Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2b20bbe5-b7e5-34c7-b2c2-7d08ed829f96.roa
File:                     2b20bbe5-b7e5-34c7-b2c2-7d08ed829f96.roa (raw, json)
Hash identifier:          T2Qqix/qeHZAp+3F4G/sK/g+5iVeVsRxf3lU7YLdrCk=
Subject key identifier:   1E:25:34:E5:99:E5:F4:B9:F6:4F:79:08:77:2F:69:C3:3B:BA:98:2E
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B5B0734F45D25D74437435180
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2b20bbe5-b7e5-34c7-b2c2-7d08ed829f96.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     852
IP address blocks:        173.181.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:34:f4:5d:25:d7:44:37:43:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=e37412f9-515b-4ada-b5d9-e81b194ad50a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:5b:bc:eb:4e:9b:9d:19:6e:bc:f6:4f:02:
                    a9:ed:c6:dc:bf:da:d2:b4:54:a7:60:4f:fd:43:9e:
                    5e:e2:67:6c:aa:28:34:79:8a:fc:eb:bb:04:ff:ec:
                    6e:66:45:7d:cc:51:62:84:2f:3a:6b:b8:44:65:1c:
                    11:15:38:14:11:80:3b:57:b9:e5:82:f2:93:5f:59:
                    7f:1f:19:0a:1f:07:7d:03:0b:f4:97:af:02:44:11:
                    07:11:6b:4f:29:f6:3e:07:95:6d:b0:e0:6f:a0:54:
                    c6:36:12:da:97:fb:92:e5:67:4b:3e:89:14:17:c3:
                    79:9a:92:22:9a:e7:f7:3c:8c:f3:e4:2d:90:c2:d3:
                    e4:5b:fc:d1:9e:42:12:72:b0:5e:58:17:d3:4a:0a:
                    01:cc:b5:a6:65:eb:10:a2:bb:0c:00:ca:ac:36:6b:
                    dd:ae:6b:1f:4d:0a:37:87:f4:6f:0a:d6:e8:f6:ac:
                    ef:f6:b1:b1:f8:81:6f:35:82:3c:4c:fa:68:95:14:
                    e5:15:60:7c:36:ef:a4:43:de:5d:fe:99:c3:eb:19:
                    79:7e:1f:8f:4e:a3:09:26:c1:7c:ee:40:9e:54:1e:
                    6b:ee:58:f4:ca:36:02:67:c0:85:39:b2:5b:36:24:
                    3b:a5:4f:11:5e:4b:cb:7f:4f:b9:e3:ad:39:1f:28:
                    12:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:25:34:E5:99:E5:F4:B9:F6:4F:79:08:77:2F:69:C3:3B:BA:98:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/2b20bbe5-b7e5-34c7-b2c2-7d08ed829f96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.181.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:32:13:0b:26:0a:cf:92:ac:0d:2c:0e:28:43:11:48:35:3c:
         e1:ec:24:71:fd:ab:2f:d4:6e:b7:f3:75:5d:d0:95:3a:58:d9:
         44:dc:36:39:91:cd:7a:d9:53:72:9e:89:8a:b9:62:38:6f:f9:
         7b:2b:75:ad:49:de:7f:37:cc:ae:c1:3b:31:cd:49:54:1b:36:
         89:bf:cf:ea:48:66:59:84:ef:c7:7b:93:9b:38:72:f5:e3:4c:
         44:1a:2f:ee:3b:0c:37:e4:7f:12:f4:bf:10:e9:5b:d0:a2:e7:
         25:33:51:b5:5f:61:ec:9f:d2:2e:60:e3:ee:7c:f9:a9:86:97:
         93:94:17:44:35:f0:27:8e:54:62:a0:2e:8e:f9:45:12:1a:46:
         f4:3c:b0:72:ce:27:1c:ae:86:2c:dc:17:09:0c:b8:e6:4d:da:
         9b:77:b8:08:33:e5:62:d4:b8:d9:af:07:b8:3a:8b:13:ef:91:
         c5:06:1b:69:6f:a9:38:71:03:7a:c8:64:99:2e:26:00:59:ad:
         25:ca:d5:40:66:d4:90:3b:9c:64:8c:9f:80:62:34:0e:e9:8b:
         4b:f9:fe:f4:9e:7e:50:a1:cd:94:5b:ed:ef:1f:cb:60:11:2c:
         aa:86:5e:58:a3:1f:ab:94:6e:b3:65:3f:ac:4c:7c:a3:90:3d:
         57:c1:58:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:14:20 2025 by rpki-client