Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/b1663796-dc94-35f3-89b7-7c4c3b605604.roa
File:                     b1663796-dc94-35f3-89b7-7c4c3b605604.roa (raw, json)
Hash identifier:          LLzw8lA69jTay7y2q4arYf07ZmMwCpJcaarqvtYHhfs=
Subject key identifier:   BB:FD:7C:0C:F2:49:B2:97:D1:C0:03:C9:A3:7C:F7:CE:47:FD:09:52
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584B821CCC531CCC9BA5A2B92700
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/b1663796-dc94-35f3-89b7-7c4c3b605604.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     13599
IP address blocks:        173.251.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:cc:53:1c:cc:9b:a5:a2:b9:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=cd5118c2-3573-4042-aa0e-7e96c5f237af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:67:b6:fe:bf:8a:41:98:38:78:fe:e9:6f:c0:
                    5d:bb:30:c2:e5:2c:eb:5c:61:b3:7d:66:3f:de:7b:
                    e5:71:37:53:e0:69:38:99:65:0c:a2:6d:f1:76:80:
                    a4:e9:32:26:92:a5:ec:dc:03:f5:60:74:c6:f8:77:
                    79:d1:4f:67:ee:ae:69:0b:73:01:7d:f9:92:1a:79:
                    d5:1b:77:33:97:17:bd:da:05:b4:ab:5d:61:2e:0a:
                    e2:f5:08:81:aa:9d:82:06:5e:20:e5:dc:9a:f4:19:
                    eb:50:c1:4c:7c:17:dd:35:06:82:46:08:d2:bd:bf:
                    c7:54:d1:fc:11:1a:64:21:cc:a9:07:00:49:fa:54:
                    3d:d5:69:cf:c9:e3:dd:5b:4e:5c:79:24:33:e6:c8:
                    31:0c:e3:b4:12:4b:1e:3c:64:a0:fb:b3:ea:8c:0d:
                    15:ed:82:ce:5c:b8:1a:50:4d:db:23:6d:0e:01:82:
                    77:32:29:03:13:9d:b3:21:56:14:2e:f1:33:ae:bb:
                    88:7a:2e:64:ff:14:01:4a:76:e9:8e:dc:3e:37:82:
                    08:7f:4e:1a:06:74:65:48:43:5d:c9:15:91:c2:aa:
                    f2:47:33:69:72:58:f8:89:5a:d8:54:eb:0f:19:d0:
                    5d:ec:ab:d5:2b:ba:22:9f:32:b3:f9:d7:0a:44:da:
                    ea:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:FD:7C:0C:F2:49:B2:97:D1:C0:03:C9:A3:7C:F7:CE:47:FD:09:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/b1663796-dc94-35f3-89b7-7c4c3b605604.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.251.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:70:67:fe:40:7d:b0:2b:ad:8b:87:f5:01:37:51:4d:01:45:
         4b:a8:8d:ff:38:f3:5f:5f:d9:d7:0e:d1:39:64:81:46:b0:f2:
         4b:2a:00:2a:6e:d1:39:a6:33:26:7a:ec:57:34:89:16:61:59:
         9a:45:a9:d5:ce:37:1a:35:8b:e3:23:54:a3:47:73:9f:e7:62:
         b8:3b:c3:5d:ed:28:71:1c:5c:86:4b:8f:44:da:3b:f6:11:3b:
         ab:18:d7:ac:b4:ee:15:72:59:7c:26:13:be:c3:bf:3d:b3:83:
         1d:ce:4c:e5:03:73:58:39:55:7e:16:09:d1:c0:f0:0c:38:92:
         c0:49:63:6d:e4:c0:05:30:04:6f:e7:80:3c:86:74:97:59:e5:
         bd:1b:bb:83:ff:66:0b:c2:45:5e:ce:ad:ee:d4:18:05:32:82:
         5e:db:af:b7:4d:f6:e0:a9:4d:67:35:85:c3:f7:85:bc:07:48:
         5c:93:dc:5c:f1:af:24:86:ed:73:2b:23:0f:a5:c2:2a:d6:b3:
         ed:7b:3a:ec:b5:09:bd:c3:b0:7d:38:56:71:d6:97:56:55:fe:
         6c:d0:d1:6a:c4:d7:bf:f0:a2:22:d5:5d:f0:fc:03:a3:dd:de:
         dc:98:27:1f:3e:3c:2f:83:9a:ad:e1:32:d0:66:0d:08:09:ac:
         00:a9:24:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:29:51 2025 by rpki-client