Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e8726ef3-197a-3bec-b65b-236f75a3129a.roa
File:                     e8726ef3-197a-3bec-b65b-236f75a3129a.roa (raw, json)
Hash identifier:          omuC8fEDJ4On5BK8CRnXOr2O22in5/JYyuMbPk9Uup8=
Subject key identifier:   99:D0:5E:25:23:35:97:EF:6D:0C:D7:41:F4:D7:51:AA:C6:F1:67:E3
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584B64CE2A6F6270F170011B8480
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e8726ef3-197a-3bec-b65b-236f75a3129a.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     396982
IP address blocks:        173.255.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:2a:6f:62:70:f1:70:01:1b:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=a6d17fd1-114c-4ee3-9a97-0f4e1fd7cd7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c3:e0:a3:d4:04:e8:e5:14:cd:fa:1d:f2:6f:
                    0f:ee:87:12:8c:f8:e0:08:00:cb:81:96:31:b8:13:
                    fe:94:7e:3d:35:b6:88:89:41:f7:67:af:28:50:d8:
                    b3:97:04:9a:a0:a9:bb:37:e2:cc:fd:a4:30:f8:42:
                    de:f0:01:f0:79:9c:87:e4:80:90:07:21:0a:ea:03:
                    f7:48:91:06:00:65:99:ba:3c:c6:f6:09:d3:e9:cc:
                    aa:07:9a:45:38:27:bb:85:4c:aa:6b:0b:aa:49:9f:
                    23:3e:21:15:40:c0:d7:5f:42:c2:41:b7:6f:f1:38:
                    d3:bc:4c:eb:83:22:4e:e8:09:05:ab:58:5f:c2:cc:
                    94:09:e5:a3:75:d2:65:11:d8:a1:5f:e1:1d:ac:13:
                    c9:09:09:94:f4:70:18:f9:4c:f4:8a:b5:e9:76:a1:
                    09:79:93:17:f7:15:9a:4b:84:f1:76:28:2b:98:ee:
                    b2:c9:63:4a:65:94:cf:dd:f9:ad:34:94:87:10:67:
                    9c:19:ab:50:b8:cf:83:0c:ff:bb:07:6a:9a:d3:26:
                    d8:f5:d7:52:90:2b:ae:50:0b:ab:af:0d:73:35:58:
                    cb:a8:6d:3c:51:84:1f:9d:f0:e6:22:8e:7d:1a:33:
                    52:b5:bc:0a:11:5f:c3:4e:77:35:9c:ea:d5:30:9a:
                    ea:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D0:5E:25:23:35:97:EF:6D:0C:D7:41:F4:D7:51:AA:C6:F1:67:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e8726ef3-197a-3bec-b65b-236f75a3129a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.255.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:ec:03:81:a5:e3:cb:2f:65:2e:2e:84:27:03:70:6c:af:5b:
         5a:db:10:1f:5b:cb:ca:d5:5e:dc:d6:65:5e:a8:8d:85:a1:ce:
         8e:78:3f:04:73:f3:14:ec:87:90:a2:01:70:0c:29:da:56:ff:
         61:c3:0f:ea:b7:97:4f:ab:7f:de:df:20:e6:ee:e3:fd:3d:b1:
         9b:67:3f:d3:99:ff:c5:01:4d:6a:e4:08:22:6e:c5:a4:32:9c:
         5b:0c:e6:29:83:a6:20:26:bc:a8:1c:e0:32:4c:c3:a2:d5:4f:
         8e:c6:c7:54:d4:1b:c3:06:c1:14:fd:86:d1:37:d9:4b:3e:9e:
         1b:d6:ea:89:03:67:ca:68:7b:04:33:02:ff:cf:66:30:46:44:
         1b:53:18:bc:34:3a:6d:61:e0:dd:33:c7:5d:6b:cf:56:c4:82:
         4a:8c:c4:27:07:81:26:87:66:b2:7a:44:8c:f5:96:bb:60:67:
         f1:60:7f:86:27:0c:ea:42:58:84:c1:d9:93:7e:43:f0:b2:da:
         3a:41:9e:25:91:6e:f6:67:c1:ce:22:69:dc:71:1e:78:f3:3c:
         58:98:e6:10:fc:1e:b1:05:10:51:e2:5d:3a:a3:ae:42:c9:bd:
         70:9a:44:f6:b3:9b:9c:21:63:f9:1b:68:0b:06:04:de:42:16:
         58:bb:68:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:43:26 2025 by rpki-client