Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e4b01834-8b58-3933-9837-0bd7809c602d.roa
File:                     e4b01834-8b58-3933-9837-0bd7809c602d.roa (raw, json)
Hash identifier:          C6Ut9SFvysVJXL8dmdc2B5g1/j0dJhFOyF/wEIKyUh0=
Subject key identifier:   53:24:8E:7F:38:D8:E7:2E:BC:0E:87:9E:4D:64:AF:A7:56:46:E9:73
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B5B07314EE031382433B5F900
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e4b01834-8b58-3933-9837-0bd7809c602d.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     852
IP address blocks:        172.218.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:31:4e:e0:31:38:24:33:b5:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=74bd17e2-f5e1-48cf-bca4-b0969c199318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:66:71:a0:c0:fa:81:5e:1a:28:eb:ee:89:
                    91:6e:d2:d2:09:cb:04:73:65:8b:ec:60:64:4b:0d:
                    a7:be:08:60:5a:0c:a5:f4:69:39:87:b0:bb:d7:e5:
                    af:04:e5:93:c7:96:23:02:1e:c3:24:fd:3d:31:d6:
                    01:dc:67:fd:aa:b2:99:8e:f7:33:cb:b2:05:0c:b9:
                    61:8d:d1:9f:e9:61:f8:50:b2:f2:8d:39:fe:0e:cb:
                    41:ad:ca:0b:86:40:aa:fc:93:89:6e:b4:fa:ec:f6:
                    29:b9:c4:dc:0b:cd:39:4f:2d:bc:d8:5c:5a:61:a7:
                    ad:bd:72:ad:a1:e8:bb:b7:8b:cd:0f:ae:74:f6:f0:
                    08:90:86:74:19:83:42:92:12:82:3b:d8:01:1a:08:
                    8f:c9:5e:b6:da:07:99:28:48:8c:90:fe:cd:69:93:
                    ef:e8:59:5d:80:39:10:93:6d:9d:9c:19:ed:e0:02:
                    74:2e:46:0e:73:5e:d4:f1:4c:31:c3:69:74:74:4b:
                    2a:c4:30:69:bb:1e:c4:d9:43:65:12:3e:c5:63:b8:
                    33:bd:ac:10:71:a5:50:99:c1:50:40:a8:89:79:fd:
                    23:81:67:20:ef:e5:f6:b3:a4:76:6e:35:ab:01:28:
                    98:bf:2a:cc:e8:10:61:69:12:f5:6c:71:c8:d9:dd:
                    05:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:24:8E:7F:38:D8:E7:2E:BC:0E:87:9E:4D:64:AF:A7:56:46:E9:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e4b01834-8b58-3933-9837-0bd7809c602d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.218.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:14:ca:5e:06:aa:c8:14:c6:6b:c5:31:c7:0a:0e:ea:dd:d7:
         67:5e:c0:99:27:bb:88:dc:fc:42:4f:a2:dc:49:da:81:fd:1f:
         84:81:f6:ac:93:ad:04:b4:85:c1:15:3f:b9:b6:e1:84:b5:a5:
         49:c8:4b:5e:3d:ff:e8:1f:18:16:ea:d1:a1:cf:45:c5:1f:58:
         07:ef:a1:99:ca:07:66:76:1f:99:53:b6:ce:3f:26:d6:76:86:
         c2:79:48:4e:2b:1b:5d:5a:01:e7:81:b3:00:9c:5d:9b:f0:db:
         fd:08:d3:90:9f:70:8c:07:d4:79:a9:76:a8:c6:6a:8f:5c:05:
         ec:cc:a4:64:7b:82:16:eb:c3:92:5c:d0:66:c5:a1:2e:c6:98:
         cf:ef:90:f3:3d:e7:bf:cc:2e:93:21:a6:93:d9:4a:bd:0a:10:
         54:56:76:94:e5:68:2e:a0:14:42:b4:68:56:f7:86:43:93:d9:
         75:4d:78:67:22:c8:a5:d9:31:45:ad:92:f0:ee:db:f5:e0:bb:
         da:0c:6d:87:51:75:10:7a:08:a2:eb:93:6c:fe:66:ce:cd:3f:
         58:53:3c:80:2e:e9:fd:28:f1:18:79:32:12:e5:1b:48:e7:be:
         12:c4:61:48:f6:18:4b:e9:f0:2f:a2:e5:86:68:a0:91:f3:7e:
         8b:8a:b9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:40:38 2025 by rpki-client