb:
                    fc:8c:8b:c2:af:f0:58:e7:7f:a1:dc:ae:09:04:58:
                    15:57:26:cf:bf:71:14:55:f4:ba:f5:dc:3d:68:2a:
                    62:28:3e:c4:47:a2:df:8b:33:2a:75:93:c2:2c:a9:
                    08:6c:67:16:5e:03:dd:bc:96:51:09:b6:27:b7:07:
                    ca:63:13:14:83:88:24:30:c0:1f:bf:9d:b9:8a:ec:
                    c7:a4:ff:6a:d9:91:b0:b4:bc:9b:55:7b:e2:cf:db:
                    35:d1:e4:0d:3d:c7:3a:70:39:70:9d:09:c5:63:be:
                    47:9a:23:f6:74:d7:47:88:48:e1:f0:a5:76:23:6a:
                    e6:1b:60:e6:3e:63:fe:f4:ea:40:33:96:8f:6e:f6:
                    58:cf:69:9b:cb:31:27:bc:cc:cc:99:bb:48:1d:9b:
                    8c:17:9c:d7:9c:85:95:28:c8:48:99:c2:1b:4e:4f:
                    35:13:4b:4b:18:7a:9a:1f:ef:3d:da:c1:7f:12:95:
                    49:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:77:F9:79:2E:84:46:DD:6F:24:39:72:85:9B:1E:74:5A:2C:63:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/7da17b62-e67e-3b51-aa96-be9f4a34c459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl

            X509v3 Authority Key Identifier:
                keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:61:76:63:4d:f3:21:05:c6:4e:e3:d2:fc:f4:23:b3:a4:ed:
         9d:ea:d0:80:2c:cb:d4:d7:30:01:c2:af:30:a1:37:1c:0c:9b:
         25:24:fa:1c:f0:8a:17:81:a4:29:7f:1b:01:c3:fa:70:dc:90:
         4f:b2:82:db:fe:e9:de:24:65:10:48:49:30:cf:f9:69:d8:82:
         0f:5c:80:d8:88:c9:40:13:6b:da:7d:f3:58:82:15:b1:79:4c:
         ce:a2:6b:f6:1d:cf:45:68:10:11:96:01:b4:bd:48:4f:e4:2d:
         b9:02:c7:bb:aa:d0:a6:e1:14:1b:19:bd:8a:46:71:9a:c7:04:
         2e:ee:55:cf:6b:07:c5:71:55:af:d1:93:15:78:ba:a7:8d:6d:
         7d:5c:fd:e2:b1:fa:63:cf:57:a5:91:a3:60:0e:4d:fc:89:d4:
         58:a1:72:2b:71:13:e5:f0:49:f2:ad:9b:e0:be:e1:31:c4:05:
         03:1e:96:c3:28:ee:b4:cf:2b:07:22:b4:a2:b1:9b:1c:36:ea:
         14:59:18:ea:43:6c:45:72:88:ba:d4:25:9d:4b:3c:82:b9:9a:
         e6:20:97:dd:22:d3:7a:16:d3:10:7e:12:cd:76:21:63:84:61:
         fd:3d:0e:3f:5f:7e:c8:72:58:52:7c:76:b0:d1:43:a1:aa:19:
         41:cb:55:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:46:35 2025 by rpki-client