Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3457cbf8-275f-3daa-96d5-6ee8d534386e.roa
File:                     3457cbf8-275f-3daa-96d5-6ee8d534386e.roa (raw, json)
Hash identifier:          GdPOekjumP1RaWta/EuuY78710XO+O1VpuV436NWB4c=
Subject key identifier:   B1:B5:FC:90:83:48:61:0A:27:0C:4D:45:EC:75:90:20:EB:3A:2F:2A
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B5B07377B195514EE2300B200
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3457cbf8-275f-3daa-96d5-6ee8d534386e.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     852
IP address blocks:        137.186.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:37:7b:19:55:14:ee:23:00:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=54c53395-7607-438f-8b56-b473b7be34ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5f:9e:e6:40:3a:d8:9d:14:20:7e:c1:25:f4:
                    14:8d:a9:43:4d:52:64:48:4e:8e:99:e6:5d:d7:a8:
                    0b:76:02:f1:67:ba:d9:76:4c:af:7c:1c:bd:b5:9a:
                    18:df:7c:37:cf:25:4e:81:dd:a1:83:a5:58:e8:66:
                    98:e5:a5:f1:1d:1b:cc:7c:26:2e:76:3e:96:47:ed:
                    af:ae:9d:10:38:d7:5f:25:32:73:3d:11:3d:e4:73:
                    04:06:ec:98:d5:82:77:82:da:bb:69:f8:0e:1c:13:
                    15:01:95:9c:42:4c:59:e0:02:8d:3f:d6:a1:4d:02:
                    22:4c:4b:82:16:cf:1c:b9:99:96:2b:18:1b:d8:fa:
                    fe:52:5f:5e:e9:2d:43:fd:51:23:7d:c9:00:d7:c1:
                    a3:e2:2b:da:c2:89:26:42:92:7c:fa:f3:9c:4a:a3:
                    6f:fc:33:81:b0:9d:a0:e2:87:31:ab:c4:77:4d:c4:
                    56:1c:90:73:84:62:41:4b:31:ed:58:24:76:2a:18:
                    64:88:9d:e2:d3:63:c0:25:5c:af:27:4b:ec:2d:b5:
                    b7:70:5a:e2:8d:ac:dd:59:7b:0f:b4:73:46:c1:71:
                    1d:0c:89:c9:eb:01:a2:0d:f0:00:a5:44:c6:51:9e:
                    09:7a:86:61:92:a9:88:44:1f:8e:a2:3a:5c:62:0f:
                    7a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B5:FC:90:83:48:61:0A:27:0C:4D:45:EC:75:90:20:EB:3A:2F:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3457cbf8-275f-3daa-96d5-6ee8d534386e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.186.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:22:42:02:04:09:49:2e:d9:3b:dc:ae:a4:87:19:f3:42:df:
         04:7e:b8:6f:2e:42:03:9c:d9:af:e7:85:31:db:e3:bc:35:3d:
         fd:03:a9:1c:e3:4b:a7:08:00:30:b2:6a:06:62:8d:e7:9f:bb:
         4b:2d:bb:e7:87:c5:df:85:8f:a1:dd:7d:41:28:bc:df:1e:2c:
         c0:38:d6:0b:19:2f:98:d5:71:92:12:8b:9a:5e:6d:63:1b:92:
         35:d7:52:78:ba:7c:4a:2a:bf:a4:de:da:2a:d7:59:ac:46:db:
         94:5a:8a:ec:ac:02:f1:9b:ce:a0:5f:71:08:bd:0f:c8:b4:50:
         88:41:42:09:a5:a7:45:64:b2:ae:e5:b2:58:a7:9d:b1:37:77:
         4a:fb:b5:d8:f9:26:79:38:00:2a:92:3b:1d:99:d5:3e:e9:d6:
         50:39:32:20:35:fb:ef:62:2e:43:68:f9:cb:44:29:31:32:6e:
         23:32:c6:c5:3a:91:32:c7:7e:5a:c3:88:cb:63:56:3d:b1:50:
         4a:56:84:1c:f9:23:9d:89:f7:08:50:e2:f2:5d:48:54:c2:26:
         81:15:fd:25:9a:b0:19:f8:3e:03:d8:d9:b3:59:02:fa:b3:14:
         02:6d:5c:67:82:f5:82:08:3b:0b:5b:25:83:3b:b2:96:69:29:
         4a:99:c7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:35:55 2025 by rpki-client