Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d16955e-365a-30bb-a7ca-3edabc0c75d3.roa
File:                     9d16955e-365a-30bb-a7ca-3edabc0c75d3.roa (raw, json)
Hash identifier:          2+uGY7AFQX6cKRLkeTteMOCu0+Ue7gy9NVMe0bCWki8=
Subject key identifier:   24:3B:84:D2:AC:3A:CF:79:C7:49:3D:08:29:F0:21:1A:88:F8:85:0B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B66B62275D41CC2BA99EBC140
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d16955e-365a-30bb-a7ca-3edabc0c75d3.roa
Signing time:             Fri 03 Oct 2025 17:27:08 +0000
ROA not before:           Fri 03 Oct 2025 17:27:08 +0000
ROA not after:            Thu 01 Jan 2026 18:27:08 +0000
asID:                     19905
IP address blocks:        173.19.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:b6:22:75:d4:1c:c2:ba:99:eb:c1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct  3 17:27:08 2025 GMT
            Not After : Jan  1 18:27:08 2026 GMT
        Subject: CN=d463242e-163f-4425-93b7-3da87177a518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:35:b5:50:ee:4c:72:a3:c4:cc:89:4f:f5:f9:
                    1c:de:b1:7a:54:85:31:20:fa:e5:f2:72:31:ae:1d:
                    f5:4e:52:cb:22:90:e2:e8:90:9b:74:1c:88:85:a2:
                    62:aa:cf:5a:94:f7:83:33:3e:d3:47:ea:d5:31:cb:
                    3a:7d:5f:39:54:85:38:18:82:c9:cd:d6:34:c8:5f:
                    a8:07:73:51:2a:8c:36:55:99:25:5a:f4:dc:67:85:
                    25:f6:96:08:2f:bd:96:a1:f8:93:8e:d0:64:7f:ea:
                    7b:57:a3:88:be:e8:88:df:5d:d3:bd:a2:42:1b:fc:
                    f0:e4:ba:31:3e:00:62:ba:5d:34:cb:ca:28:28:9e:
                    92:b5:8c:2c:a0:e9:62:8d:35:1c:32:fd:88:39:ba:
                    9d:ef:d2:ec:42:33:e2:54:ea:8f:b9:f8:0f:6e:38:
                    a9:59:6b:7d:3b:ef:a7:1d:e1:66:4a:2e:9f:b5:d4:
                    c7:2b:4d:81:7b:1a:0c:8e:70:f2:66:eb:63:95:bf:
                    73:93:88:69:7f:a7:af:4d:d8:33:96:06:68:50:e1:
                    59:bd:39:f1:7c:89:16:5b:9c:2e:81:64:d3:85:22:
                    c5:0f:b3:53:3c:04:d7:15:c8:60:8d:b2:54:d6:79:
                    55:52:94:4f:1c:ca:23:82:50:71:a4:2d:99:5a:ba:
                    59:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3B:84:D2:AC:3A:CF:79:C7:49:3D:08:29:F0:21:1A:88:F8:85:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9d16955e-365a-30bb-a7ca-3edabc0c75d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.19.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:96:b1:81:19:ad:2f:42:96:76:f0:5b:6d:1e:d9:f6:ac:38:
         87:7c:6a:f5:cb:7b:8d:ea:7a:94:d8:eb:f2:8b:4f:30:86:35:
         f0:49:24:d3:63:10:0a:b1:6f:41:e9:19:ca:ba:64:32:38:db:
         26:0c:c8:f2:2f:4e:a8:09:f6:07:2d:3b:e5:d8:df:eb:34:a0:
         87:1f:51:80:ac:db:67:f0:3c:30:c2:1e:26:0e:5f:fc:52:3a:
         60:26:66:31:c4:14:ca:9d:2e:36:85:e0:15:89:47:d2:c5:92:
         35:bd:3a:02:a4:17:e9:04:a9:bc:38:66:6f:fd:b5:52:0d:1b:
         a9:96:73:c3:12:ae:71:05:e2:45:89:79:9c:a0:99:d3:ad:43:
         36:06:9e:f4:4f:60:29:05:fe:04:03:01:8a:df:9e:c3:e5:8e:
         6f:79:06:eb:28:4f:09:79:9e:3e:34:9b:05:5b:87:82:28:94:
         a7:66:5c:0c:20:06:fb:32:d0:1f:fd:65:1f:64:f1:e7:dc:c6:
         15:0f:c0:62:12:39:4b:7c:90:d3:1f:99:44:c8:6e:82:9b:86:
         03:c2:89:cf:4c:95:d9:69:be:b0:bf:44:b9:b5:e0:66:a0:71:
         dd:82:cb:2d:ef:d1:95:25:95:59:90:cb:26:be:e9:a0:c2:68:
         44:51:87:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:09 2025 by rpki-client