Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a975a81c-bc25-3450-a356-fd9d9f94312c.roa
File:                     a975a81c-bc25-3450-a356-fd9d9f94312c.roa (raw, json)
Hash identifier:          O0KxKUV/dxmzJhGhPh8bSUz48Xzuu3W0tRPztercl6E=
Subject key identifier:   14:12:28:67:34:D9:97:F3:2A:59:D6:1D:93:B8:A8:4D:F3:87:E9:61
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B7A0CCF6B312304C6C0888400
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a975a81c-bc25-3450-a356-fd9d9f94312c.roa
Signing time:             Fri 10 Oct 2025 15:42:08 +0000
ROA not before:           Fri 10 Oct 2025 15:42:08 +0000
ROA not after:            Thu 08 Jan 2026 16:42:08 +0000
asID:                     19905
IP address blocks:        173.21.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:0c:cf:6b:31:23:04:c6:c0:88:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 10 15:42:08 2025 GMT
            Not After : Jan  8 16:42:08 2026 GMT
        Subject: CN=048352cf-8c57-4c30-9949-3ace4459e4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7f:78:36:c6:b6:a5:c9:f4:3b:98:ee:9e:03:
                    66:36:36:38:9b:c2:e6:7b:37:25:65:21:b6:d5:cd:
                    5c:68:c3:57:c2:be:dc:18:93:08:24:c9:78:37:23:
                    17:8b:b1:5b:65:4f:b4:0c:48:dd:f8:8b:4e:ca:3e:
                    8f:4b:46:ee:d6:1d:d2:a8:96:62:bd:51:bc:33:df:
                    bd:ce:4e:09:69:f4:3d:dc:91:7a:b7:93:c9:28:58:
                    a4:42:2e:dc:a7:95:c8:06:30:0c:18:0e:10:e6:92:
                    6c:c8:8f:a9:92:86:6f:95:11:da:cb:cf:53:a9:f8:
                    8c:d6:9d:e5:c1:01:d0:9c:6b:99:ee:38:d3:f5:f4:
                    bd:82:dd:21:0b:b5:46:f5:1e:9a:86:fe:5f:f9:ea:
                    14:da:63:f3:88:bb:66:44:dc:3c:30:72:2c:39:30:
                    db:73:b2:c7:12:64:30:fd:6f:b0:53:63:fd:4d:d0:
                    6d:4c:5b:03:cf:9b:c3:25:9e:f7:2b:f9:cd:d3:7d:
                    32:1e:04:bf:89:a2:79:4d:7c:2c:6a:2d:6d:29:41:
                    df:07:df:4a:78:b0:2a:87:26:e1:d9:f7:6b:ed:3a:
                    c9:74:38:51:64:2d:d9:5e:f0:4c:d2:79:88:28:ea:
                    fb:76:71:3f:22:39:ff:54:f6:6a:2a:84:5c:c0:14:
                    ed:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:12:28:67:34:D9:97:F3:2A:59:D6:1D:93:B8:A8:4D:F3:87:E9:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a975a81c-bc25-3450-a356-fd9d9f94312c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.21.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:80:39:6a:c7:a9:3f:27:c1:35:ac:7d:11:35:eb:48:68:ab:
         27:b4:77:bb:be:d8:17:43:fe:07:04:b8:3b:ac:d9:a0:e9:b0:
         db:30:ac:65:e0:7f:f7:40:23:aa:aa:fa:e3:b8:ca:a2:98:af:
         a4:67:bd:4b:cd:a3:59:77:53:7d:06:ea:44:02:60:00:ea:1c:
         7f:06:76:c0:81:0c:4e:0f:fa:ad:d4:86:61:93:5a:ce:4b:7e:
         b6:a5:db:ca:0a:5e:c6:f8:9b:42:46:c3:ec:9b:aa:72:b8:7b:
         97:d3:1f:7a:95:1d:29:ae:fd:e2:bd:3e:3b:91:59:5b:e4:27:
         ee:34:46:06:f5:c8:bc:17:53:dc:e4:60:a2:2b:dc:f7:fd:a3:
         0a:b0:8d:e3:f0:a7:91:6b:af:35:57:99:01:6f:0c:e3:23:77:
         d8:8d:81:0e:a2:c5:43:a7:1d:b7:24:5b:06:ff:2a:db:d5:21:
         9d:8c:a2:65:94:66:c1:a7:e4:92:73:5f:c0:0c:3a:9c:59:1c:
         70:51:99:14:9b:b7:87:3c:65:94:d6:6e:ac:64:4f:55:56:36:
         64:e4:c2:13:43:10:5b:c7:76:83:54:ac:ba:85:b9:80:f8:d7:
         12:73:80:15:b3:0a:94:9f:6e:8d:a5:1e:6f:1b:6c:bd:7c:3a:
         6f:f6:0f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:45 2025 by rpki-client