Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0e2b7497-02c5-3e8b-95db-92064bbc8c3b.roa
File:                     0e2b7497-02c5-3e8b-95db-92064bbc8c3b.roa (raw, json)
Hash identifier:          yp77+AGPmJqPVfTC1N/GKZyUlcn18J125vXPi/FYrT4=
Subject key identifier:   14:9D:E8:28:E0:CD:33:47:13:78:A8:B4:4E:6C:BF:54:91:7C:E2:89
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B79CA7EFE6AA5873B117BF380
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0e2b7497-02c5-3e8b-95db-92064bbc8c3b.roa
Signing time:             Fri 10 Oct 2025 13:28:31 +0000
ROA not before:           Fri 10 Oct 2025 13:28:31 +0000
ROA not after:            Thu 08 Jan 2026 14:28:31 +0000
asID:                     19905
IP address blocks:        173.31.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:ca:7e:fe:6a:a5:87:3b:11:7b:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 10 13:28:31 2025 GMT
            Not After : Jan  8 14:28:31 2026 GMT
        Subject: CN=fa87fc4b-1be9-4cd3-a6d8-91527115dc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2a:2b:6a:a6:a7:85:c6:b8:cb:cb:e8:d3:94:
                    54:1d:fa:3f:82:c7:b3:46:f2:8c:f1:ee:5d:8c:8e:
                    7a:cc:87:7d:19:07:77:4d:cc:91:da:12:35:dd:9c:
                    e9:0f:22:89:d6:f7:ab:ae:4d:5e:fc:76:0d:7e:5b:
                    e6:40:7f:78:d6:96:69:a7:f5:76:fc:50:0c:26:5b:
                    50:fc:d3:f3:67:6f:60:99:db:48:be:d9:8a:c6:bd:
                    a0:44:a7:a3:6e:61:fc:26:8d:20:6a:23:f0:61:b0:
                    fe:14:db:dd:fd:59:ef:83:82:53:1f:7e:0c:1d:54:
                    8c:8c:c9:03:04:8a:4a:0c:c7:76:be:fe:2f:15:42:
                    f7:0d:6c:45:82:a7:0e:af:5b:7f:76:f0:cc:86:fc:
                    d8:a9:da:47:03:0b:45:68:e4:a1:11:0a:14:da:7f:
                    d9:1f:3f:7b:09:e2:77:c4:f0:4f:fd:95:ff:fb:6f:
                    28:c7:e7:52:98:5a:1f:95:7d:34:ac:7d:b0:3f:d7:
                    9e:87:34:83:a7:83:5b:f0:e1:6f:11:6b:33:0d:dc:
                    b1:98:90:7e:32:54:cc:79:4d:07:ec:88:46:5b:40:
                    19:76:bf:d8:6c:a6:b3:58:ac:ea:02:25:5b:5f:81:
                    f5:f3:39:1e:5e:c1:ce:ee:03:8b:45:fd:dd:ef:c0:
                    cc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9D:E8:28:E0:CD:33:47:13:78:A8:B4:4E:6C:BF:54:91:7C:E2:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0e2b7497-02c5-3e8b-95db-92064bbc8c3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:55:9a:42:91:a5:ea:96:0f:7b:66:73:ce:83:0a:31:ba:1c:
         ab:e8:03:c7:f3:37:84:91:8e:2e:56:22:51:b3:f1:e9:81:2d:
         86:31:1d:36:d0:19:fe:cf:19:00:61:f8:c5:b1:ec:07:1e:87:
         72:ff:71:10:69:34:eb:ac:f3:50:3b:1d:0c:d9:d6:3b:2c:52:
         89:b3:73:cd:a0:62:d8:d5:7b:19:d0:24:73:3d:a1:1b:23:d5:
         f1:fe:20:86:a3:9d:38:4b:4a:9a:d6:c2:5e:07:0c:26:58:a0:
         bc:98:46:6a:e1:7a:92:2f:14:80:99:9d:64:04:f6:76:e1:ba:
         0b:ca:5c:21:b2:54:83:49:54:17:18:fe:3a:75:2e:85:94:b0:
         83:a6:eb:26:81:c3:df:56:ba:a6:b3:7f:56:aa:b3:53:6c:19:
         67:d2:f4:a3:0a:b1:90:4b:b3:30:c7:b9:3a:07:11:ee:8d:29:
         b7:ff:e7:6a:15:ba:1c:05:48:9e:e7:59:88:aa:22:bf:47:9d:
         fa:05:c9:95:89:cc:8b:26:b9:fb:53:4f:19:fd:16:a1:9e:76:
         4e:32:81:dc:82:e9:89:56:3f:39:98:83:d7:d9:7c:25:f4:38:
         04:a2:3f:d9:55:55:86:8b:8a:3f:24:d3:ac:79:c9:b1:90:72:
         eb:31:2c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:40 2025 by rpki-client