Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/1c0970c7-6818-3f17-a6be-abb3ae87972c.roa
File:                     1c0970c7-6818-3f17-a6be-abb3ae87972c.roa (raw, json)
Hash identifier:          FdlrTSvIXUQWnjUAFvjS7u75jNPtHIEM1SdgFptDx7U=
Subject key identifier:   98:4C:71:D9:0C:84:8F:E7:9C:25:04:F7:14:59:C2:89:82:7B:33:73
Certificate issuer:       /CN=0041a013-cdb7-4c1b-ac0a-02acf19215f1
Certificate serial:       010D0C9F4328584B6631F08083742BC9A9A6D080
Authority key identifier: CC:17:88:2C:05:97:88:D4:29:E7:C8:15:F1:D8:CE:E5:0C:32:FB:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/1c0970c7-6818-3f17-a6be-abb3ae87972c.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     393397
IP address blocks:        173.195.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:f0:80:83:74:2b:c9:a9:a6:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0041a013-cdb7-4c1b-ac0a-02acf19215f1
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=723f41d4-7d9f-496e-b230-d3e592ae719b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d0:2b:f0:b3:05:2a:5c:08:d9:32:22:61:38:
                    c6:93:d0:bc:14:c3:a4:be:77:2b:7d:91:f5:36:45:
                    b9:0b:25:c1:c4:cd:d2:c1:aa:df:b3:f1:80:f5:6e:
                    60:49:cf:76:d0:50:66:77:ae:18:94:c1:b5:1e:68:
                    27:6d:b6:3d:e2:44:da:8d:a6:25:af:4f:90:0b:cb:
                    f4:a5:29:f7:c6:e0:1d:4e:ac:dd:15:70:1e:91:f9:
                    50:c1:1d:44:2b:b8:b5:6e:b6:d6:f9:2f:f1:8a:07:
                    84:6b:a9:de:1f:a1:3d:d2:45:32:fc:d5:69:50:47:
                    9f:04:f2:78:82:c4:b3:db:69:e7:f1:b4:3d:b0:1c:
                    45:ac:00:51:d5:14:cf:42:8a:f4:73:37:56:08:10:
                    7d:d3:2c:88:a0:12:ec:b0:3c:33:75:ab:65:79:b4:
                    ee:e5:63:bd:83:2e:fe:82:c5:ee:a5:da:c3:a1:82:
                    e4:76:be:a9:67:cd:5f:cf:72:5e:8c:2b:8f:5b:48:
                    be:5f:b9:0b:f9:fa:14:ed:30:ab:17:d3:46:96:d1:
                    7e:7b:1c:7d:40:83:29:51:66:1c:f4:54:54:58:48:
                    3d:ad:9f:df:44:dd:88:95:54:4c:80:1d:7b:c7:64:
                    f9:b9:3f:f8:78:2b:0d:4b:4b:56:f1:bc:c5:49:80:
                    04:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4C:71:D9:0C:84:8F:E7:9C:25:04:F7:14:59:C2:89:82:7B:33:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/1c0970c7-6818-3f17-a6be-abb3ae87972c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1/0041a013-cdb7-4c1b-ac0a-02acf19215f1.crl

            X509v3 Authority Key Identifier:
                keyid:CC:17:88:2C:05:97:88:D4:29:E7:C8:15:F1:D8:CE:E5:0C:32:FB:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0041a013-cdb7-4c1b-ac0a-02acf19215f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:f6:7d:b0:28:2b:c9:98:da:f6:d7:4b:e9:73:4e:8f:ee:77:
         2b:8f:0d:88:5f:63:27:2d:3c:3e:2e:85:b9:06:66:d1:10:28:
         0d:a0:24:b8:8b:5e:1c:09:cf:ac:fa:b2:96:d4:8a:fc:5f:14:
         1f:fe:4c:d6:17:fa:48:e0:ee:dc:86:4f:3c:f5:45:8c:27:17:
         26:03:9b:e1:c0:3a:62:72:8a:e3:34:a9:b8:56:3c:9f:d5:46:
         38:00:c9:34:78:ec:ec:6c:9b:cb:5b:d4:66:b8:9d:88:4c:4c:
         d3:25:00:4a:c0:bc:9d:7c:ad:32:d2:0e:2e:59:b8:34:4a:00:
         23:43:d5:f1:9a:80:d4:89:c6:79:5f:0d:c1:3f:2b:68:82:07:
         33:11:a9:aa:70:7a:f3:8c:db:49:b9:e2:33:fb:58:06:9f:dd:
         41:10:b1:93:8d:74:79:1b:22:a9:e1:95:66:32:ca:86:8f:43:
         ae:82:85:1c:fb:25:21:37:da:95:28:84:9f:c7:c3:ef:8d:0a:
         44:2c:03:6e:fc:1f:9d:76:25:6f:fa:63:50:40:40:5a:92:85:
         19:68:c7:8b:d5:ea:92:8f:f7:0f:0d:16:ec:c0:d7:4b:12:dd:
         3e:89:ad:c7:70:41:5b:25:0c:cc:6d:4d:7d:3d:00:b6:7a:37:
         72:42:c2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:37:00 2025 by rpki-client