Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/42774cc5-f493-3b45-87ec-2ece7a3128b4.roa
File:                     42774cc5-f493-3b45-87ec-2ece7a3128b4.roa (raw, json)
Hash identifier:          QO7CEHNPQ3rGDkuS4s765BgqKRxvfzc7ZLOxCurCbuQ=
Subject key identifier:   74:64:A1:3C:B4:AC:39:BD:9A:63:2E:FF:21:DD:0E:CF:25:37:EA:39
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F4328584AE2FBC688A6E78E7E83E4FF80
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/42774cc5-f493-3b45-87ec-2ece7a3128b4.roa
Signing time:             Sun 17 Aug 2025 13:00:41 +0000
ROA not before:           Sun 17 Aug 2025 13:00:41 +0000
ROA not after:            Sat 15 Nov 2025 14:00:41 +0000
asID:                     834
IP address blocks:        173.249.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e2:fb:c6:88:a6:e7:8e:7e:83:e4:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Aug 17 13:00:41 2025 GMT
            Not After : Nov 15 14:00:41 2025 GMT
        Subject: CN=e2b3486d-f3e0-4489-a7b7-c922b398c9c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bf:b7:a3:e4:34:1f:8d:90:3d:ce:65:7e:9b:
                    9e:22:9d:9e:c3:be:d3:ca:d8:b0:d4:2b:69:ef:2f:
                    9e:3b:18:3e:95:18:2a:ac:8d:1b:3c:9e:91:27:f1:
                    2e:e8:55:3c:a9:e1:8e:b6:91:91:db:3a:97:e4:21:
                    d3:4d:21:be:27:81:ae:57:33:20:c9:66:5c:fe:e5:
                    10:da:70:cb:e2:28:4c:7b:f4:85:a3:8c:f1:68:5d:
                    a4:80:45:11:7d:a4:c1:8e:e1:a5:f0:8b:e9:58:06:
                    18:41:c3:fd:0c:c3:43:57:7b:72:5b:5f:42:05:fa:
                    a2:75:5e:98:d8:5f:6b:48:06:f8:e7:8e:7a:e5:a6:
                    6d:ac:1f:b5:8b:f3:24:e0:af:b0:da:af:af:59:61:
                    20:b2:20:d0:7d:a1:13:e0:5f:dc:6b:6a:6b:2d:bf:
                    01:01:74:df:a5:12:61:bd:33:29:cc:f3:35:d9:7c:
                    3d:7b:3f:cd:73:86:cf:d1:d0:a7:82:e2:f9:50:6c:
                    f7:63:77:56:81:97:52:86:a5:0b:72:df:21:67:e8:
                    48:a7:07:bd:a9:53:50:a9:fb:0d:cf:9a:a4:0d:5d:
                    58:3b:00:b9:78:c7:21:43:5b:34:04:36:c6:30:54:
                    94:ac:21:c7:29:f5:1d:f4:f5:5e:b7:da:39:a8:69:
                    03:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:64:A1:3C:B4:AC:39:BD:9A:63:2E:FF:21:DD:0E:CF:25:37:EA:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/42774cc5-f493-3b45-87ec-2ece7a3128b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e1:2d:b7:67:aa:21:7b:89:e0:0b:4c:d3:e0:58:57:a6:57:
         1b:24:19:9b:41:f3:71:f1:96:82:a5:60:61:d6:92:1e:3e:39:
         09:6f:27:c1:eb:87:8b:47:6b:cd:68:b9:49:d1:0b:79:23:9e:
         e3:d8:f3:7f:bc:16:23:e5:fe:88:b6:f0:66:3a:c1:55:d0:ff:
         2b:4a:42:b8:51:bb:83:27:9f:10:ef:12:ad:ec:79:bf:cd:49:
         e3:53:9b:38:77:77:91:14:9f:a9:c5:01:84:9f:2c:88:7a:2c:
         ff:b4:a3:b3:6c:5a:59:26:77:bc:ec:34:07:f1:b5:a4:02:79:
         67:f8:2c:99:62:f5:4a:d9:96:7f:b0:cd:02:1d:31:c2:3c:96:
         10:0c:9b:b3:08:35:da:87:d3:4a:66:87:3f:5b:46:c0:5b:22:
         03:5b:c8:13:f3:df:2a:e5:58:7b:69:dd:42:c1:b8:43:70:5a:
         30:0b:a1:11:1e:f2:36:a2:0a:4b:43:c9:62:e2:90:0f:c5:d9:
         7a:16:fb:52:ba:eb:74:82:8c:ee:e0:4e:07:52:32:fd:92:33:
         6e:83:ee:41:72:ca:79:59:97:55:a8:a2:14:f1:c8:9b:b8:34:
         8e:a9:80:1a:25:2e:e6:b9:2a:9a:ae:09:04:c7:12:84:38:a8:
         0d:bb:bd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:41 2025 by rpki-client