Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/fece6d23-3692-3722-9856-2c02a2a5db09.roa
File:                     fece6d23-3692-3722-9856-2c02a2a5db09.roa (raw, json)
Hash identifier:          1AgDy8F9nzhanfPHIPv740g9TnWkQ6SMYJT51IWAdhk=
Subject key identifier:   AA:EB:AD:9D:0D:12:A0:17:E9:B2:35:5B:15:36:A3:8D:6B:94:68:D2
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F4328584B5F372D31A68DF8AAF676CE00
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/fece6d23-3692-3722-9856-2c02a2a5db09.roa
Signing time:             Wed 01 Oct 2025 01:00:32 +0000
ROA not before:           Wed 01 Oct 2025 01:00:32 +0000
ROA not after:            Tue 30 Dec 2025 02:00:32 +0000
asID:                     3271
IP address blocks:        169.145.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5f:37:2d:31:a6:8d:f8:aa:f6:76:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: Oct  1 01:00:32 2025 GMT
            Not After : Dec 30 02:00:32 2025 GMT
        Subject: CN=d5b8d948-8c16-4f72-aae0-3167d5d03570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2c:a5:59:0b:57:97:dc:26:c3:3a:a0:a0:19:
                    f2:1b:33:8d:c5:d8:39:fd:f8:94:08:06:88:9a:d3:
                    08:93:aa:1b:15:7a:e4:e8:ea:37:89:ac:da:e3:1f:
                    47:74:06:c7:ed:a6:51:79:94:b0:ad:24:a4:bb:1c:
                    89:e4:a6:5c:da:60:73:25:ea:b0:7c:ed:e0:27:ca:
                    0e:6b:c7:e5:ad:82:89:b3:d1:92:24:8f:d1:58:06:
                    64:b6:4d:56:e2:9e:1e:2c:d1:8b:10:bf:28:7d:20:
                    37:43:c7:45:3d:47:f0:7e:44:01:61:41:55:a2:0d:
                    fb:ac:9d:e0:57:87:47:9d:a3:57:6c:bf:4b:10:c9:
                    3b:7a:aa:a9:10:40:2e:af:34:02:87:5c:99:8e:5e:
                    8e:40:82:99:87:94:fb:21:34:75:9f:52:17:0e:eb:
                    f9:1a:99:ae:15:1a:cc:ca:5c:2b:0f:d9:43:64:52:
                    5c:dc:01:6d:1f:38:3d:77:80:50:1b:b7:26:d9:94:
                    89:62:b5:c7:ec:19:af:9c:62:e5:7d:94:08:be:f2:
                    72:8c:19:8c:d1:5c:e3:ba:ca:b7:03:9a:c0:26:4d:
                    6f:97:42:fd:7a:c0:50:db:48:ca:3d:1c:48:d5:bf:
                    f4:7a:f4:d7:bc:41:11:a2:63:5d:a6:78:5b:ce:43:
                    b7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:EB:AD:9D:0D:12:A0:17:E9:B2:35:5B:15:36:A3:8D:6B:94:68:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/fece6d23-3692-3722-9856-2c02a2a5db09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:93:f7:e7:ac:a2:0a:0e:b8:c7:b0:95:72:22:f2:62:40:80:
         63:41:49:b3:82:66:c0:64:aa:71:da:5a:41:28:7d:38:63:4b:
         97:65:ea:10:eb:3e:25:31:0c:bb:97:23:9c:b5:17:00:dc:25:
         2a:f8:71:e1:2d:16:89:1a:cd:bc:74:35:ff:61:b7:f9:35:85:
         14:42:4c:b2:4f:cd:83:02:57:7b:4d:a3:27:d2:5a:89:5c:4a:
         c5:08:39:0d:94:f2:cb:5b:38:1b:58:f0:aa:ba:6b:90:a9:61:
         b8:a4:18:87:e4:aa:f7:39:a9:9f:73:49:3c:dc:1d:0c:0f:c3:
         3a:f0:eb:b8:74:6b:33:eb:5c:3b:56:b3:34:a6:cd:fc:c0:62:
         10:cf:c0:14:09:b8:c9:b2:26:f2:2b:a8:93:03:c0:13:44:88:
         be:26:56:1e:ee:27:4b:fd:85:bf:af:b1:91:3c:dd:ca:ff:74:
         6b:d2:a4:fa:eb:a8:00:11:cd:f5:45:52:0b:0e:8e:b6:9b:72:
         a5:d4:77:c0:20:bb:50:e2:c1:ba:b3:fb:5f:07:3f:84:cc:95:
         42:09:5c:9c:c8:16:36:7e:f8:ec:aa:95:45:e7:b5:c3:ad:72:
         5e:ad:b0:da:dd:71:7f:2a:86:e3:7f:19:36:6b:bd:c9:ad:5d:
         eb:fa:80:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:18:27 2025 by rpki-client