Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a02e95c8-5864-3965-9718-49c9cc5a7cb0.roa
File:                     a02e95c8-5864-3965-9718-49c9cc5a7cb0.roa (raw, json)
Hash identifier:          m0qc/9QtpMZTznDNEiJZ8vdoRUv6ONtvx4WYEfUncI0=
Subject key identifier:   78:B6:C0:43:F2:04:30:09:32:8C:85:77:D4:77:C7:06:D4:AB:BF:DA
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F4328584B4081CCCBFC0AAA2EC46D7300
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a02e95c8-5864-3965-9718-49c9cc5a7cb0.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     19165
IP address blocks:        173.247.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:cc:cb:fc:0a:aa:2e:c4:6d:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=e0f80a49-b5a2-4d20-93e1-61d7fbeff6fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:65:b1:bb:fa:70:25:27:90:4c:58:a9:02:37:
                    84:ed:3c:65:49:58:2a:5f:59:01:78:61:d3:dc:81:
                    f0:76:1b:3a:7c:92:c5:a9:13:7c:3f:41:a2:28:63:
                    29:75:b0:74:93:a9:de:ec:01:16:c0:27:06:3b:f5:
                    03:6a:96:b4:f2:6e:78:6e:f2:81:e4:4c:64:3b:61:
                    3d:dc:67:2a:00:34:28:f4:93:43:39:00:56:77:b6:
                    da:1f:3f:2b:e7:c9:78:db:2d:37:4a:ff:2c:ce:de:
                    3b:52:41:15:f0:b5:7d:f1:c6:d0:5c:80:28:9b:b7:
                    72:5e:de:10:c6:65:8c:bb:18:a6:fe:69:27:b0:a0:
                    3f:a6:a8:50:4b:e4:85:04:e4:40:e1:95:f9:a1:f2:
                    f9:29:49:5d:58:1a:b6:8b:49:53:5e:3e:b0:4f:c4:
                    b5:db:bf:80:1d:9d:85:c3:26:3c:77:5f:0c:98:64:
                    47:65:7c:fb:e3:35:70:6c:79:64:19:9f:a7:13:79:
                    c2:51:58:0d:39:1d:95:86:7f:45:5e:47:29:3a:14:
                    3b:f8:3c:51:b8:e7:2b:f8:17:30:5f:fc:a5:d3:a0:
                    c7:ee:02:e6:eb:fe:97:0a:60:74:e3:54:43:d2:5a:
                    66:9a:74:c5:55:49:48:b3:aa:c2:3b:65:77:58:56:
                    14:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B6:C0:43:F2:04:30:09:32:8C:85:77:D4:77:C7:06:D4:AB:BF:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a02e95c8-5864-3965-9718-49c9cc5a7cb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:d5:e7:10:25:d1:aa:1d:c3:1c:a0:d6:ad:a3:00:a4:78:86:
         40:02:5f:7f:f3:eb:6f:b6:ca:34:2b:c5:85:93:53:c4:b4:ec:
         75:fd:6c:e5:78:c5:ae:c2:5a:8e:5b:e4:e2:93:ff:17:41:8c:
         e5:2e:37:0a:a5:7a:fe:1c:0b:1b:64:f6:05:10:f9:c9:11:09:
         fd:aa:f1:9c:dd:45:e9:53:ba:83:3c:1e:f4:ba:d8:c5:47:81:
         a3:7c:31:66:3f:87:2e:63:64:5c:64:b0:56:18:54:cd:22:67:
         fd:4e:1e:f2:c3:8c:34:25:f0:ef:fa:9a:dc:81:11:7c:51:60:
         1d:bf:e2:5f:19:94:52:82:b7:d1:d3:57:1d:fd:74:00:1f:a6:
         23:28:0d:72:d9:6b:a3:aa:59:67:a7:49:6b:f3:90:25:d9:f9:
         ae:fa:35:da:86:82:19:fe:97:7e:f1:12:c9:1c:64:6e:a6:c7:
         1b:8d:fb:03:85:15:33:6a:5b:79:a0:69:63:f5:f1:2c:80:c8:
         7a:59:33:b1:63:26:2e:bc:43:df:89:95:77:98:4a:5f:e1:3c:
         24:3e:19:9c:14:0a:82:4a:60:70:46:29:7a:87:25:7c:fa:b2:
         3f:86:a5:e5:22:fa:62:7f:c9:0d:0b:4e:b0:db:02:97:f2:64:
         60:e0:10:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 16:19:31 2025 by rpki-client