Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/05ff12ba-9ccd-39d6-9c61-6f44daa2edd7.roa
File:                     05ff12ba-9ccd-39d6-9c61-6f44daa2edd7.roa (raw, json)
Hash identifier:          aulOxH+K/1V5F7ef+joyF+NHmU1Orbl4JLOeVe6YgM8=
Subject key identifier:   1A:22:7E:EF:0B:77:3D:88:E6:0D:47:9A:72:CC:A4:9C:55:92:76:FA
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B0CDC063659189F9DF7CA0CA0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/05ff12ba-9ccd-39d6-9c61-6f44daa2edd7.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     21859
IP address blocks:        107.151.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:06:36:59:18:9f:9d:f7:ca:0c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=6935eeec-4e3e-49ab-a03d-5bbb41a74d45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d9:ea:c6:26:49:1b:bf:8f:2c:04:2e:d5:42:
                    65:e4:19:dc:f2:eb:29:73:58:27:7f:ad:21:00:40:
                    92:b0:56:ca:45:e6:a9:1c:14:67:a8:27:7e:d1:1d:
                    d3:3a:e0:4f:1f:0d:8f:f3:bb:95:72:bb:a0:d0:4b:
                    da:7d:78:1d:3f:0f:da:52:73:7f:da:30:84:fd:db:
                    fc:cc:dd:b7:f9:68:ad:44:71:e0:a2:63:46:5d:d0:
                    8c:78:ca:e9:2c:64:da:07:05:88:29:eb:8e:19:d7:
                    03:29:d5:23:a6:1d:00:45:a1:2a:a7:53:8d:13:b4:
                    01:fe:9e:81:63:f4:c4:d0:62:ad:fd:cf:22:09:04:
                    d7:85:86:a2:70:12:30:35:41:e5:13:f4:1b:7d:c1:
                    77:b2:cc:7b:cf:ba:08:be:c5:27:49:64:ee:0d:35:
                    c5:da:c4:a6:98:43:fd:8e:78:1c:b4:a6:aa:f4:fd:
                    91:84:d5:51:df:06:b9:8f:c2:09:29:f3:1d:b3:7b:
                    dc:57:2b:6a:05:8d:fc:7a:97:15:64:e7:a0:01:d3:
                    9e:f2:ee:07:1b:51:8e:7e:bc:ca:46:f6:3c:06:b3:
                    c5:d7:10:19:c6:a7:00:95:88:59:6b:b6:1d:86:9e:
                    5e:76:c6:e6:7d:e4:34:ea:d0:f8:57:48:33:6b:9e:
                    13:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:22:7E:EF:0B:77:3D:88:E6:0D:47:9A:72:CC:A4:9C:55:92:76:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/05ff12ba-9ccd-39d6-9c61-6f44daa2edd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e9:50:57:22:17:f2:b4:ad:6b:77:24:59:d6:5c:eb:f1:93:
         7f:10:e6:36:74:a9:14:3a:39:71:65:60:bc:35:82:cc:32:70:
         e5:10:15:1b:a5:da:df:9e:03:a7:e4:d6:86:6b:08:4c:06:98:
         c9:12:5b:5f:31:aa:73:a1:66:77:1d:7c:94:40:0e:76:35:45:
         ff:8e:3f:8e:96:54:05:55:02:5e:c3:17:46:18:c6:1f:b7:54:
         00:09:a1:9c:20:7c:37:bb:71:a6:e9:95:6f:bf:04:54:3a:95:
         8e:58:91:26:b5:24:7c:f6:d8:b2:23:d4:e6:05:c6:d7:f4:77:
         31:06:78:16:e0:a4:79:ad:1c:45:5a:97:91:57:db:09:e8:ad:
         e8:1d:72:4d:a6:ed:12:15:1e:ac:80:33:fb:a7:50:77:e8:7d:
         69:e0:b6:71:49:56:43:63:dc:95:ad:7c:f8:52:dd:71:5d:46:
         db:52:7e:b9:b0:78:33:fb:42:69:8c:2a:19:e0:ea:31:20:6b:
         24:51:0c:0f:5e:7e:f0:00:fb:40:fd:dd:64:29:74:c1:c0:81:
         7e:c8:9a:56:96:55:8c:4f:7a:de:c3:45:4a:a3:e8:37:cb:6d:
         28:af:a5:e7:e4:aa:f2:0f:4c:17:fb:0c:c8:86:79:15:a7:4a:
         18:68:f5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:38:57 2025 by rpki-client