Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1735176b-ae6e-4184-847d-f070ffc64102/47d13c57-92f4-33dd-ac9e-7055294e35d4.roa
File:                     47d13c57-92f4-33dd-ac9e-7055294e35d4.roa (raw, json)
Hash identifier:          /xLRbUsogbDw2lucpscCeLs6GfQTGFt1ChSMq0ArmOw=
Subject key identifier:   C3:96:D4:1C:06:62:B8:5E:2B:6F:4A:96:BE:6F:71:62:C4:92:FF:1F
Certificate issuer:       /CN=1735176b-ae6e-4184-847d-f070ffc64102
Certificate serial:       010D0C9F4328584B0FA6BC3D9E8C4663192C7340
Authority key identifier: FB:A9:D6:66:61:34:50:60:EB:23:EB:AA:82:15:EC:37:06:67:AF:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1735176b-ae6e-4184-847d-f070ffc64102.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1735176b-ae6e-4184-847d-f070ffc64102/47d13c57-92f4-33dd-ac9e-7055294e35d4.roa
Signing time:             Tue 02 Sep 2025 13:00:42 +0000
ROA not before:           Tue 02 Sep 2025 13:00:42 +0000
ROA not after:            Mon 01 Dec 2025 14:00:42 +0000
asID:                     805
IP address blocks:        140.235.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1735176b-ae6e-4184-847d-f070ffc64102/1735176b-ae6e-4184-847d-f070ffc64102.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1735176b-ae6e-4184-847d-f070ffc64102/1735176b-ae6e-4184-847d-f070ffc64102.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1735176b-ae6e-4184-847d-f070ffc64102.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:a6:bc:3d:9e:8c:46:63:19:2c:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1735176b-ae6e-4184-847d-f070ffc64102
        Validity
            Not Before: Sep  2 13:00:42 2025 GMT
            Not After : Dec  1 14:00:42 2025 GMT
        Subject: CN=daf16a75-05b7-4c1f-a607-8ae28176ca2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:28:f6:2a:50:61:46:90:f0:92:23:2a:2c:24:
                    7f:04:32:95:99:06:12:d1:37:4e:bb:17:eb:b1:17:
                    b4:0e:5e:ce:52:80:df:38:b1:bc:37:75:f1:83:57:
                    58:af:f5:33:e4:31:4b:d0:aa:8b:de:9c:fc:c9:20:
                    0f:2d:ae:50:62:4b:99:19:57:17:9f:a7:a3:27:07:
                    b4:5d:34:6c:92:22:2a:a4:6c:b4:d4:92:51:d8:99:
                    8d:00:a2:d5:46:11:e3:e4:16:a1:10:61:96:ba:b8:
                    71:aa:c8:9c:29:3e:29:dd:a5:5d:01:06:d1:78:0c:
                    34:da:b6:7c:25:b3:ba:47:66:5d:a6:a9:e6:9d:e4:
                    6a:c7:6e:68:66:6d:f3:fa:83:63:e7:3b:cd:e1:98:
                    92:72:34:a4:bc:14:64:e4:c6:9f:08:95:69:b7:93:
                    43:04:89:7c:09:0e:64:cf:e7:60:37:6a:f8:e6:cd:
                    26:1c:f2:49:0d:92:44:3d:92:7b:fb:c2:85:2c:0d:
                    ad:8d:e5:61:5e:82:08:46:17:dd:bc:a3:c8:2a:fd:
                    9f:94:ba:66:52:d9:00:94:5c:80:b8:8a:b4:db:6c:
                    65:d4:ab:e0:71:17:2c:c5:7b:dc:0a:f4:05:c0:46:
                    cb:20:02:99:f7:8c:65:df:54:b3:04:0f:60:43:5c:
                    45:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:96:D4:1C:06:62:B8:5E:2B:6F:4A:96:BE:6F:71:62:C4:92:FF:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1735176b-ae6e-4184-847d-f070ffc64102/47d13c57-92f4-33dd-ac9e-7055294e35d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1735176b-ae6e-4184-847d-f070ffc64102/1735176b-ae6e-4184-847d-f070ffc64102.crl

            X509v3 Authority Key Identifier:
                keyid:FB:A9:D6:66:61:34:50:60:EB:23:EB:AA:82:15:EC:37:06:67:AF:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1735176b-ae6e-4184-847d-f070ffc64102.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:20:e4:ec:e2:68:7e:a4:dd:7a:a6:07:5d:68:a9:dd:32:23:
         df:b7:97:f5:53:d2:df:bf:94:45:3b:a7:ae:a9:17:bf:56:22:
         95:6d:72:ca:a7:19:6f:33:53:aa:59:be:8b:7c:16:ef:2f:68:
         80:7b:07:f9:2c:c4:2e:d9:5b:7e:38:7c:3a:5a:a4:a0:ad:ad:
         51:51:32:8f:72:9b:4a:a5:7a:2e:39:3d:85:fe:ab:7f:37:e4:
         55:b2:6d:0d:17:b5:4e:a4:64:6c:e2:fe:fc:bb:6f:d1:ae:70:
         94:12:36:a4:30:d7:e8:2f:a0:86:eb:08:a0:b2:c5:1b:95:07:
         59:01:ef:67:03:91:19:80:90:31:d5:c6:cb:81:30:a7:5c:fd:
         2d:a3:09:4e:c3:d3:f2:7d:66:0f:ae:ba:c1:75:89:d3:2b:c9:
         61:ba:24:cf:9f:02:33:01:f6:35:a0:16:cd:b5:44:f7:e1:56:
         3a:36:cb:5f:af:eb:e5:c3:0d:9a:fd:71:c4:56:62:db:f6:fe:
         7e:d7:c3:dd:a2:46:f1:d0:3d:bc:1a:6f:b6:fe:cc:65:5a:79:
         f9:41:99:d9:ca:ca:8a:17:3c:88:ae:45:f2:2c:43:e0:7e:39:
         0d:07:49:fd:53:55:d6:4e:38:5d:76:1e:1b:9d:c0:bd:b6:f3:
         af:8b:91:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 09:08:33 2025 by rpki-client