Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cf0e8cab-b2c2-300f-8787-dd79f7157452.roa
File:                     cf0e8cab-b2c2-300f-8787-dd79f7157452.roa (raw, json)
Hash identifier:          ycalDvSUUypJ8BqC+XzTVlZIiXsnzINR6W2usCKI/JA=
Subject key identifier:   0A:5C:0E:0C:C2:A9:0C:27:8B:D5:FA:A0:64:69:5F:CA:FE:F1:D1:9B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B6A61EC412471BED8283CF200
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cf0e8cab-b2c2-300f-8787-dd79f7157452.roa
Signing time:             Sun 05 Oct 2025 01:00:32 +0000
ROA not before:           Sun 05 Oct 2025 01:00:32 +0000
ROA not after:            Sat 03 Jan 2026 02:00:32 +0000
asID:                     20115
IP address blocks:        173.40.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6a:61:ec:41:24:71:be:d8:28:3c:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:32 2025 GMT
            Not After : Jan  3 02:00:32 2026 GMT
        Subject: CN=7abc0f73-fd5d-4785-9376-7fadc7b9388d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:88:c3:b2:55:51:ad:4e:24:d1:3c:d7:76:18:
                    5d:2c:8e:7b:b0:c1:ba:d6:fb:fa:97:5e:a0:bd:d3:
                    7e:9a:87:32:0d:c8:64:89:e2:39:1a:fd:cc:ff:6a:
                    f7:4e:f3:4c:fd:7b:82:69:79:5c:c2:df:af:dd:17:
                    11:d8:33:8b:bd:da:9e:77:f3:b5:9f:a1:3e:a2:5f:
                    cf:4d:90:42:7f:1c:bf:33:e4:c5:d4:00:81:d8:d9:
                    a7:17:f0:9c:2e:9d:f3:5f:d8:bb:34:2a:03:4e:19:
                    c7:ba:58:c7:8a:69:d7:4d:ca:a2:65:37:6f:e1:d9:
                    62:25:1a:06:05:bb:97:ad:0b:bc:b2:19:5d:8d:b5:
                    02:de:cf:b0:25:fc:0a:0d:a0:dc:5b:ca:a2:46:4e:
                    6e:cb:39:06:60:35:3d:6f:af:9f:97:9a:b0:c9:82:
                    a7:00:9a:4b:e8:c5:8c:73:4e:36:a0:f1:66:52:ab:
                    b7:b4:b0:df:99:72:4b:b7:2a:33:67:e0:82:e3:48:
                    ea:c0:ba:3c:5f:9e:91:51:23:70:52:02:76:91:b0:
                    5b:67:14:f2:fa:88:c0:f3:23:1c:ff:d5:52:c4:14:
                    47:0c:52:01:8d:cf:80:2f:77:fa:dc:a8:5b:8f:ce:
                    49:a0:c7:19:76:b8:10:69:57:29:24:31:db:f8:f4:
                    d0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5C:0E:0C:C2:A9:0C:27:8B:D5:FA:A0:64:69:5F:CA:FE:F1:D1:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/cf0e8cab-b2c2-300f-8787-dd79f7157452.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.40.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:bb:03:76:da:72:cc:b8:ba:8c:0d:78:d9:58:65:3a:2d:24:
         94:ac:b1:2c:c3:20:49:57:c8:2b:44:39:84:07:6d:f5:4a:96:
         ed:4b:98:49:81:a3:58:39:30:0d:56:1c:87:3e:23:74:98:c1:
         87:a9:35:3c:0d:1b:7c:59:90:c6:5d:01:32:b2:26:1b:2f:fc:
         73:6d:ad:52:01:d0:c4:4d:fa:f6:18:f9:fa:20:d8:fd:92:8e:
         72:b6:61:ad:a5:3a:e6:c4:51:c3:83:5d:c5:c7:43:ed:d3:fd:
         ab:a8:90:a2:0e:76:f7:f1:9a:15:0a:99:fe:31:0a:a9:70:e6:
         71:f0:86:d1:f9:fc:b2:f8:0b:3e:82:7f:7b:6a:22:73:76:d0:
         0b:47:8e:01:df:44:2a:88:da:64:06:0d:7b:fb:df:06:50:69:
         9d:3d:a7:cb:cf:fa:ab:f2:18:24:6a:cb:a4:66:9b:12:29:5f:
         a1:12:7f:2c:0c:32:33:4b:ca:54:af:73:2c:3f:71:cc:d0:f6:
         c8:d4:f5:6a:3c:b2:85:9f:c1:77:43:37:11:9e:01:77:22:d7:
         8e:10:47:df:c0:05:28:be:c0:4c:9d:5f:43:b2:2a:06:dc:62:
         36:29:e5:bf:50:fe:65:b6:09:7a:ea:79:b2:15:14:82:e9:6e:
         3c:47:9d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:26:02 2025 by rpki-client