Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a0c0986d-0101-36a1-9880-050275e5367a.roa
File:                     a0c0986d-0101-36a1-9880-050275e5367a.roa (raw, json)
Hash identifier:          G5xieVUAwy69cy6/whCrNZUgCx6CmDzuD9DDf7H0fdY=
Subject key identifier:   40:6D:E2:27:36:D0:08:FB:50:B5:CC:F8:4F:76:CC:44:FA:62:5F:55
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F5218DC4846C79C52348E2C
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a0c0986d-0101-36a1-9880-050275e5367a.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     20115
IP address blocks:        174.80.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:18:dc:48:46:c7:9c:52:34:8e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=d343a3c2-2ca1-4a98-9857-5de3b7e74be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5f:be:c6:05:97:d7:5c:c1:b3:35:b6:d6:10:
                    ee:c5:12:73:c6:8a:5a:08:f4:d2:12:4b:7d:24:e2:
                    0a:0e:6e:63:ce:14:b0:49:25:36:bb:de:ad:b8:6a:
                    e5:e7:2f:db:a3:4f:e2:52:69:5c:58:00:f5:8f:e2:
                    67:3f:e3:c8:31:f7:c8:0d:a4:52:bd:d8:5a:40:2d:
                    7c:21:8a:eb:47:2c:77:82:d6:3b:72:74:c8:2b:b0:
                    b4:4a:99:c5:02:5e:53:82:ba:54:e8:02:54:ba:7d:
                    0b:05:66:21:39:8d:24:9d:8a:2e:b8:92:88:f8:50:
                    a3:fb:0d:2d:66:e2:cb:e9:27:b6:1b:29:e5:e4:e7:
                    a1:30:7f:9c:49:9d:fc:57:e9:d8:3e:ad:e9:5e:58:
                    7e:12:76:67:b6:92:bb:bc:9d:a4:81:e3:fb:bd:1f:
                    50:c9:28:6b:23:a7:2d:4f:9d:a8:55:75:17:2b:36:
                    d8:24:b5:ee:99:b8:e4:b5:ca:26:e6:55:25:8d:d3:
                    9e:47:52:4a:c2:fd:97:9a:0a:97:8b:b0:69:9b:b0:
                    a0:f7:69:1d:07:a4:d5:14:d4:44:3e:00:f1:04:94:
                    bc:8c:f6:78:fc:7d:e7:38:1e:bb:2d:dd:9c:c2:c6:
                    20:fb:4d:68:a5:53:b4:90:cd:25:96:dd:52:f3:bc:
                    5b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6D:E2:27:36:D0:08:FB:50:B5:CC:F8:4F:76:CC:44:FA:62:5F:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a0c0986d-0101-36a1-9880-050275e5367a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.80.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:55:91:3b:a5:09:b1:69:e6:ef:a8:aa:3b:24:a6:a8:14:f1:
         32:59:6f:04:f0:8c:f4:49:0e:22:c8:b6:b9:b9:53:b0:34:23:
         7b:f7:e2:9e:7c:0f:99:1e:dc:b2:ec:f1:7c:19:5e:7c:63:32:
         75:e6:2a:88:02:59:df:25:51:d7:cf:5b:13:37:ea:73:cf:60:
         41:b5:34:e2:57:9c:73:08:cf:24:04:7c:bc:59:d7:00:72:03:
         d3:58:9f:87:e1:7c:f4:cf:f8:bb:c4:37:f9:68:dd:e2:fa:48:
         dc:b5:2b:f1:19:75:45:b1:97:db:f9:0c:d5:28:cb:d2:2a:39:
         ed:84:b5:d4:46:ec:db:20:b7:e4:7d:a0:83:39:c1:0d:ff:d7:
         db:fc:fc:3f:ee:10:50:b8:b9:4c:b7:93:9f:90:01:ec:7c:57:
         d8:e7:a6:7a:e5:b6:ee:8e:ff:9f:05:2d:45:54:1d:bd:b6:56:
         a7:3a:71:02:f8:bf:67:c2:ef:3f:97:5e:c8:d6:b9:e6:59:a4:
         e5:99:66:1b:d1:6e:c1:1f:2a:20:f2:10:5d:df:c3:9f:e8:a7:
         8b:c8:b4:b6:b4:1a:07:5f:5c:3b:d9:da:e5:ff:28:b1:85:be:
         fb:6e:89:86:50:25:dd:74:73:85:2a:cf:43:3b:f5:eb:56:37:
         e3:8c:ce:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:36:15 2025 by rpki-client