Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/57c94393-53c9-31b4-ada3-f1670b12b72f.roa
File:                     57c94393-53c9-31b4-ada3-f1670b12b72f.roa (raw, json)
Hash identifier:          ztm8t3N8GKFb2o/NEMu+yseX9nu4hRkkGfzoByHdOP0=
Subject key identifier:   C9:84:B6:CE:1C:52:2E:10:77:7A:CA:34:7C:48:71:5E:15:0F:DD:9B
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B5571D0A9B0C0FA488B661A40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/57c94393-53c9-31b4-ada3-f1670b12b72f.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     852
IP address blocks:        192.197.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:d0:a9:b0:c0:fa:48:8b:66:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=7982cb8f-c472-417d-83dd-b249d64b3f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a9:fb:64:1b:7e:71:fe:1a:7b:da:f7:78:fa:
                    76:1a:d2:ad:28:ce:8c:48:bb:4a:69:86:e0:3e:c8:
                    60:46:d6:b3:f8:4d:c4:10:2d:2c:91:03:ca:e0:e4:
                    78:9c:b2:d1:9d:d1:30:c5:58:ce:d3:91:53:5d:94:
                    13:b6:f2:5d:c0:6b:28:63:aa:c6:65:2e:e4:92:85:
                    2f:8d:08:69:e1:53:69:e6:f9:6a:c0:b6:12:8a:1b:
                    31:91:e5:ea:27:64:53:29:3b:5a:a7:20:b3:64:fc:
                    1c:43:f8:f4:70:14:37:65:bb:90:df:7d:15:84:f1:
                    6d:8f:f2:31:af:91:4d:1a:c1:32:b9:ae:5f:2d:1a:
                    2b:7f:37:a7:f5:3b:ee:ba:41:3d:da:f7:94:ad:15:
                    da:04:79:fb:91:39:72:56:aa:80:b4:9d:69:6d:82:
                    74:70:6a:94:73:d7:34:0e:2d:e3:43:14:a4:a1:db:
                    00:a5:76:21:bf:7e:2e:32:1a:b4:1f:0c:0e:3b:66:
                    bd:72:57:59:39:f5:3b:65:cc:d1:f6:e2:bd:01:72:
                    cf:ad:aa:c0:46:22:76:52:ef:f5:26:b6:69:16:4d:
                    54:b8:d3:9c:69:40:82:e4:62:9e:ff:07:06:64:75:
                    56:c7:21:3a:e0:70:54:3c:d7:e7:16:0a:b0:8f:71:
                    44:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:84:B6:CE:1C:52:2E:10:77:7A:CA:34:7C:48:71:5E:15:0F:DD:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/57c94393-53c9-31b4-ada3-f1670b12b72f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.197.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:b7:17:d6:eb:c6:77:d9:77:da:f0:a3:a4:2a:45:3f:61:5e:
         f2:81:06:86:b8:3d:04:5f:5f:71:25:3a:d1:cc:00:1f:89:a8:
         18:93:a3:67:7a:80:9c:b0:c1:01:3d:a0:30:33:2c:a5:7e:6a:
         db:8a:17:38:61:a5:b2:de:e8:2c:7c:be:c1:9e:f8:35:ff:d1:
         26:93:17:9c:f3:fb:7e:e8:94:b5:a0:83:39:a2:0d:97:f5:e3:
         0c:6a:9f:d5:90:6c:2b:9f:77:85:54:1a:3a:3d:9c:68:6c:01:
         96:65:16:b6:49:2a:f8:1d:74:18:8a:da:89:80:59:11:2f:8f:
         e2:99:4e:a8:69:a7:e6:c0:ce:47:6e:3e:ff:24:3c:7d:be:88:
         36:f0:5f:79:ce:cd:fe:54:a8:c2:b1:9e:b2:2e:19:cb:e5:87:
         19:93:b8:d9:82:bc:e3:8e:53:26:a1:f0:21:e4:da:7c:a5:2f:
         53:6d:61:08:7b:7e:44:4d:46:ef:13:5f:50:2c:64:88:b4:dd:
         2e:92:3d:38:01:ef:c7:5a:04:b3:7a:b9:ec:c2:27:0e:34:e7:
         8f:3b:09:57:a5:76:90:c9:1b:c5:0c:fd:34:9e:f9:af:dd:f4:
         e5:3f:03:e2:12:3e:a7:d5:ba:43:d5:d7:24:1d:46:4f:e9:bc:
         e0:53:d1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:10:28 2025 by rpki-client