Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/9c3fab74-0b0d-31ce-9e60-48382ddab243.roa
File:                     9c3fab74-0b0d-31ce-9e60-48382ddab243.roa (raw, json)
Hash identifier:          c699RWwjSGXIS9rzzE78Fdd6iOaGzS5Ho+AIGH4Mhz0=
Subject key identifier:   8B:EF:CD:CC:AF:2F:68:06:81:99:46:B2:C5:AB:8B:D3:9D:4E:2C:C4
Certificate issuer:       /CN=2cb23841-08c5-41c8-81c9-076b288743e8
Certificate serial:       010D0C9F4328584B3DB700A7914198F4E2137F40
Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/9c3fab74-0b0d-31ce-9e60-48382ddab243.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     26918
IP address blocks:        204.77.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:00:a7:91:41:98:f4:e2:13:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=4b568d19-297a-47b1-a399-4afb205fa29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0c:49:63:f9:ba:ff:05:fe:b4:6d:2f:79:fe:
                    4b:81:19:fb:27:e7:07:3e:c8:79:97:ae:1c:d4:40:
                    ad:45:b2:60:a1:7d:28:bf:d5:36:00:92:10:17:3a:
                    e3:e9:ac:dc:d4:47:eb:96:14:cd:c4:1e:00:44:c7:
                    64:74:67:09:3d:73:e4:25:0e:09:3f:9b:29:09:80:
                    da:cd:34:db:cc:cc:fb:be:f9:10:e7:e9:41:2a:1b:
                    2e:2c:5b:b5:1b:0c:89:29:f7:8b:46:b6:55:a9:fd:
                    d6:bc:ad:e5:d5:70:79:1b:36:d8:39:6e:24:16:1e:
                    6e:88:74:26:ac:1e:1e:a7:b3:c4:e1:0b:df:f9:ee:
                    99:d3:d9:30:26:b9:fd:35:27:0b:9a:3a:fa:9b:72:
                    eb:0b:1e:22:29:3c:48:73:5c:b7:42:01:f3:32:55:
                    e9:3a:59:19:40:cf:ce:4d:82:bd:33:b9:c4:6c:55:
                    e9:96:6d:9f:71:12:9f:fb:3a:5c:cd:63:6f:fa:de:
                    38:d0:1c:11:de:0d:7c:ea:4b:66:b0:3e:cd:4e:ee:
                    71:bc:42:63:04:55:08:51:87:d9:fb:9b:bb:b0:0c:
                    78:45:06:59:f1:10:ab:60:88:6e:1c:8d:8a:a5:08:
                    2f:6f:76:f2:be:99:6a:79:90:70:18:00:9c:39:1f:
                    73:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EF:CD:CC:AF:2F:68:06:81:99:46:B2:C5:AB:8B:D3:9D:4E:2C:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/9c3fab74-0b0d-31ce-9e60-48382ddab243.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl

            X509v3 Authority Key Identifier:
                keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.77.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:2b:53:8d:2b:dc:8e:af:68:c6:7f:33:6f:55:3b:4f:5a:b0:
         a4:51:12:41:cc:1c:24:77:9a:97:72:18:0b:a8:f3:67:ca:17:
         be:09:88:f4:0c:23:f9:65:37:fd:1f:cf:6a:08:20:6c:de:56:
         04:9f:1a:53:83:41:e6:8e:7b:12:d9:ec:81:a5:16:bc:74:26:
         b7:52:fa:c2:c6:8d:ed:d8:9c:5c:f0:69:a5:e4:0b:e6:79:7b:
         fc:7b:3b:03:65:4a:c1:ae:51:fa:f3:15:c1:02:9c:cb:f4:0e:
         2e:ea:50:ba:13:c0:13:43:63:14:7a:dc:0a:1a:0a:b3:c1:6f:
         53:7f:af:f4:4c:8d:dc:fc:3a:87:20:fc:f2:01:bf:2c:a5:fb:
         40:95:0e:f5:64:2e:36:1b:60:38:22:98:36:86:79:9e:13:d0:
         79:ae:72:1c:06:4f:95:6a:a0:0d:6c:c5:2c:37:35:bf:86:1d:
         04:b0:55:c2:a6:1b:17:30:11:a5:77:7c:a7:e7:c2:5f:99:32:
         fa:a4:9f:8e:53:14:46:df:b0:e3:9b:0c:61:98:5f:fc:9b:08:
         43:7e:14:cb:79:2d:ac:a0:18:58:f6:c7:29:f8:dc:05:3a:7e:
         c8:d8:b4:6d:d2:2c:0e:cc:69:79:25:a1:88:99:91:06:71:52:
         31:3d:56:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:37:23 2025 by rpki-client