Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cba96c4d-7d18-3377-b19f-cd6530448bcf.roa
File:                     cba96c4d-7d18-3377-b19f-cd6530448bcf.roa (raw, json)
Hash identifier:          +4aRiu7xD6No54uKUIrOLUcSeZ/LL7iztgZ1N+Gh1zY=
Subject key identifier:   82:F0:20:8C:B1:B4:F7:D9:6F:79:3A:73:93:74:78:A8:73:AE:F3:90
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B475C208981F47D40FAE1AEA0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cba96c4d-7d18-3377-b19f-cd6530448bcf.roa
Signing time:             Mon 22 Sep 2025 11:55:43 +0000
ROA not before:           Mon 22 Sep 2025 11:55:43 +0000
ROA not after:            Sun 21 Dec 2025 12:55:43 +0000
asID:                     19905
IP address blocks:        173.17.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:5c:20:89:81:f4:7d:40:fa:e1:ae:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Sep 22 11:55:43 2025 GMT
            Not After : Dec 21 12:55:43 2025 GMT
        Subject: CN=4ed9a184-e6cd-4edd-939d-578f23bb6475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:91:47:70:4f:b0:47:20:95:3b:04:11:06:0a:
                    bb:ee:6e:4d:d6:c7:d4:12:7a:a0:30:f5:af:1d:12:
                    75:ff:f6:21:f4:58:ee:57:c4:18:cf:ea:47:d9:31:
                    34:9a:cb:f8:70:9c:80:73:79:a8:02:9c:17:d9:00:
                    ce:05:dd:de:6f:a7:f4:48:21:95:64:9b:48:5a:e0:
                    32:61:35:13:d4:15:d3:02:59:f7:05:4b:07:9d:21:
                    55:cc:b0:82:be:7b:04:80:1f:c6:21:66:58:85:58:
                    a8:12:6d:be:9c:bc:9c:cb:b4:b2:99:08:ce:19:4d:
                    a3:c7:6d:ac:28:bc:c0:07:22:7d:8d:68:ed:12:9c:
                    16:67:4d:6b:bb:a2:51:87:d7:a9:97:5c:96:32:58:
                    86:b8:80:7e:05:4d:ed:34:29:d5:05:d8:d8:03:06:
                    15:cf:40:1a:7b:06:e0:8a:f4:fd:9e:69:78:0a:ee:
                    4a:f9:31:9c:56:b9:a4:99:b0:ad:f8:84:c4:eb:4f:
                    fa:88:02:b1:69:2b:72:40:bf:f1:ef:e7:3b:c2:40:
                    de:bc:9f:d7:df:40:34:a7:4e:65:ab:93:11:5a:f6:
                    73:b9:5f:01:ac:07:52:60:67:30:0e:54:ab:06:ac:
                    68:4f:3b:f3:8f:09:60:24:26:0c:d7:46:90:da:7c:
                    69:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F0:20:8C:B1:B4:F7:D9:6F:79:3A:73:93:74:78:A8:73:AE:F3:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cba96c4d-7d18-3377-b19f-cd6530448bcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:28:55:fe:57:78:a5:36:35:0a:1d:29:87:d0:ca:cb:27:9a:
         8a:8e:4d:3b:6f:72:4b:72:b5:11:4e:61:d9:d6:b4:5d:2a:77:
         c2:8f:3e:6a:bc:2a:06:5d:45:8f:16:77:21:c5:55:6d:f1:c8:
         dd:5b:d3:2c:84:2b:6e:60:cb:7e:eb:d9:60:f8:ec:cc:ea:67:
         b6:72:94:30:96:4e:5b:ec:8f:c3:ed:b7:87:99:a6:36:5f:28:
         36:41:75:ae:c9:c3:99:99:5b:13:5b:a1:20:f2:6c:57:c4:d8:
         ce:60:43:f8:c6:dc:1a:0f:f3:6e:02:01:fc:a0:d7:7c:13:98:
         4f:81:18:f6:ed:c6:41:fe:8d:1b:73:c3:dc:3a:91:34:06:1f:
         35:c7:42:79:c3:e6:2e:d0:45:d8:88:48:5e:27:f0:47:b4:8a:
         92:c7:9a:58:4b:77:f8:5c:54:87:a5:90:5d:8a:b5:82:be:8d:
         4f:e9:da:a4:f6:06:21:7f:aa:0b:8c:59:5c:d1:b3:1b:96:c3:
         f5:e6:7f:c9:ab:34:35:7d:f6:61:e0:17:cd:75:0b:f2:bf:b1:
         12:54:91:a3:fa:1d:51:4c:d5:33:15:eb:74:51:b3:9e:b2:f6:
         74:de:50:18:96:ef:d4:44:79:54:98:98:46:6a:23:ee:8f:c7:
         ff:7e:22:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 02:45:33 2025 by rpki-client