Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9147b8fb-f478-3332-b212-1f4f77486c02.roa
File:                     9147b8fb-f478-3332-b212-1f4f77486c02.roa (raw, json)
Hash identifier:          RjtHr2fbbjbVSmB+LDEkbK4+0vZ4ugR47sNlhXuuGZ0=
Subject key identifier:   31:45:E9:3E:FD:D5:B0:58:2F:C2:55:4D:19:56:99:5E:BC:FC:B3:73
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F525B567703F8DFFE2CA2F0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9147b8fb-f478-3332-b212-1f4f77486c02.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     393720
IP address blocks:        75.112.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:5b:56:77:03:f8:df:fe:2c:a2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=129719a9-b631-4f06-8dc8-b343f3cf773b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:10:e9:f3:24:ed:96:05:54:c9:23:d4:cb:a0:
                    53:b9:9e:ae:04:23:3d:24:c0:88:50:f4:7f:ee:07:
                    c4:5a:33:cb:42:d7:f2:30:f1:1d:2f:d9:bd:16:fc:
                    48:9f:82:5f:dd:5c:54:73:5d:c7:2e:c6:64:a9:9e:
                    bb:13:01:a8:3c:09:31:2e:14:95:f0:7a:d1:74:9f:
                    52:ba:ef:fd:d0:e3:f6:27:79:11:a1:b6:d3:ec:d6:
                    fc:f8:03:e1:3e:47:ed:04:c4:d5:b1:1a:8d:be:e2:
                    f9:13:69:5b:11:a8:f8:ba:d7:17:99:db:0a:a5:11:
                    08:06:b0:ac:66:c6:c3:49:d6:d5:1a:5a:33:e1:72:
                    96:3a:7d:cb:8d:27:b2:9f:60:88:0a:7c:e9:62:bd:
                    2c:60:bf:c6:be:fb:21:d8:fa:5c:e9:8a:af:f4:d9:
                    b6:f3:95:f2:4d:43:b1:6b:6e:66:7b:98:22:ab:33:
                    45:d4:a3:6f:ae:30:c2:18:3d:c6:4e:ba:50:f9:f5:
                    2d:bd:4f:75:ee:12:eb:8c:21:c4:89:c8:25:84:92:
                    ba:c4:e0:00:7e:35:ef:4f:18:b8:21:85:d3:a3:9a:
                    11:f7:a0:e8:6f:e9:22:71:f1:76:9a:fb:25:01:d6:
                    c3:97:05:6d:d0:ee:ad:26:bf:d3:21:a6:b7:60:fc:
                    47:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:45:E9:3E:FD:D5:B0:58:2F:C2:55:4D:19:56:99:5E:BC:FC:B3:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/9147b8fb-f478-3332-b212-1f4f77486c02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.112.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:34:85:bb:71:2c:3a:39:4d:2d:e8:82:07:b6:54:27:5a:4e:
         1b:b5:b3:67:86:5f:36:e5:1f:ff:7b:df:fe:7f:2f:e7:98:91:
         cb:6c:c5:58:60:e5:8b:ea:26:26:15:b6:a2:34:7d:b7:5b:c9:
         11:58:cd:39:2d:06:cd:ce:ee:86:e5:e2:49:64:15:4c:ab:fa:
         f4:02:85:1f:42:d6:81:4e:3e:c3:a1:46:91:bf:1e:a5:fb:f4:
         16:a1:ac:60:e7:27:2d:ee:77:20:17:fe:29:80:c3:4f:b9:1f:
         81:c4:7d:e7:aa:b6:4a:6e:ab:5f:a1:14:90:02:53:a3:f3:7a:
         0c:dd:05:59:6f:c0:c4:ec:2f:87:1f:30:9f:7f:7c:6b:39:6b:
         23:9c:a7:54:20:f6:d8:27:cc:ac:a1:7a:ef:68:b8:5b:c5:31:
         74:a7:77:12:ea:cf:62:86:c9:c3:1f:29:7d:63:af:af:f9:22:
         e5:2e:13:30:18:f9:1b:c4:dc:a6:e7:74:f8:18:c5:88:ad:c6:
         99:6d:2b:be:f4:ea:f6:de:18:e3:0e:c8:4b:a7:3d:2a:47:73:
         af:f3:cf:95:3d:8d:08:af:db:3f:8c:bc:0c:73:cd:a4:67:3e:
         52:47:e8:7d:21:f6:af:06:a3:e6:27:c8:74:a7:51:c6:da:b5:
         50:6d:a3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:20:55 2025 by rpki-client