Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/176ba803-b4f1-3a57-804d-e734d0c025da.roa
File:                     176ba803-b4f1-3a57-804d-e734d0c025da.roa (raw, json)
Hash identifier:          ZuUkxboZqhLHZ9h9RiDWrQFUgtmNB7QV+MsfVL5rI+A=
Subject key identifier:   98:C5:19:CD:0C:8F:50:A9:78:E8:6D:7B:E6:61:A4:1B:00:45:29:0A
Certificate issuer:       /CN=8c1fd14f-b5c3-441f-b09c-daae2ec42472
Certificate serial:       010D0C9F4328584AC0164950658602E16232E9C0
Authority key identifier: D0:32:A7:BF:80:A5:6A:85:3A:38:F5:82:6B:F7:2D:DA:BD:7F:7D:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/176ba803-b4f1-3a57-804d-e734d0c025da.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     14618
IP address blocks:        136.175.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:49:50:65:86:02:e1:62:32:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c1fd14f-b5c3-441f-b09c-daae2ec42472
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=46b62619-3cc9-42e8-9032-20903704da01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:08:ab:90:e2:c2:52:61:62:29:8c:5b:fb:9c:
                    16:3b:f4:ce:fe:ec:12:8a:6b:7a:23:9e:1f:67:3e:
                    03:8f:ad:4e:9a:48:97:9a:c1:98:64:0e:10:99:de:
                    50:0a:fa:80:76:6d:eb:21:8c:75:70:90:10:b8:bc:
                    b7:67:d8:ed:24:84:8f:c4:d9:de:47:f2:ad:4d:33:
                    15:5b:8e:a6:61:7e:fd:34:42:13:41:3a:14:85:25:
                    81:3e:0b:fa:b2:9b:1e:2f:73:33:d7:f3:a5:c4:d2:
                    67:ad:b3:43:73:d9:3b:8e:dc:ad:2d:ad:28:c2:ef:
                    9a:b8:d6:3a:2f:c1:2d:02:9c:cd:20:6c:bc:d1:42:
                    12:2b:e3:6c:ef:1d:71:0d:ac:9d:37:17:5a:d7:bf:
                    b7:e8:37:4a:53:05:7d:5d:e2:3a:61:21:98:4c:f7:
                    a7:7f:6c:8c:3d:b4:a1:74:63:18:4b:2d:8d:ab:24:
                    a6:55:2a:8f:31:d7:36:1f:de:00:c8:0c:01:4f:a3:
                    f7:16:6d:63:c6:45:57:c9:fc:10:13:1d:5f:5b:fc:
                    0b:33:38:01:92:70:39:c0:9c:01:f3:90:2f:2a:f8:
                    6e:40:ca:c8:0c:7d:b3:06:e4:fe:b4:30:8d:db:3a:
                    a9:e1:dc:87:fd:84:96:9d:12:b2:89:39:b8:96:e9:
                    d0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C5:19:CD:0C:8F:50:A9:78:E8:6D:7B:E6:61:A4:1B:00:45:29:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/176ba803-b4f1-3a57-804d-e734d0c025da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.crl

            X509v3 Authority Key Identifier:
                keyid:D0:32:A7:BF:80:A5:6A:85:3A:38:F5:82:6B:F7:2D:DA:BD:7F:7D:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:75:01:5d:72:ff:5a:76:af:7f:a0:b7:e4:25:d7:d1:03:74:
         e7:b2:2a:19:04:73:c0:31:d3:7d:c6:41:2f:be:05:fc:23:c7:
         da:c7:7d:04:d9:3a:8a:87:5f:0d:d9:04:d5:16:08:e9:7d:a1:
         5d:f1:f6:08:c8:d6:39:8f:aa:71:4f:66:91:91:cc:82:57:00:
         35:f6:c4:53:47:b7:1c:ab:46:f0:dc:5c:5a:9d:60:a4:89:b4:
         92:50:d2:1b:b2:0e:9d:a2:a9:45:70:77:70:36:17:7c:53:1c:
         4a:c7:1e:fa:57:08:f3:65:d0:28:7c:8c:e0:31:b9:f6:7d:ae:
         7e:73:a0:91:7b:f6:80:70:4d:88:a2:89:3f:6e:8c:4e:52:3a:
         8f:f2:d2:16:e6:6d:8a:5d:0a:53:99:c3:81:d5:ba:57:dc:8a:
         63:a6:45:05:ce:cb:57:f6:fd:44:bf:34:8d:49:49:f4:95:2b:
         6b:d4:41:af:8a:84:1c:f3:65:18:a9:4c:b8:da:0d:0b:a2:fa:
         1b:45:e5:ef:d0:d0:1b:ab:c6:db:6c:ac:cc:78:9e:df:50:4d:
         d7:be:d0:3a:df:60:d2:e8:b1:6e:1a:08:73:0a:95:46:82:e4:
         00:2e:95:51:e2:59:5b:85:13:48:69:00:fa:91:4c:45:a8:52:
         93:b5:0c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 08:13:39 2025 by rpki-client