Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7eaba2bb-8142-4a3a-8cb7-f3dfe34b442b/33ab0ca3-cdd8-35b0-b19b-287552dcc451.roa
File:                     33ab0ca3-cdd8-35b0-b19b-287552dcc451.roa (raw, json)
Hash identifier:          sP8mRv7quDmbQCwhlUgod9zdqo8cKhEUWFoaom5vm30=
Subject key identifier:   1C:90:F9:CB:2A:A2:1F:07:FA:CD:4D:E5:E3:C5:76:A9:AB:3F:93:1C
Certificate issuer:       /CN=7eaba2bb-8142-4a3a-8cb7-f3dfe34b442b
Certificate serial:       010D0C9F4328584BB109B938B9DCF22ED7CBCAA0
Authority key identifier: F2:2F:C8:DF:36:28:9E:BF:37:31:16:AA:E7:5D:1B:1A:85:39:DB:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7eaba2bb-8142-4a3a-8cb7-f3dfe34b442b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7eaba2bb-8142-4a3a-8cb7-f3dfe34b442b/33ab0ca3-cdd8-35b0-b19b-287552dcc451.roa
Signing time:             Thu 30 Oct 2025 08:25:22 +0000
ROA not before:           Thu 30 Oct 2025 08:25:22 +0000
ROA not after:            Wed 28 Jan 2026 09:25:22 +0000
asID:                     139880
IP address blocks:        204.77.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7eaba2bb-8142-4a3a-8cb7-f3dfe34b442b/7eaba2bb-8142-4a3a-8cb7-f3dfe34b442b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7eaba2bb-8142-4a3a-8cb7-f3dfe34b442b/7eaba2bb-8142-4a3a-8cb7-f3dfe34b442b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7eaba2bb-8142-4a3a-8cb7-f3dfe34b442b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b1:09:b9:38:b9:dc:f2:2e:d7:cb:ca:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eaba2bb-8142-4a3a-8cb7-f3dfe34b442b
        Validity
            Not Before: Oct 30 08:25:22 2025 GMT
            Not After : Jan 28 09:25:22 2026 GMT
        Subject: CN=017fddc5-f1d1-43b6-ba85-277d748b4c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:14:28:a9:eb:84:a2:62:81:b8:93:4b:88:6e:
                    d2:5c:9b:23:44:84:63:5a:2c:0d:84:44:1d:23:be:
                    e0:fc:bf:fe:6a:93:5d:4b:20:72:c9:4d:b8:1e:1b:
                    a4:b4:44:aa:ed:86:b4:1c:b4:3d:93:b8:b2:90:e6:
                    b0:f2:78:35:53:da:9c:7c:0f:58:fd:31:a7:2f:ed:
                    50:e6:60:31:66:f5:da:24:ae:e3:5f:da:69:3e:19:
                    bf:e2:e7:7c:5a:c6:a4:c3:0d:88:47:be:df:21:ac:
                    75:15:fd:ef:1a:a6:aa:3c:2e:cf:75:55:fb:a6:97:
                    7d:f5:3e:4f:3e:4f:f2:9a:b0:5f:da:aa:5f:ba:47:
                    e0:83:4d:7a:48:be:66:cd:95:9f:39:87:70:78:fa:
                    99:55:26:c3:fc:b8:1a:ce:0c:2f:54:35:60:f4:60:
                    0a:26:f6:7d:64:42:f3:e6:9d:6f:4b:b1:24:a5:6f:
                    e4:7c:ed:30:ad:b9:b6:47:3c:21:a4:5c:cd:a1:a8:
                    ac:34:56:fd:20:49:ad:4b:ec:80:66:eb:9b:e3:da:
                    5a:05:53:aa:47:a4:17:88:4b:89:6e:94:a8:fe:8d:
                    2f:78:2c:fa:ff:84:90:37:37:96:b6:75:4a:8d:fa:
                    09:65:9f:b8:ad:87:d7:3f:cc:ed:e4:f1:ef:d5:66:
                    c0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:90:F9:CB:2A:A2:1F:07:FA:CD:4D:E5:E3:C5:76:A9:AB:3F:93:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7eaba2bb-8142-4a3a-8cb7-f3dfe34b442b/33ab0ca3-cdd8-35b0-b19b-287552dcc451.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7eaba2bb-8142-4a3a-8cb7-f3dfe34b442b/7eaba2bb-8142-4a3a-8cb7-f3dfe34b442b.crl

            X509v3 Authority Key Identifier:
                keyid:F2:2F:C8:DF:36:28:9E:BF:37:31:16:AA:E7:5D:1B:1A:85:39:DB:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7eaba2bb-8142-4a3a-8cb7-f3dfe34b442b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.77.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:40:52:0f:4f:06:48:17:9c:17:1c:f1:36:8c:10:c4:2c:a3:
         c0:bf:06:08:fb:bf:50:96:d5:f4:21:78:94:91:c7:aa:37:04:
         09:8c:ab:c2:9e:88:c2:b8:d4:4b:a2:66:a8:38:a0:98:4e:30:
         8c:db:16:9a:05:bc:4e:32:4e:d0:73:cb:76:11:39:41:c6:e5:
         d4:e9:48:89:5c:4a:0f:64:b4:08:65:96:61:ea:99:b3:10:26:
         bf:59:59:35:12:e8:3b:4a:78:b0:06:76:c8:e1:30:17:c8:35:
         4e:fe:47:d8:13:eb:31:4c:e3:27:a7:08:98:b4:7a:6a:03:6c:
         ad:31:f0:dd:58:c7:3d:28:61:bf:54:e6:d4:fe:34:a1:d4:5c:
         e4:0f:9f:47:70:86:17:c7:77:01:09:20:43:5b:10:3e:8f:4a:
         7b:30:8f:a1:3d:68:e4:72:a1:c2:ba:1a:86:9f:10:28:ab:64:
         cc:03:3e:a4:c9:2b:81:68:42:a0:b8:a7:b2:ed:f1:41:ff:ca:
         a7:34:d4:63:a7:ab:93:92:93:99:0f:cb:74:18:90:de:5a:2e:
         2b:e1:de:37:16:84:15:ca:d9:ab:fb:58:c6:ff:ad:e7:ea:68:
         7e:31:be:23:e2:68:ad:5e:5e:7a:d5:05:07:bf:55:8c:31:82:
         37:72:5e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:46:39 2025 by rpki-client