Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/761c5231-3c09-3d63-a585-57def094f5d2.roa
File:                     761c5231-3c09-3d63-a585-57def094f5d2.roa (raw, json)
Hash identifier:          prKVTp5lA67cYB5TiJB1Ho3bY13ms/Kga/fVtsC0Wog=
Subject key identifier:   D9:70:5A:B4:61:8E:7E:1E:75:D4:9A:E3:54:2B:49:67:01:8C:73:A7
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B79CA8373840CF7BDC01B6428
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/761c5231-3c09-3d63-a585-57def094f5d2.roa
Signing time:             Fri 10 Oct 2025 13:28:33 +0000
ROA not before:           Fri 10 Oct 2025 13:28:33 +0000
ROA not after:            Thu 08 Jan 2026 14:28:33 +0000
asID:                     19905
IP address blocks:        173.31.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:ca:83:73:84:0c:f7:bd:c0:1b:64:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 10 13:28:33 2025 GMT
            Not After : Jan  8 14:28:33 2026 GMT
        Subject: CN=6750750a-b7ce-4460-8222-fa958a2e3418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:98:5f:a9:68:c0:1d:d0:8c:69:ee:43:ec:ca:
                    a5:a4:a2:07:1a:35:7f:68:5a:a7:b7:3e:0c:67:1b:
                    1b:ff:4c:4f:44:43:25:f5:71:0a:f4:a6:85:df:51:
                    55:1b:a1:a3:2c:a1:72:4a:d6:fc:20:e1:a9:b7:6c:
                    00:a7:6d:ee:ef:b5:7e:80:29:73:87:92:08:05:4e:
                    2c:f8:5f:40:f5:78:87:53:72:1f:07:a5:de:6b:fa:
                    09:49:ec:82:0f:41:0f:ae:b1:f7:60:70:43:fd:f3:
                    38:1c:aa:08:92:2b:ef:4f:5b:8a:c7:79:47:ea:41:
                    ff:dd:5c:40:b2:5f:e1:ef:d6:75:61:2b:7d:fc:a1:
                    8f:d8:4c:f5:a2:07:b3:3b:1f:ac:d2:89:3c:10:48:
                    44:11:30:ce:88:24:09:30:c5:cc:c2:6d:6e:f5:2c:
                    25:70:9a:f3:40:30:bb:3a:a7:69:b4:08:fc:05:04:
                    d5:c3:1a:bb:e3:d4:22:49:88:8a:2f:49:86:80:db:
                    5b:0f:f9:ef:5c:7f:7b:30:ee:3b:90:58:ea:57:30:
                    03:26:97:4c:bb:bc:9b:3d:d3:3a:5f:ec:71:e3:00:
                    51:c3:c3:24:d2:34:d0:26:0d:fa:b4:d3:24:86:23:
                    9d:7b:c5:d6:02:9b:92:c0:d9:d8:9c:af:bb:88:ed:
                    38:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:70:5A:B4:61:8E:7E:1E:75:D4:9A:E3:54:2B:49:67:01:8C:73:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/761c5231-3c09-3d63-a585-57def094f5d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.31.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:0c:34:f5:58:69:74:65:54:3f:c8:fa:c5:b8:4a:3b:d4:67:
         22:bb:ee:0c:ae:a2:86:de:9e:39:6d:43:2c:07:85:7a:cb:c9:
         a6:05:db:82:ec:77:5e:73:54:27:7f:dc:5b:4e:41:50:02:c5:
         c6:97:59:a3:3f:e8:83:33:5a:cf:d6:60:1e:7a:b1:41:01:a5:
         b3:e4:ee:cb:d3:d9:0e:48:76:0d:43:a2:b5:86:c0:3c:b3:9a:
         97:b1:95:5f:d9:49:4e:d8:94:e1:81:77:00:3a:75:79:4d:65:
         fc:90:09:f2:00:17:50:be:ef:b7:27:15:21:56:b5:1a:a9:5a:
         11:89:02:6d:c4:27:11:8a:1d:44:db:fb:ff:e9:a9:07:b9:05:
         14:17:26:08:ca:1c:42:b9:b4:4d:bc:21:21:b9:7f:26:33:bc:
         fc:d1:46:3a:c6:90:33:7f:09:32:70:63:eb:19:cf:bb:53:f3:
         8c:d1:5b:0d:b5:76:53:4c:1b:5f:1a:63:ed:39:f1:87:bd:8e:
         6a:62:fd:0b:1b:ba:43:6e:fb:dd:96:e1:c8:82:b6:2d:06:42:
         79:d6:b6:42:dc:b2:c8:44:0c:d8:34:0f:90:7b:16:aa:6d:ae:
         43:89:7c:4a:55:a2:3d:25:20:64:7b:00:75:4a:d6:a5:c4:a2:
         5b:a3:7f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:07 2025 by rpki-client