Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ebe18e84-222b-3cec-96e4-661d8ca3cc20.roa
File:                     ebe18e84-222b-3cec-96e4-661d8ca3cc20.roa (raw, json)
Hash identifier:          c5amfC9zFHkRPv0IM6xGWEVTwV+YlyIuawtWkpFxBo8=
Subject key identifier:   D5:FF:8C:53:7D:B3:7D:C5:FB:04:35:A0:42:FB:35:74:DF:36:1E:A9
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B66320BCA0A64854A87272D00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ebe18e84-222b-3cec-96e4-661d8ca3cc20.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     19905
IP address blocks:        173.22.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:32:0b:ca:0a:64:85:4a:87:27:2d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=1147a6b5-256c-48d8-b910-c595454e0c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:43:ec:c9:61:1b:e7:d6:4d:14:30:3a:3b:61:
                    ba:2b:c7:f7:cb:59:08:03:6b:2b:a5:34:3e:0f:79:
                    1c:09:31:01:fb:cd:e3:d9:36:03:81:f9:f2:73:5a:
                    bc:16:bb:ec:6e:67:e5:57:3f:ef:7b:61:a1:bb:80:
                    b8:0f:c9:72:58:8d:14:a9:aa:8b:86:bd:e6:a9:e4:
                    1f:b7:ed:1d:61:2c:0b:04:d2:41:91:17:60:79:27:
                    b5:ce:75:02:d0:3a:fb:71:ea:02:03:3b:05:e6:b9:
                    29:8a:02:21:ab:57:27:3e:c9:3b:20:b8:9d:7c:36:
                    e2:c7:ee:0b:79:a7:66:3a:c2:9d:f3:ef:67:bd:94:
                    c4:49:57:7e:6c:03:46:f6:a1:ba:a1:e2:2a:38:54:
                    60:5d:25:72:71:12:8e:24:d1:66:6e:0c:9c:a6:b3:
                    a6:b3:ba:bf:42:fc:06:12:33:f6:ee:7d:b9:90:fd:
                    8b:d7:8e:af:9f:31:a8:43:7e:7c:e7:11:d6:96:0a:
                    e7:73:e4:3c:91:98:13:a2:cf:aa:74:92:af:67:f7:
                    a2:c3:f2:24:33:2d:8f:be:b7:57:27:f6:4c:56:78:
                    35:a6:7f:8d:24:0c:8a:db:f0:f4:d5:d3:ed:76:cf:
                    d1:13:b0:e9:de:5b:dc:3c:22:21:18:44:f2:7a:91:
                    2b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FF:8C:53:7D:B3:7D:C5:FB:04:35:A0:42:FB:35:74:DF:36:1E:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ebe18e84-222b-3cec-96e4-661d8ca3cc20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.22.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:69:8c:71:69:c9:84:fc:53:23:fc:6d:d1:67:5d:f1:34:58:
         a2:64:20:d6:09:e3:c0:db:b8:9f:f2:9a:43:2d:f5:31:db:6c:
         23:fd:3a:52:cb:70:22:ff:da:ff:e3:02:07:ca:6f:f5:52:d2:
         81:9f:5f:ab:4c:52:5a:e6:45:e8:8f:45:a4:76:86:a3:eb:a0:
         10:0c:38:90:c4:9e:c8:5d:02:fd:b5:27:91:34:c8:5b:20:77:
         10:57:59:03:69:ed:01:64:7e:a3:af:ed:6e:5d:0a:69:07:8e:
         e8:f2:48:db:bc:eb:ba:34:95:9b:3f:5f:94:42:39:af:df:76:
         85:d6:62:e8:9a:a4:19:41:68:1c:5c:33:7d:2e:8b:e3:6a:a3:
         51:74:0d:88:85:9e:10:b4:a4:0e:76:49:e7:cf:a9:01:f5:d2:
         04:15:99:17:7c:e8:22:b0:b1:92:8c:d4:bb:cf:5e:ef:fb:72:
         ad:4e:78:0e:57:70:12:91:ac:56:0b:a6:03:34:08:7a:b5:28:
         92:e0:06:93:10:03:6e:59:8c:e8:09:bc:59:f9:62:e5:d6:c5:
         3d:c0:7d:46:7b:06:ef:db:29:a8:a5:30:65:38:b8:21:4d:17:
         d8:fd:4f:aa:8b:11:31:42:71:a1:a4:1b:69:ba:1b:87:65:40:
         2d:5a:f2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:00:14 2025 by rpki-client