Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c754b693-a556-3f97-bad8-332a81e35466.roa
File:                     c754b693-a556-3f97-bad8-332a81e35466.roa (raw, json)
Hash identifier:          kfkvbTezvHa1d8WKFdC/gMRuWLpnnp8dBXsl2N/ohfk=
Subject key identifier:   1D:3B:B7:29:3B:6F:A0:35:C1:D6:84:B5:F2:62:71:AC:97:B5:D9:2B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6D2CB8BBBEBE0FD90AADC1C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c754b693-a556-3f97-bad8-332a81e35466.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     19905
IP address blocks:        173.24.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:b8:bb:be:be:0f:d9:0a:ad:c1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=9ca50cee-a941-43f0-a5ae-48ac7b83ba0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cf:87:fa:3c:be:a7:88:cf:51:2d:97:e9:49:
                    82:44:17:e7:d8:96:53:24:98:7c:73:14:3a:98:16:
                    a8:26:02:af:80:06:35:1d:e9:8b:4f:0e:b1:39:7c:
                    69:c9:a7:a3:88:29:6d:db:13:5c:ea:e2:02:31:a9:
                    c6:21:48:ef:94:dd:e2:79:ee:9c:d5:fd:14:23:e7:
                    04:eb:f0:33:1d:03:ca:41:c0:ce:89:77:aa:da:8d:
                    a7:1e:e8:10:05:b9:56:35:3f:0a:e4:34:8b:09:1e:
                    fc:96:29:0a:47:20:63:0b:c9:d2:4d:66:9f:2f:3f:
                    08:28:97:87:1d:32:a6:59:12:17:a2:15:71:d6:df:
                    60:ff:f9:46:5d:ad:ba:59:af:9a:60:d9:57:e5:08:
                    14:c6:0d:34:ae:af:c2:24:50:87:0c:55:36:15:73:
                    d4:e5:ac:31:1a:8d:9a:ef:44:f3:3b:33:d3:20:a1:
                    4c:eb:17:fc:a1:da:31:17:4d:b4:b6:2f:e4:c6:bc:
                    bd:cf:0b:50:89:5a:56:3b:13:4f:f3:05:cd:ba:92:
                    f9:e2:94:9f:72:55:1b:13:2c:84:ec:b6:c8:42:b5:
                    07:60:79:04:0b:86:59:ae:43:a6:1d:74:81:07:f6:
                    5e:03:ad:85:e2:eb:14:aa:49:6d:99:98:4e:a2:07:
                    76:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3B:B7:29:3B:6F:A0:35:C1:D6:84:B5:F2:62:71:AC:97:B5:D9:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c754b693-a556-3f97-bad8-332a81e35466.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.24.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f6:73:a9:b9:47:5b:85:12:18:76:18:c9:a6:3a:6c:f2:6b:
         bd:ab:43:38:1a:f5:70:25:9b:65:de:0e:df:f1:51:78:b2:6e:
         d4:c1:3d:df:74:0e:b1:e0:4a:d2:82:bd:b2:b9:6f:e9:7c:eb:
         41:52:2c:cb:ed:64:83:dd:e7:99:f0:0a:33:f3:3b:a1:e6:64:
         53:76:0c:f5:c5:b6:28:17:c1:87:70:96:73:b0:10:6d:4b:de:
         a7:43:73:98:5a:a3:b3:a6:c2:68:06:cc:2c:0c:31:f1:61:7b:
         cd:29:71:b2:e7:1a:e7:8e:03:a9:6d:39:a9:10:7e:b7:c3:bb:
         f8:a0:48:21:c9:aa:8d:6e:17:5f:a1:24:09:d2:95:6d:43:ea:
         bf:65:3f:3a:fc:17:3a:bb:35:0f:6d:f7:6b:65:94:38:ec:2c:
         3f:66:a0:89:fe:f3:1f:79:f6:39:44:c5:5b:a1:95:13:bd:57:
         c5:84:ac:52:4b:25:1f:bc:06:48:1f:bc:82:ea:95:d5:46:02:
         eb:8f:67:67:31:bb:c7:ca:c7:3c:1b:8a:a5:69:cc:bc:e9:8b:
         64:0f:ee:ef:3b:96:11:11:c2:9f:7b:44:3c:a4:4c:0e:d5:79:
         db:d4:a6:aa:0f:7f:50:d4:dd:99:b5:7a:e6:cc:b6:74:0a:61:
         34:c0:90:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:05:41 2025 by rpki-client