Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8c7110f4-9850-314d-a729-b9b9de4adc13.roa
File:                     8c7110f4-9850-314d-a729-b9b9de4adc13.roa (raw, json)
Hash identifier:          HfCe1s3//bSMtnGy0GfHodQOFU1z3EL1ZN95pk8PglE=
Subject key identifier:   A3:BF:8C:E6:FC:E8:BC:3B:4A:11:66:44:51:7E:11:8C:4A:B0:B7:47
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F521994166787FD1A989600
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8c7110f4-9850-314d-a729-b9b9de4adc13.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     20115
IP address blocks:        174.86.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:19:94:16:67:87:fd:1a:98:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=3c85c693-4a32-46b8-a71d-b67d75026f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6e:dd:57:e0:69:ed:5b:9b:f3:1d:77:5d:0f:
                    bb:90:93:7c:9f:85:d8:98:1b:7d:af:1f:d5:17:9d:
                    d2:27:22:a8:4b:d8:5e:73:bc:23:4c:bd:b7:47:0e:
                    ec:ba:1a:84:b6:54:93:47:e4:f5:a1:29:df:be:d1:
                    ec:ba:31:99:86:91:01:ae:77:76:1a:8f:ce:20:a0:
                    cc:49:25:ea:e9:eb:71:76:2a:a6:9f:46:50:80:fa:
                    41:a0:07:28:1e:dc:eb:af:f1:20:29:ce:b2:a6:1d:
                    e1:a9:cb:64:41:9f:62:6d:ff:16:1e:62:a7:4e:e9:
                    57:0c:6b:32:4f:48:99:37:d4:86:ca:15:70:74:07:
                    d3:82:8a:78:61:4b:7c:b6:5c:e9:91:91:4b:54:4d:
                    8f:a5:2b:28:69:62:c6:fe:04:24:00:37:ba:d2:a8:
                    86:6a:f1:a3:4f:61:70:ac:4a:19:c3:48:d1:37:e0:
                    48:ec:d8:12:9b:a5:a7:c0:9e:09:14:a1:e6:a6:3c:
                    44:13:6e:e4:5c:c4:e9:90:90:f5:63:0a:fa:97:dc:
                    8e:d7:63:ce:ef:ba:ba:fe:6e:68:c9:11:d7:7f:59:
                    19:55:12:98:db:cf:db:9d:3a:74:8e:1e:b3:a9:d4:
                    b2:cc:ac:b2:64:87:06:a3:5c:0b:84:08:1e:d6:a7:
                    a2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:BF:8C:E6:FC:E8:BC:3B:4A:11:66:44:51:7E:11:8C:4A:B0:B7:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8c7110f4-9850-314d-a729-b9b9de4adc13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.86.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:4d:c0:2e:8c:cd:10:a1:ea:4b:f7:e3:cf:51:09:ed:1f:9d:
         6d:6b:73:e4:98:72:37:b1:d7:7b:f8:f5:69:40:1f:55:4b:41:
         fc:a4:df:bc:3c:6a:c5:98:1e:c1:9d:b3:37:b6:69:e1:06:96:
         51:5c:33:bf:4b:bc:4e:c6:fd:11:7f:26:18:c7:78:3a:fa:5e:
         c3:ae:f5:b2:8e:0f:1b:e8:d4:c5:43:1d:b4:cc:96:30:54:c1:
         38:fd:06:ee:ef:4e:c6:d5:c7:dc:5b:a1:b6:ae:5c:c6:9d:7a:
         d8:0d:e0:b8:b9:5f:29:91:c0:6b:5d:78:22:a4:9c:4f:c9:39:
         10:1b:74:97:0e:81:b2:8e:b3:22:38:db:ab:39:5b:a7:c0:d2:
         da:6d:46:f0:3d:e2:ab:cb:8d:f8:aa:24:c4:d6:5a:23:2a:32:
         51:1e:11:e1:a3:42:ed:2b:98:92:18:8b:fe:b7:f0:3f:b8:f9:
         83:20:55:a4:0c:92:3c:c3:0b:45:4f:ae:79:e4:b5:62:bf:62:
         c9:e1:1b:67:74:f3:ad:1e:6a:ee:a4:ed:aa:46:ec:e5:4f:3c:
         97:88:c7:6b:3f:45:14:c8:77:ba:46:42:3f:59:6f:70:8d:c7:
         80:03:aa:80:27:dc:0c:c7:3a:bb:80:35:dc:1b:b9:39:c1:9e:
         06:4d:b6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:01:26 2025 by rpki-client