Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/80a9451e-8654-323a-b5e8-f2565df2070b.roa
File:                     80a9451e-8654-323a-b5e8-f2565df2070b.roa (raw, json)
Hash identifier:          Wqcqno3uB8Ms1EeUFdl5DMtK7H3ASPc42R5lUGEv3AQ=
Subject key identifier:   5E:37:0A:06:B0:66:F4:2C:57:63:67:26:80:77:BB:AC:78:9D:90:34
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584B79BCC465E1F12B3ACE6C3600
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/80a9451e-8654-323a-b5e8-f2565df2070b.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     19316
IP address blocks:        207.172.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:c4:65:e1:f1:2b:3a:ce:6c:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=d3935d00-0440-4f17-a049-bfd069fcdd55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:33:17:ae:89:d9:9e:51:4d:f7:9c:1a:bd:47:
                    36:33:d4:07:fa:96:9a:d5:da:31:46:d3:57:2a:e9:
                    d7:f1:0a:f2:9b:56:86:31:ee:e3:35:37:e6:c4:53:
                    90:93:d2:14:d2:19:4e:df:f9:b0:29:3b:5c:95:75:
                    a9:00:a7:31:6e:60:9c:e6:94:5b:df:6d:79:55:59:
                    f7:b2:c4:81:d1:cc:85:1d:da:23:45:f1:43:c4:22:
                    af:28:8b:29:14:91:fa:2e:ce:bf:4c:3c:02:5b:ee:
                    e2:76:e1:6c:d3:0f:cd:a0:54:da:30:bc:eb:ac:45:
                    6e:d0:b0:1c:da:e9:90:94:36:61:3b:cc:71:c7:bb:
                    0d:28:d0:e0:50:36:83:22:53:3f:77:1f:12:ff:3c:
                    6d:ee:fb:24:6b:0c:c4:d8:c9:b6:a4:bc:32:09:85:
                    b8:2a:ac:1d:0f:a6:65:5d:2f:81:22:5d:ed:b5:29:
                    d7:13:63:19:8e:a7:a4:c7:02:8e:9b:c1:7b:84:a9:
                    1e:53:9a:f0:53:d5:4c:9c:53:bc:c1:b8:9e:87:a8:
                    99:cf:fe:28:de:8f:9c:9e:fa:17:e3:59:79:ae:8b:
                    ca:52:d4:4b:86:c0:17:da:bd:43:6b:06:4e:da:32:
                    75:c8:f3:f5:41:01:91:88:d9:a5:22:65:a0:52:9b:
                    bc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:37:0A:06:B0:66:F4:2C:57:63:67:26:80:77:BB:AC:78:9D:90:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/80a9451e-8654-323a-b5e8-f2565df2070b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.172.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:31:bc:4a:70:2f:4a:cb:dd:5b:64:cf:be:8e:01:e1:91:e5:
         44:d6:13:23:ed:ee:bc:da:05:4d:9a:5d:44:22:23:a2:ed:67:
         c8:8b:8a:0c:95:cc:29:56:1b:c5:95:fa:ec:9a:de:7c:0e:73:
         53:b9:a3:c9:a3:87:3d:cf:28:a2:b1:5f:82:67:3c:bb:e8:e3:
         99:62:7a:88:1e:2c:82:48:1c:6d:12:73:1a:c0:db:6a:c4:7e:
         26:a1:34:71:5b:75:e9:b1:ff:08:b3:12:18:d9:e9:a6:35:32:
         5f:f4:28:71:62:63:fb:02:09:ee:fa:9c:7f:16:a3:a2:43:d4:
         73:65:e2:36:5a:4a:ea:09:07:2a:63:8e:4a:88:c9:72:59:36:
         1c:4f:78:e6:6f:b1:ab:3f:66:03:22:2a:5c:be:be:38:9b:f0:
         48:0b:3a:ac:1a:8f:8a:7d:8d:35:c2:47:1d:6b:3a:ea:8e:55:
         88:af:80:13:a0:c7:5c:ad:59:97:96:2a:9e:01:ec:97:11:da:
         f9:0a:7b:6d:b4:df:96:46:b6:c8:32:35:18:54:61:ef:f2:e5:
         9f:2a:3d:32:c7:ee:86:0b:a7:c3:d3:22:8b:ac:c0:db:06:8b:
         32:40:84:27:65:53:15:0c:7f:9d:fb:96:1a:56:51:29:ea:3d:
         50:66:d3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:09:53 2025 by rpki-client