Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8b770557-3951-3231-8993-b5cc9a14e502.roa
File:                     8b770557-3951-3231-8993-b5cc9a14e502.roa (raw, json)
Hash identifier:          JSl16Pd3X2X4rsvDgDHwleVRmyT2rqMPfrP+BYLS0E4=
Subject key identifier:   1F:B8:EB:ED:A6:76:96:99:12:F4:3A:2A:C7:57:22:6D:82:64:A5:9F
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B6201F8BFEBD85F7685043300
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8b770557-3951-3231-8993-b5cc9a14e502.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     19905
IP address blocks:        173.16.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:01:f8:bf:eb:d8:5f:76:85:04:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=b7949155-7d9d-4a2c-bffc-ddba295d2e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d5:e1:d2:ea:48:0d:ac:5a:3f:b1:53:94:3c:
                    15:65:7b:74:8f:9e:50:ee:0b:da:72:dd:60:4c:00:
                    c3:03:62:b9:6f:7a:06:ce:c6:d3:eb:d1:24:d9:5d:
                    8c:95:06:25:b3:b7:91:ad:29:06:a4:28:bd:e5:c4:
                    2b:a5:26:6b:87:a9:0f:bb:17:96:2f:88:0b:c9:bb:
                    67:77:08:fd:fe:f0:6b:55:87:10:ae:82:da:2a:47:
                    e3:d5:7a:8c:cb:d7:db:87:91:b9:21:a2:bd:79:e5:
                    2a:93:d4:d6:5d:fb:ce:bf:0d:b7:ad:10:38:7e:e9:
                    aa:12:e2:62:79:39:81:66:f2:4c:3a:6a:72:d5:0d:
                    0b:2b:ca:e3:17:05:73:74:9c:2d:70:28:06:8b:26:
                    90:fc:bb:18:9e:e1:66:6a:b6:1e:00:7c:e5:4d:9a:
                    04:ac:86:fb:e1:b8:70:bf:6c:c4:89:fb:3a:ad:95:
                    b7:5e:03:64:a9:22:97:16:2b:28:80:1b:4f:35:c1:
                    c0:4c:fe:07:7d:e7:e4:da:b0:a8:40:80:0f:db:c2:
                    dc:8b:c2:aa:d4:34:9e:d0:2c:1d:99:27:3a:5f:96:
                    f2:f7:2e:18:23:80:4c:01:6c:b2:bf:42:f4:84:ce:
                    b9:88:11:d9:ec:70:97:2c:e5:84:c0:10:27:0a:44:
                    88:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B8:EB:ED:A6:76:96:99:12:F4:3A:2A:C7:57:22:6D:82:64:A5:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8b770557-3951-3231-8993-b5cc9a14e502.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:f9:a3:d1:5f:e2:dc:c6:18:80:6e:4e:56:d3:aa:6d:93:55:
         7a:02:37:6a:6b:5a:bd:3c:c6:b9:32:18:d2:74:36:99:e6:1f:
         d2:90:41:00:a5:f1:44:ac:bf:56:9a:88:fa:35:49:41:86:24:
         18:1b:25:69:7d:75:77:fb:3c:f0:55:7f:39:19:f5:c0:09:0f:
         32:8e:bd:e6:b7:fa:bf:ff:44:50:46:83:af:8f:a0:bb:cf:56:
         ae:db:79:45:3e:a6:7a:fc:3e:1e:0a:3e:c6:49:ab:3b:2a:2a:
         02:71:b8:2f:f5:c6:e5:41:f3:d8:3c:a8:47:db:49:ba:15:98:
         7a:64:27:f7:76:6a:a1:1a:17:ca:02:7a:8a:f8:b4:ca:1a:7b:
         8b:f1:59:43:24:6f:12:aa:5b:35:32:f8:cc:8a:bc:6c:5d:b0:
         cf:f1:47:ca:b9:96:7b:bf:c0:14:64:a1:1f:ce:44:15:61:94:
         e1:5d:89:56:f6:0f:e4:8d:51:e7:c8:d5:f1:71:6f:2c:4c:ad:
         dd:4a:82:4e:51:47:93:7f:46:87:93:83:9c:b0:51:37:d3:73:
         ff:ae:63:7d:99:3b:ea:69:a4:b1:8c:b5:48:07:61:ca:0e:5d:
         5d:7c:fe:7c:a9:54:56:df:c4:79:cc:48:45:9f:b0:c7:90:3f:
         bf:0b:1d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:56:07 2025 by rpki-client