Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/796a5e55-8001-3aaf-84b5-2ced363092f8.roa
File:                     796a5e55-8001-3aaf-84b5-2ced363092f8.roa (raw, json)
Hash identifier:          Edu8yuvF7wE+5kODsYiZBcqOSfIb634Nw+bZB3DHqoY=
Subject key identifier:   4D:11:DD:32:7E:28:C7:0F:52:07:31:EA:3D:6A:26:81:DD:CD:8E:E2
Certificate issuer:       /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial:       010D0C9F4328584B821CC4398C0985BE81580580
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/796a5e55-8001-3aaf-84b5-2ced363092f8.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     16509
IP address blocks:        173.240.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:c4:39:8c:09:85:be:81:58:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=310ade9e-a75e-42ac-a200-c7ed6f44609f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a9:6e:2f:c5:57:2a:2d:08:af:9c:a3:d4:40:
                    45:1a:3d:7a:55:b5:55:bb:ca:53:8d:6c:37:b0:5c:
                    9d:49:57:e1:b7:22:51:af:6f:32:27:fc:e7:e8:2b:
                    80:f4:ec:85:93:b9:b5:51:98:e2:4b:3e:09:31:4c:
                    6b:50:05:8d:c3:99:e7:97:ed:9d:56:5a:1d:26:3b:
                    21:ee:b4:1b:09:fe:0a:92:53:c1:66:a3:72:cc:be:
                    50:72:c2:3f:4c:78:c5:3c:2d:a2:9b:e6:81:8a:8a:
                    3f:d4:b7:67:18:91:5a:af:00:33:14:d6:38:db:cb:
                    ad:96:2c:2a:6f:b7:fe:c1:81:b1:8c:9d:aa:86:c4:
                    d2:ae:f9:39:e8:c0:44:9b:cc:1a:8d:69:73:75:26:
                    12:d2:a7:3f:88:8c:25:e2:26:09:d4:59:c0:41:29:
                    ab:6f:54:e0:db:76:0d:5b:c8:e6:31:99:1e:3c:31:
                    98:35:82:41:bb:5e:ea:a6:18:dc:7a:dd:2c:ee:f2:
                    a5:82:65:8c:39:79:77:9e:8e:9c:cf:83:a6:14:ab:
                    ce:cd:ee:2c:51:40:1b:f7:ae:fb:66:3d:eb:15:82:
                    f8:94:64:e7:80:4a:ce:15:75:64:78:e5:07:4e:08:
                    b7:f3:7d:62:bb:4d:47:9c:99:19:d7:11:d4:00:1d:
                    c3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:11:DD:32:7E:28:C7:0F:52:07:31:EA:3D:6A:26:81:DD:CD:8E:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/796a5e55-8001-3aaf-84b5-2ced363092f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl

            X509v3 Authority Key Identifier:
                keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.240.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e3:ca:6d:63:ed:a3:b5:0f:56:1b:28:fb:f7:8c:be:c4:42:
         ff:e9:7f:95:18:a3:36:58:b6:41:fb:a3:fd:dd:1b:76:23:28:
         e4:e8:fd:60:6e:62:9c:56:94:19:c2:1c:fc:c3:80:ef:f9:49:
         55:91:cb:df:4b:e3:28:d3:b0:52:e4:29:fc:4f:fe:18:71:8b:
         4a:b5:3e:c7:82:83:50:13:cc:fc:f4:af:3f:93:26:c6:44:fb:
         08:8a:85:20:e3:c5:ae:89:41:64:7f:0d:21:75:0a:80:f4:fe:
         ae:c9:3c:e2:15:1e:ea:7b:79:73:bc:54:a1:a4:79:42:36:44:
         db:6e:7a:83:a9:65:bc:b5:35:02:99:48:1e:af:0a:98:06:24:
         78:d9:be:a1:0c:fc:77:ca:da:fd:90:6c:96:b9:2f:9a:8a:c1:
         1f:be:25:09:e6:44:76:ae:f9:e8:69:74:e0:c9:44:48:f8:17:
         fa:2b:5c:22:ee:51:9b:15:64:f1:69:2f:27:48:6f:e8:6f:6a:
         67:f7:f4:0a:8a:fd:6b:b6:1c:88:79:5e:d1:f8:e1:d7:d7:e5:
         cf:da:eb:3f:85:dd:61:78:0e:c3:ee:e5:56:bc:d1:f9:72:fa:
         41:f6:c2:a9:bf:e2:28:a8:00:98:7c:9d:e9:92:e9:1e:80:91:
         29:ae:dc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:16:10 2025 by rpki-client