Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ac571f27-2d55-35a3-88f4-63a0b9c60c25.roa
File:                     ac571f27-2d55-35a3-88f4-63a0b9c60c25.roa (raw, json)
Hash identifier:          wRiRFX9d2oRfyXeCUvfjjJhiilCMwGcQ3hZ8a7ODO48=
Subject key identifier:   CD:E9:1E:1F:25:16:29:A8:0E:6B:A2:A5:CA:1A:9E:4A:AB:11:8D:44
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584B13D6A915531CB359E0993CC0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ac571f27-2d55-35a3-88f4-63a0b9c60c25.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        173.199.8.0/23 maxlen: 24
                          173.199.29.0/24 maxlen: 24
                          173.199.38.0/24 maxlen: 24
                          173.199.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:a9:15:53:1c:b3:59:e0:99:3c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=6a1faa7d-cc62-4464-b4b0-3fd0d223e05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2d:28:be:53:04:36:89:71:4e:48:3a:64:74:
                    e8:c0:0f:8c:e4:ed:59:a0:a6:bc:65:92:77:4e:7f:
                    2a:b7:7a:7b:11:40:5a:86:6c:b3:d2:c6:01:c2:6f:
                    03:d3:0a:b0:5e:a1:1d:60:12:4d:16:e3:05:c8:e2:
                    2f:d2:37:1f:13:cb:57:81:95:0a:a8:58:7e:38:90:
                    73:0b:ea:7a:28:81:70:84:ae:0c:22:11:14:01:db:
                    16:2a:fc:ae:12:2f:3b:27:37:d7:71:ac:13:70:96:
                    4c:66:62:7f:3e:2f:73:ea:1b:e7:bd:c8:8c:39:97:
                    2c:b4:f6:1c:eb:1f:ca:84:34:4e:a6:49:e7:0c:6c:
                    39:85:7e:df:a6:4e:03:d2:67:86:30:50:e2:8e:fb:
                    d1:16:46:73:44:f1:de:60:6d:21:af:d9:3b:10:a7:
                    da:18:b9:d3:bf:60:46:c6:58:79:ed:bb:d1:63:ca:
                    fe:b9:73:52:34:d7:14:07:71:e2:24:e3:6e:74:30:
                    cd:94:a1:d6:b4:fc:7b:63:28:c6:7f:77:4f:10:41:
                    ba:29:4b:7d:49:03:ff:6f:17:fe:ff:87:18:4c:86:
                    5c:45:06:80:88:06:50:3c:35:67:32:88:98:bc:83:
                    25:82:8f:02:ce:e1:29:f0:e2:ae:fb:e4:0a:f8:c1:
                    89:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E9:1E:1F:25:16:29:A8:0E:6B:A2:A5:CA:1A:9E:4A:AB:11:8D:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/ac571f27-2d55-35a3-88f4-63a0b9c60c25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.8.0/23
                  173.199.29.0/24
                  173.199.38.0/24
                  173.199.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:fb:62:1c:3d:c0:22:ad:5a:9f:e9:f9:f5:b2:92:4f:ec:35:
         dd:39:b2:b1:83:d0:8f:6c:81:01:b6:90:a1:4d:a4:d6:d5:24:
         19:cd:ab:36:9a:87:af:b4:1f:e4:df:de:c1:b1:22:04:5d:fe:
         b4:6c:96:b0:52:4c:cc:34:94:06:27:9f:cf:1c:2a:c7:60:62:
         f1:9e:8b:1a:3a:26:49:c1:17:72:2b:ae:dc:57:ec:0f:a8:d0:
         97:51:30:df:1c:3b:9e:af:be:ed:7e:49:cc:cd:b0:65:ae:b3:
         42:5f:60:f7:04:f9:a4:7e:d5:04:5e:7d:1f:6b:ba:f3:df:5f:
         e9:d7:19:45:5f:a9:5a:e0:d8:98:bb:8b:96:4f:b8:a2:4a:4e:
         eb:57:cb:c5:db:44:83:8e:1e:b0:b6:86:ac:8d:63:d1:a3:14:
         1f:ab:43:c1:2e:81:32:be:59:1b:a6:a8:63:b3:ca:8e:4a:ea:
         9e:58:df:c8:3a:cc:a5:30:78:c3:28:7d:0e:53:8c:15:46:8e:
         f0:7e:61:94:80:bc:48:e4:ac:0d:54:c6:a2:e6:0e:05:d9:0c:
         18:88:2a:5f:1a:f0:1b:11:09:99:ed:08:f0:89:14:11:43:2a:
         3b:9e:58:07:0e:92:67:2b:37:d3:8c:53:b3:71:75:2d:08:76:
         f1:f2:f5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:43:40 2025 by rpki-client