Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8112c748-a630-32cb-be77-846a36aaee6b.roa
File:                     8112c748-a630-32cb-be77-846a36aaee6b.roa (raw, json)
Hash identifier:          i6aQ0ycQhZx94wWLtu9EHcx2hF+lUsKC444AAinMNnc=
Subject key identifier:   2C:DD:1B:97:4F:20:AF:B9:24:95:24:6E:51:0C:50:EF:58:51:02:65
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B5141B7C39E01927DB151A000
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8112c748-a630-32cb-be77-846a36aaee6b.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     14663
IP address blocks:        72.25.232.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:b7:c3:9e:01:92:7d:b1:51:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=c7218fda-131d-4f62-a325-7b359c93e36f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9a:37:88:81:9d:f6:76:f8:6e:8a:8b:c8:49:
                    09:21:29:14:55:48:86:84:17:18:39:df:17:6f:9f:
                    1b:c0:63:c3:bf:56:1a:e8:99:7b:f4:3b:d2:46:14:
                    4f:3d:08:a5:d4:7b:51:ee:18:e7:02:62:91:53:88:
                    3d:49:81:5f:84:8e:6c:63:35:87:8d:6e:d9:48:16:
                    98:07:bf:2b:ce:bc:ad:d5:55:c3:24:17:eb:32:b4:
                    37:8d:d3:6a:7d:56:e4:8d:4a:c3:e9:9f:5b:6a:6b:
                    75:81:a9:fe:58:21:ac:a4:fe:b1:eb:b8:9e:c8:ce:
                    4d:a7:aa:50:09:09:83:ea:c9:b1:af:78:23:4e:1c:
                    dc:b8:86:4b:d3:5b:eb:8e:6a:16:38:b2:13:95:aa:
                    1e:72:4e:cf:73:69:4a:94:61:f2:ac:d8:52:e5:30:
                    5f:dd:b4:24:d7:69:78:af:ff:8b:9d:76:b3:7d:c8:
                    e8:f5:14:7f:37:68:a8:20:bd:b9:ef:ef:45:a2:ab:
                    f4:f3:3c:50:91:7e:29:d9:ad:c2:55:6c:9f:38:33:
                    99:b8:fd:f5:f3:fc:f9:fb:60:04:48:c1:e6:a7:be:
                    43:6e:e7:dd:25:3a:ba:d9:df:dd:c5:76:95:9a:98:
                    9c:76:b0:3e:2c:8c:cf:cc:d7:8e:4b:28:65:70:a3:
                    06:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DD:1B:97:4F:20:AF:B9:24:95:24:6E:51:0C:50:EF:58:51:02:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8112c748-a630-32cb-be77-846a36aaee6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.25.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:d3:f7:80:e6:e1:f9:ce:fd:28:4f:7a:93:a5:de:57:8a:e2:
         95:a1:e8:3b:6a:af:ff:79:c5:0e:69:0c:05:52:c3:67:6e:a7:
         4e:cc:17:d8:91:f7:c9:fa:93:2c:52:34:52:f4:1d:12:cf:e1:
         31:28:24:7b:19:f7:a5:ab:d0:36:fc:49:d7:b3:9c:41:e9:2a:
         0f:08:ee:64:a4:96:98:2e:9c:90:7a:6c:0a:c8:e7:6a:f8:a4:
         63:ed:14:0f:f3:f1:40:76:eb:68:3a:10:a5:ed:a7:e1:c4:77:
         e4:73:d0:d9:a5:b0:c6:48:80:17:e8:3e:df:61:77:d2:76:09:
         8a:42:f7:37:ce:5b:1b:24:55:57:4b:3e:5e:fc:eb:62:53:d3:
         1c:a4:e3:10:96:e0:c4:4e:3f:d8:bd:18:73:d9:0e:b0:c0:6d:
         7d:d8:3c:0e:06:2a:9f:ee:cb:39:f5:7d:2e:81:50:89:53:8d:
         8a:96:26:b4:1e:57:20:9b:c4:da:3a:7f:d3:1f:f2:95:64:ab:
         c3:e4:6f:6c:0a:65:81:cb:6a:0c:e2:71:2c:8c:69:28:00:34:
         4d:ef:28:f1:53:0d:29:1d:6f:ec:8c:16:82:fb:24:dd:c8:ed:
         ba:a6:eb:2c:d9:50:98:88:4c:eb:ab:58:46:9c:ee:25:5d:5f:
         d7:34:0b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:16:10 2025 by rpki-client