Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/2f7706e5-a38d-3f6c-92ee-1a8ffe6286fe.roa
File:                     2f7706e5-a38d-3f6c-92ee-1a8ffe6286fe.roa (raw, json)
Hash identifier:          Lu5ajFR9tIMwGIBasdpWTKyFt8ZyrVPF2cwthPHA/Os=
Subject key identifier:   0F:87:F1:44:EB:75:53:CB:D0:B9:21:3A:57:F5:6B:3E:3D:39:D9:B6
Certificate issuer:       /CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
Certificate serial:       010D0C9F4328584AD7D1242A185150FEE54B8240
Authority key identifier: AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/2f7706e5-a38d-3f6c-92ee-1a8ffe6286fe.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     209453
IP address blocks:        173.246.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:24:2a:18:51:50:fe:e5:4b:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=fa9b542d-cfe9-4019-b4c2-a592826f03a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ca:89:da:ba:b0:a7:e9:99:e2:e2:5c:53:9e:
                    83:95:52:7e:b0:08:13:d3:56:dc:ac:52:d0:55:6a:
                    7a:90:c3:45:9f:9b:c9:96:b1:1e:2d:9b:7a:3e:90:
                    ed:0c:10:21:16:e9:63:66:e4:60:f3:f3:80:89:15:
                    c4:f1:d5:f0:c9:64:73:76:b1:bd:9b:34:3f:71:f9:
                    d2:5c:52:23:a6:92:73:0c:9a:af:29:f6:c0:db:07:
                    73:21:ab:24:a2:f6:9d:62:75:ed:54:53:f1:a0:2c:
                    6f:09:71:e8:31:65:3c:ca:82:a7:eb:cb:0a:a1:aa:
                    fd:6a:d8:36:4a:21:93:5b:e2:17:be:23:97:92:6e:
                    aa:3a:b3:c8:27:8c:99:04:62:c8:15:be:7b:53:49:
                    b9:97:34:3c:34:24:2f:d3:e0:4e:ff:59:69:0a:b7:
                    e5:13:70:bd:8a:e6:2f:b4:c6:f9:03:4e:0b:07:ba:
                    6f:50:56:85:3d:3c:d5:b9:cd:11:8d:ba:a0:4d:37:
                    73:e2:5a:df:64:2e:ed:1e:98:c9:5a:fa:b8:91:e4:
                    e0:e8:e8:b5:5b:c6:4d:26:44:26:96:93:75:e0:c4:
                    52:bd:da:9c:29:15:b8:9e:48:3f:fe:5d:96:2c:2f:
                    26:57:fb:cf:12:7b:38:be:06:99:e9:29:e5:f0:d3:
                    63:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:87:F1:44:EB:75:53:CB:D0:B9:21:3A:57:F5:6B:3E:3D:39:D9:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/2f7706e5-a38d-3f6c-92ee-1a8ffe6286fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl

            X509v3 Authority Key Identifier:
                keyid:AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.246.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:9b:98:09:6f:14:98:7c:42:1c:fc:37:a9:2c:e1:53:9a:75:
         d5:aa:e1:5b:2b:5e:85:ad:43:c2:00:2a:cf:23:25:cd:d6:4c:
         d4:d8:b3:15:57:10:38:78:59:00:f3:a3:54:7a:bc:eb:c4:2f:
         47:72:e8:33:9c:f8:e0:42:b3:63:21:32:9d:c4:ca:97:4a:94:
         1f:5c:2b:4f:9e:36:72:44:1a:ea:f6:c5:b8:d2:70:50:27:5e:
         7e:8c:5e:64:0a:3c:21:bc:00:37:f9:31:de:43:ec:65:ef:e6:
         77:bc:1f:01:ac:fe:b8:aa:80:4d:6f:1e:bd:dd:03:1a:78:b3:
         4c:ec:cf:24:98:eb:a3:b9:0b:77:a2:3b:f4:92:e2:72:33:8f:
         c7:8c:92:ee:52:fb:3a:12:5b:cf:43:6c:16:35:09:56:b6:3f:
         e7:0f:20:7d:a5:65:d7:f9:ca:57:96:49:04:e9:a9:10:88:d3:
         d8:01:7f:5d:fb:44:ba:23:73:8d:b6:94:91:29:fb:6e:65:5a:
         79:52:af:96:94:b8:f5:f6:e9:6e:b5:b3:45:2a:fc:3c:9c:9f:
         78:d3:7f:89:80:d0:a0:b3:7e:07:a8:73:37:03:8e:16:29:64:
         86:2d:b9:7d:66:d4:29:41:50:cc:39:fa:72:5c:fa:92:2f:21:
         f1:1e:ee:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:51:53 2025 by rpki-client