Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/3929a969-6b96-389e-aeac-0034a05d30fd.roa
File:                     3929a969-6b96-389e-aeac-0034a05d30fd.roa (raw, json)
Hash identifier:          V2Om7fS/rnKedeo/i3N1uOsQ5Vk3OwdluvLsesGlq/o=
Subject key identifier:   3F:27:7D:30:DC:DE:7B:DA:DF:BC:A2:32:FB:D8:9F:B9:74:8D:F3:B8
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F4328584B80B76D12B9583E3A94B15B80
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/3929a969-6b96-389e-aeac-0034a05d30fd.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     55410
IP address blocks:        172.84.180.0/24 maxlen: 24
                          172.84.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:6d:12:b9:58:3e:3a:94:b1:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=3656d58a-e70d-4c3c-bd15-501ec55df824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:30:36:d0:78:94:94:f8:06:87:4b:31:91:49:
                    7f:2a:8d:47:c5:6f:bf:b8:a4:f2:0b:65:85:fa:b2:
                    b0:d9:2b:64:f1:bf:1b:ac:48:30:4a:d4:b9:1e:98:
                    a6:d3:78:7b:2c:d1:f4:fd:6d:86:fc:0a:c8:10:b1:
                    bf:87:5d:c9:e9:e3:a9:bb:5a:35:4d:91:61:41:31:
                    df:fc:ed:ee:7f:10:f1:cf:23:6e:34:dd:15:5c:8c:
                    77:4b:b5:55:6c:b5:4d:86:65:16:96:36:bd:d1:25:
                    bb:1a:19:9c:51:65:fd:52:7a:72:0e:b5:ea:fa:5b:
                    c8:96:c7:31:27:20:61:d1:96:d5:31:75:e8:aa:c1:
                    52:e5:61:41:1c:d3:7c:82:54:55:0c:28:95:a6:ea:
                    5a:10:22:54:b8:1a:ee:30:f1:c9:38:96:68:19:3e:
                    94:5d:83:96:ad:5a:56:56:ae:a3:95:7e:cf:72:11:
                    aa:0f:65:1c:4b:65:6d:0d:ed:71:df:ef:b5:52:c6:
                    7c:a1:a2:b5:a7:0e:fc:1c:88:ff:c3:fd:8b:ec:7b:
                    b1:00:29:44:ea:d1:af:fe:9d:32:8e:e3:f0:fe:8d:
                    0a:37:ed:e6:dc:86:56:dd:10:97:fe:e8:55:d7:a6:
                    c9:37:db:48:6b:0c:ce:5e:e0:9f:76:20:0a:0d:de:
                    80:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:27:7D:30:DC:DE:7B:DA:DF:BC:A2:32:FB:D8:9F:B9:74:8D:F3:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/3929a969-6b96-389e-aeac-0034a05d30fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.180.0/24
                  172.84.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:15:20:fa:a0:db:43:8a:35:12:7c:52:62:74:3d:f3:97:df:
         a8:25:2f:f0:1c:dd:96:e8:10:1d:a2:3a:d0:ac:85:df:75:50:
         46:35:19:fb:de:61:dd:21:5e:01:ff:45:43:01:9e:e9:42:0d:
         69:5f:0f:23:f8:d7:a4:85:93:06:eb:c1:5b:b4:a3:4c:69:35:
         09:d0:e5:1c:e5:7f:02:41:e8:7c:c7:fc:67:a1:70:94:58:fd:
         04:a9:98:e6:99:a3:79:cc:51:bb:6c:ff:77:76:9f:5b:28:9f:
         30:05:3d:9b:98:ad:21:f0:2d:e4:29:78:12:6f:58:0f:da:bc:
         9e:91:30:42:0e:65:dc:c2:56:28:ab:cb:5a:ea:fa:97:26:82:
         76:c2:cd:78:0b:05:47:cd:af:6e:e3:01:d3:75:05:b9:b0:1c:
         35:ee:2a:8d:ae:fc:f0:42:46:ac:2f:cc:d4:b8:a8:b4:0e:3e:
         7a:a7:5e:04:b4:74:0b:3d:de:a4:1f:89:e4:a0:64:2d:8b:36:
         13:22:5f:bc:c3:e4:b6:f6:42:a5:74:c8:8e:32:b2:a0:e4:5d:
         c6:b6:65:c5:5b:bc:16:f6:7b:8a:4b:a8:1e:28:fa:ae:89:41:
         1b:d4:09:8d:60:27:b8:8a:3f:9f:d6:76:1f:ec:04:84:17:7e:
         8f:4e:25:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:46:07 2025 by rpki-client