Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/e9b7509c-3dcc-3c01-9db3-e148c542f9c0.roa
File:                     e9b7509c-3dcc-3c01-9db3-e148c542f9c0.roa (raw, json)
Hash identifier:          L2OYv52dT7Mr0VCKdlbfASxe+oJn12YAiMatHcUpcCs=
Subject key identifier:   72:9B:40:60:07:CF:52:AA:9E:22:4B:A5:7C:21:A2:9F:37:37:31:31
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F4328584AE89130D06010CD5519BB2280
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/e9b7509c-3dcc-3c01-9db3-e148c542f9c0.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     33695
IP address blocks:        173.237.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:30:d0:60:10:cd:55:19:bb:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=8cfdb029-6f5e-4cf1-b10d-5be7bb755525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f3:9f:e1:cb:f1:9c:35:d3:4a:a6:6d:96:ed:
                    84:f2:2f:c0:58:e5:74:a2:40:2b:45:13:77:51:7f:
                    73:8e:4a:79:b3:b2:7d:37:48:19:56:cc:d1:5e:b2:
                    1c:5b:51:7d:6f:e6:19:de:4c:ce:39:bb:c0:4d:92:
                    9f:8c:57:4f:dc:4d:b9:d7:d8:93:37:02:6e:1e:fe:
                    1b:a4:57:26:f9:e2:af:c4:bd:c6:08:a4:a7:a7:9e:
                    8c:54:90:80:fc:b5:db:99:27:77:91:65:03:0c:19:
                    0d:7b:d7:76:d0:24:13:b8:e8:f8:bb:82:4a:ac:5d:
                    05:79:c0:82:3a:da:3d:91:da:27:d0:bf:ee:e9:27:
                    ba:fa:fc:9a:6b:d8:2b:d1:41:d2:95:ee:98:42:c4:
                    06:e3:6c:b4:96:e2:07:8f:d0:69:e0:bb:b7:36:c0:
                    30:d0:43:68:ee:5e:ea:4b:92:70:90:d4:7f:0a:83:
                    8c:65:8b:0e:5c:a2:ee:88:ba:30:b6:6b:da:18:1c:
                    ad:8b:57:1f:a9:ba:24:2b:d4:6e:6f:13:8d:9f:c2:
                    77:ed:7f:e4:60:46:a1:cb:c9:4e:37:3d:b6:16:22:
                    c8:74:da:54:b6:b7:2c:24:d6:f9:05:56:14:51:fe:
                    c6:09:50:98:3a:e6:a9:a7:3f:13:6e:3d:a4:36:8e:
                    c7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9B:40:60:07:CF:52:AA:9E:22:4B:A5:7C:21:A2:9F:37:37:31:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/e9b7509c-3dcc-3c01-9db3-e148c542f9c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.237.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:bc:8c:ea:3d:f8:ae:6c:be:7e:ac:2f:29:ca:2b:77:81:ed:
         e8:5d:b5:ee:af:66:8d:47:95:d6:9d:05:46:16:4a:b5:35:e4:
         cd:7a:1b:e4:c3:c3:d9:2b:49:54:cc:d9:2c:4f:7c:74:dd:bf:
         6a:14:d1:5b:62:61:bf:6b:fc:32:4e:3b:97:49:5c:eb:1f:5a:
         80:34:9c:db:f8:a8:61:d9:76:8b:26:e5:e0:ac:4b:0a:27:e2:
         37:1a:fb:02:56:3e:e6:28:d6:4a:57:1a:85:d7:a2:50:36:78:
         5d:0f:f7:45:be:99:ce:06:97:87:71:f9:8b:00:97:b0:26:6c:
         f4:86:27:7d:4b:d4:f3:ac:43:8d:c6:6a:77:30:44:59:b7:5c:
         b0:dd:ce:06:b8:df:61:62:1e:3d:da:fc:a1:c3:47:dc:62:b7:
         1e:46:05:ed:00:04:10:05:89:fc:b4:81:2b:66:a7:7f:98:3b:
         5a:03:15:b4:46:f2:8b:38:9f:12:13:46:b5:fc:85:3f:ac:71:
         8a:2e:f2:05:f0:f1:90:61:0a:ea:0f:1e:8e:f9:84:a5:d2:75:
         89:35:d9:4e:b3:bf:b2:0c:f1:60:24:87:1a:79:d6:c6:75:df:
         0e:ff:0d:d8:fc:43:4e:ab:6a:90:9c:1e:aa:40:e0:0d:5c:74:
         9b:7c:30:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:56:27 2025 by rpki-client