Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/f3d44cff-5c7d-3851-8f34-4164c5b5f0af.roa
File:                     f3d44cff-5c7d-3851-8f34-4164c5b5f0af.roa (raw, json)
Hash identifier:          4Bl+yU0wrTbjDPk5ZZmYQonWXBYNWQC3JMg1q4LKbQw=
Subject key identifier:   00:58:81:30:A0:54:53:F7:98:B5:14:26:B0:2D:B5:DE:76:37:05:69
Certificate issuer:       /CN=de801427-6a45-470a-898c-c6a2b1b27380
Certificate serial:       010D0C9F4328584B2FC184B2CEACC9EA88A73600
Authority key identifier: 21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/f3d44cff-5c7d-3851-8f34-4164c5b5f0af.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     55163
IP address blocks:        108.174.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:84:b2:ce:ac:c9:ea:88:a7:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de801427-6a45-470a-898c-c6a2b1b27380
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=29ffc82e-06ab-45fb-af73-51e528fd487e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1a:27:14:71:db:9b:1d:04:88:45:56:b8:97:
                    7f:d3:fc:f6:33:68:13:0f:da:20:7c:84:b0:cb:6d:
                    74:8d:da:cf:c4:35:4a:76:2f:2c:18:87:7c:68:58:
                    4a:cb:3f:e9:e1:eb:07:59:7c:4c:82:25:b6:34:b7:
                    ac:45:33:64:b2:cd:54:be:48:f3:30:02:f3:d1:cf:
                    e2:f4:b0:25:c6:bc:3f:40:93:c5:58:99:d9:dd:0a:
                    07:ef:0e:19:81:4c:74:4d:d9:e3:da:35:ae:b0:15:
                    96:4d:84:de:1e:6d:d3:ff:c2:21:f4:4f:dc:41:57:
                    ea:c0:7a:66:77:d3:5f:82:f9:5f:92:81:21:3e:c8:
                    39:d5:15:8c:cd:35:f0:d1:84:56:dd:23:29:82:7d:
                    5b:32:84:2e:49:8c:5f:8c:1e:a9:32:08:3e:d6:b1:
                    66:3c:41:cc:d9:8c:29:d9:eb:7d:0a:56:7a:77:9b:
                    b7:ac:7d:4f:ab:7a:c3:22:85:48:3d:a7:80:6d:d6:
                    a6:ae:73:21:d8:13:0c:8a:bb:09:3a:56:57:8d:f7:
                    a6:07:86:ae:d4:97:96:08:0d:e7:ac:5c:84:95:99:
                    77:ed:8a:a9:14:64:bf:80:4a:57:f0:32:6a:7a:f3:
                    02:28:07:e7:ad:a9:bf:88:3c:e0:e2:68:50:d0:16:
                    62:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:58:81:30:A0:54:53:F7:98:B5:14:26:B0:2D:B5:DE:76:37:05:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/f3d44cff-5c7d-3851-8f34-4164c5b5f0af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380/de801427-6a45-470a-898c-c6a2b1b27380.crl

            X509v3 Authority Key Identifier:
                keyid:21:E4:15:AD:0E:76:7F:D5:80:F2:33:09:E7:CE:05:10:DA:73:68:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/de801427-6a45-470a-898c-c6a2b1b27380.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.174.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:7f:d9:23:9b:fc:4d:d1:33:36:43:84:1c:3b:43:63:55:48:
         27:53:ef:6a:bc:ff:36:d3:7a:9d:b1:fe:38:79:04:e4:d4:38:
         5d:06:a4:cb:fb:6f:cc:c8:e5:a4:9f:1c:06:e4:47:16:62:8e:
         12:22:44:93:7f:ca:22:f8:ed:64:69:9a:fb:3a:8c:03:70:84:
         cf:e4:bf:c4:3d:0f:54:7b:b8:c0:24:0f:e3:5d:c7:ab:e9:d5:
         ba:8d:03:8f:95:26:a3:4f:81:12:a6:92:0e:15:c4:a8:94:3c:
         35:69:6f:a6:43:2a:54:b1:a5:6a:2f:a8:d7:c2:6b:40:f6:de:
         eb:98:73:18:0f:13:93:64:61:1d:0f:68:77:c8:12:2b:81:64:
         42:1e:ee:2c:98:93:4b:20:b2:46:75:44:64:72:2b:63:36:c8:
         e4:69:e1:e8:40:c4:d7:07:3e:d2:30:86:95:52:da:69:1a:2c:
         56:84:d7:3b:3d:1f:6f:15:cd:27:79:9e:47:b1:cb:b2:24:34:
         7c:01:9e:b9:8e:0a:87:85:cc:e0:89:cd:3a:5a:65:dd:de:a4:
         da:3b:c5:4b:3e:24:a1:ba:9f:b8:a4:5d:ec:69:57:f8:1b:0d:
         37:6e:e9:d1:89:23:e2:b1:d9:c2:a2:fd:b3:bf:db:30:72:43:
         c1:37:b1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:52:03 2025 by rpki-client