Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/81f948c6-a385-3743-a231-bb8405c49178.roa
File:                     81f948c6-a385-3743-a231-bb8405c49178.roa (raw, json)
Hash identifier:          NAf7kJgRI3GYJ2p/A9y+OtTriE+DceOIhExS8dTJNh8=
Subject key identifier:   7A:0D:06:63:5B:C3:33:EF:0D:3C:BF:D7:97:D2:A5:0A:3A:F8:DF:CE
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B28C6DCC77DD2A00CC9B59500
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/81f948c6-a385-3743-a231-bb8405c49178.roa
Signing time:             Thu 11 Sep 2025 13:00:41 +0000
ROA not before:           Thu 11 Sep 2025 13:00:41 +0000
ROA not after:            Wed 10 Dec 2025 14:00:41 +0000
asID:                     19905
IP address blocks:        173.19.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:28:c6:dc:c7:7d:d2:a0:0c:c9:b5:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 11 13:00:41 2025 GMT
            Not After : Dec 10 14:00:41 2025 GMT
        Subject: CN=43d2d686-dcc1-47e6-b9c0-1276fcd10c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5d:41:ea:98:87:39:1f:79:33:2e:b2:35:a5:
                    67:57:e5:cf:8f:c0:f1:2d:03:7e:5d:a6:b5:12:44:
                    69:bc:9c:3c:a0:8e:60:63:b0:4a:80:e5:78:07:69:
                    37:3a:82:28:fd:41:23:2d:4a:55:eb:cd:a5:78:bc:
                    52:72:0d:c2:f9:d9:54:c6:87:fd:7e:fb:d4:72:a5:
                    11:d6:1f:38:53:c4:41:2c:d3:7c:54:cf:d5:8a:7d:
                    02:14:3a:c6:ab:f0:ca:2c:95:db:08:7e:77:bb:b6:
                    22:2b:22:d5:d5:1b:20:e9:a6:2a:be:41:29:f0:ab:
                    19:eb:86:81:73:a6:45:2a:17:fd:2d:3e:d2:a8:68:
                    e4:1a:28:b0:96:27:37:fd:20:cd:2f:57:4c:6a:ca:
                    75:1f:87:da:f4:c6:76:54:5a:42:f3:9b:45:a3:c0:
                    ae:4c:07:a0:4c:17:ad:44:4e:ce:a1:70:f8:db:2b:
                    21:56:39:11:0f:ea:49:ea:2f:cb:63:f2:c2:78:5b:
                    37:de:74:5d:9d:01:59:11:2e:b5:b7:09:9f:00:3b:
                    a3:6c:ed:6b:6c:8b:86:f3:71:4e:cf:8f:83:57:2d:
                    b2:9b:40:40:c3:07:85:80:c2:3b:a9:3c:5c:5b:a3:
                    12:5d:9a:ff:13:eb:9b:f8:e0:7c:30:af:85:e2:98:
                    81:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:0D:06:63:5B:C3:33:EF:0D:3C:BF:D7:97:D2:A5:0A:3A:F8:DF:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/81f948c6-a385-3743-a231-bb8405c49178.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:4e:73:2a:5d:c1:1a:ad:80:c9:6a:13:3b:96:c3:04:fb:26:
         46:68:29:5a:72:da:92:72:6a:73:e6:d6:8f:cc:8f:c5:1a:18:
         15:c5:60:11:a6:75:40:bd:4b:03:e6:2f:2e:93:7d:d5:2a:9f:
         b2:7b:0f:07:8c:ff:b4:5f:54:47:f1:fd:6f:a0:0b:50:4f:07:
         9b:7f:7d:a7:92:cb:bd:06:95:e2:15:ad:c4:06:c9:8a:f7:93:
         df:dc:27:cc:d4:25:ed:b5:32:44:f4:1f:09:dc:8c:7f:6d:5a:
         3c:36:7c:ba:86:af:e8:c0:b8:3e:82:66:c9:26:a0:59:ef:66:
         bd:0d:7f:9f:53:d6:14:4d:5a:08:77:bf:96:aa:c3:0d:c7:18:
         72:00:0f:48:2b:75:f7:23:59:35:dd:21:67:3b:27:89:ee:c3:
         11:ff:23:ef:77:58:e9:a2:dd:4e:ef:fd:14:cb:b9:2f:1b:0d:
         33:fb:9a:47:ab:9c:2f:b4:8c:12:03:1c:bf:a9:fd:d8:71:5f:
         fd:5d:f2:2d:6c:cd:3c:52:f3:6f:47:38:e5:45:b1:0d:98:cf:
         cd:fb:e3:f1:a9:1f:9d:70:ff:bd:b2:9c:19:74:bd:3b:a4:52:
         5e:02:47:f4:16:4b:bd:1d:bb:79:f9:22:68:ff:2a:53:2e:58:
         b4:9a:5c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:56:17 2025 by rpki-client