Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de1fce62-3d34-3fff-9aba-657ec7f9ecd9.roa
File:                     de1fce62-3d34-3fff-9aba-657ec7f9ecd9.roa (raw, json)
Hash identifier:          3664Wu0DNhMOMaB/eUBxXbz/wfQij/S+fk8YemsX//Y=
Subject key identifier:   B0:9D:62:98:C7:4C:68:FB:8B:78:2F:19:03:E9:C8:DF:0C:F1:46:37
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B64CD51173AB0B04303DACC00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de1fce62-3d34-3fff-9aba-657ec7f9ecd9.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     15169
IP address blocks:        173.194.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cd:51:17:3a:b0:b0:43:03:da:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=484a4f79-f441-4efa-bfd3-2dadabbacf64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f1:16:42:f8:b3:1d:ca:24:b6:68:7f:a1:5b:
                    7a:e4:97:48:ec:87:02:a1:89:19:c8:bd:94:ff:fa:
                    d5:41:00:1e:db:72:b6:9c:21:1c:7e:01:fe:61:00:
                    98:0a:dc:18:8e:bc:77:e4:7e:c4:45:3a:41:cf:7a:
                    2a:42:42:41:0a:ca:a7:af:7f:f4:55:a4:a0:3e:91:
                    8a:a4:bb:a0:ba:7a:46:6f:94:c6:67:92:94:cc:85:
                    b4:8f:f7:46:f7:de:76:e5:80:39:6b:65:e4:e1:1d:
                    0f:03:40:ed:43:83:83:e0:3c:fa:ba:4c:58:32:1b:
                    7e:c2:bc:42:f3:ff:39:80:f6:dc:ee:22:27:10:37:
                    df:10:46:da:84:e2:c6:f5:ef:53:db:6a:bb:38:8a:
                    5c:03:d0:a8:c0:83:1b:0a:6e:f8:6b:5a:b3:e7:2c:
                    86:f3:d0:27:a8:c6:1c:07:27:67:37:73:c2:c1:be:
                    09:a0:a6:dd:a3:d7:05:b2:7a:a2:e9:51:bb:94:8f:
                    34:fc:1b:d3:51:2d:b6:49:59:8b:5d:20:6d:55:5c:
                    bb:01:ee:f2:8c:50:c6:43:77:ea:1b:d5:d2:3e:26:
                    50:55:52:6f:55:fe:56:0b:ea:bd:bb:55:aa:20:8b:
                    d2:ca:ef:9c:e1:c5:bc:49:18:ad:54:2e:a6:c0:8f:
                    cd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9D:62:98:C7:4C:68:FB:8B:78:2F:19:03:E9:C8:DF:0C:F1:46:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de1fce62-3d34-3fff-9aba-657ec7f9ecd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:98:c1:ca:3b:c6:1e:b0:e4:5a:52:ae:e7:ce:3d:54:f7:5e:
         ff:a4:14:49:64:b0:0b:db:ad:fe:0d:5d:78:9a:90:e1:37:4f:
         f9:3f:02:7c:43:cd:e3:5b:a5:a2:42:2d:bd:12:f9:00:d9:d3:
         f4:b2:60:da:0c:49:2d:7c:28:c5:45:51:66:a4:ac:c8:0c:bf:
         81:f7:d3:41:89:d1:32:69:15:fb:b0:ee:7a:d9:74:75:73:74:
         c5:56:b7:f7:e5:cc:bc:35:98:48:88:3c:76:02:a2:78:41:21:
         0c:cb:6b:c1:20:fe:de:8f:86:02:72:6a:98:34:c3:f2:37:bf:
         54:16:a9:c4:53:d2:f2:14:83:af:08:57:ee:20:13:26:cc:e9:
         6f:96:9e:00:19:6b:ec:81:ff:12:ec:e2:1b:5c:20:ac:17:80:
         98:3d:93:6f:ac:6a:7d:6a:51:aa:f7:e5:f6:2b:f5:bb:82:f7:
         60:d5:87:09:7f:83:3d:ce:e0:ad:4a:1e:40:bd:15:d8:cb:e4:
         4c:f7:ea:08:d8:be:e6:8a:72:b0:3a:43:44:42:16:93:9d:19:
         f1:cc:b4:6e:db:d1:33:6d:2d:72:00:02:c9:a4:d8:f9:5a:66:
         cd:8f:c4:de:25:ba:e8:09:9f:eb:bb:d1:6c:4c:7c:ad:f8:b1:
         c3:d3:4e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:42:05 2025 by rpki-client