Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8c87d4dc-4164-3868-902c-c32510be42cf.roa
File:                     8c87d4dc-4164-3868-902c-c32510be42cf.roa (raw, json)
Hash identifier:          P1Nl6bx7sTvqz4wguvsniWhDLltPaOImGDqhImQdkUc=
Subject key identifier:   28:28:5E:EC:A5:EF:E3:D0:8B:5F:6C:8C:CE:CA:FB:3A:66:53:08:8A
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B5571D2D4D1E5170268A52940
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8c87d4dc-4164-3868-902c-c32510be42cf.roa
Signing time:             Sat 27 Sep 2025 13:00:41 +0000
ROA not before:           Sat 27 Sep 2025 13:00:41 +0000
ROA not after:            Fri 26 Dec 2025 14:00:41 +0000
asID:                     852
IP address blocks:        137.186.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:55:71:d2:d4:d1:e5:17:02:68:a5:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 27 13:00:41 2025 GMT
            Not After : Dec 26 14:00:41 2025 GMT
        Subject: CN=cf78ae03-c1a1-4029-9b13-efe392700235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9b:ca:41:b3:cb:5f:17:1e:0d:36:70:47:b7:
                    8f:99:95:30:1f:55:d1:44:8c:49:9d:a5:79:6f:cb:
                    07:46:eb:09:3c:ae:ab:a8:b6:41:7f:9b:29:bc:a4:
                    82:95:88:76:82:96:5a:65:73:36:b1:40:84:a4:87:
                    43:bc:79:17:b6:97:0e:25:9e:a6:d0:ce:27:9f:f4:
                    db:cc:1c:80:c1:e0:97:75:6f:3b:99:73:c4:09:58:
                    e2:45:b5:20:e6:05:ef:ac:0a:68:e4:d0:ab:8a:79:
                    1b:09:a6:70:49:6d:b8:a2:6f:de:16:94:af:0d:a5:
                    05:1d:df:dc:f9:32:a6:4b:96:87:20:b0:07:71:af:
                    a2:04:73:57:75:38:95:34:d4:34:96:14:2c:10:90:
                    99:e4:fd:ed:2e:b8:51:f4:50:dd:45:3f:99:67:7a:
                    cf:cf:f2:ab:fc:b5:eb:49:7a:1d:36:03:0c:51:69:
                    1a:4d:8f:b2:1e:6c:75:ea:a5:b8:74:de:02:2a:ae:
                    e6:15:63:b5:b5:21:79:ff:a4:54:fc:7f:99:4e:80:
                    0d:53:09:20:a3:f0:bb:f2:7d:23:18:db:3c:76:1a:
                    5a:c6:0e:94:06:01:4a:6e:91:ab:1a:8d:e2:5f:b7:
                    0a:a8:75:1b:ca:4c:03:c5:d7:64:07:28:6d:bc:88:
                    a1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:28:5E:EC:A5:EF:E3:D0:8B:5F:6C:8C:CE:CA:FB:3A:66:53:08:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8c87d4dc-4164-3868-902c-c32510be42cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.186.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:0c:d6:7f:de:76:11:26:7f:35:42:cf:5b:53:50:8a:bb:26:
         aa:7e:f0:82:1c:7b:8b:fd:64:cc:a2:f2:cf:9e:02:fb:be:41:
         57:2a:43:61:a5:5d:9b:b3:02:63:ab:af:c8:06:a1:53:76:66:
         35:d7:25:d7:3b:e4:40:0f:b0:5c:3e:3b:54:f7:64:db:df:8c:
         cf:1e:99:d5:9f:99:e4:b9:67:ef:d7:25:3b:9f:c9:c8:4d:fc:
         6b:9e:fc:80:57:c1:22:33:be:fd:e1:01:00:2d:b4:0c:e2:17:
         c0:fd:73:2b:7f:0f:42:35:32:3c:79:51:c2:69:32:90:50:fd:
         85:68:04:6c:45:c2:f0:cc:4f:e9:84:51:5d:7a:0f:e5:f8:fb:
         ce:e8:1a:36:5f:56:64:c4:5c:1a:93:31:d9:04:1d:ef:b7:5e:
         bd:43:4a:25:1b:70:00:77:f5:31:11:de:1c:a2:d6:75:f9:26:
         b8:7d:aa:2f:3d:b9:3d:e8:d7:c4:de:fd:e7:72:c2:cc:92:e6:
         57:9a:2c:1b:27:cc:73:18:9e:ba:c9:c2:18:cb:9a:96:a9:79:
         4b:6a:9b:1a:3c:62:a6:5d:7d:7a:53:1c:72:a4:ea:48:82:89:
         66:9c:69:de:99:b9:b7:82:f1:72:5d:4d:d0:90:c5:eb:7b:a9:
         45:73:0d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:45:10 2025 by rpki-client