Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d46f89b5-55b9-3f1d-a3b1-da4414b06a84.roa
File:                     d46f89b5-55b9-3f1d-a3b1-da4414b06a84.roa (raw, json)
Hash identifier:          Hc/03W2dwaLlwIdZz6QK7q/JzL279ME+RvjUjb+hw/w=
Subject key identifier:   2C:7F:65:C0:6C:52:E0:B8:9F:82:C8:80:52:FA:34:9D:35:E5:F8:1E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B79CA6FA5C958B927954A7CC0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d46f89b5-55b9-3f1d-a3b1-da4414b06a84.roa
Signing time:             Fri 10 Oct 2025 13:28:24 +0000
ROA not before:           Fri 10 Oct 2025 13:28:24 +0000
ROA not after:            Thu 08 Jan 2026 14:28:24 +0000
asID:                     19905
IP address blocks:        173.29.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:ca:6f:a5:c9:58:b9:27:95:4a:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 10 13:28:24 2025 GMT
            Not After : Jan  8 14:28:24 2026 GMT
        Subject: CN=2fdece52-d312-44cf-94c7-fa4d73b24f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8e:45:8a:5c:64:6c:f9:7e:59:7d:79:b2:30:
                    8f:bc:07:e3:57:ce:9c:b6:ea:7f:f5:19:35:95:30:
                    07:e9:62:5e:5a:6e:97:a6:29:3d:65:7e:2f:15:a9:
                    7c:96:ec:be:36:3b:b7:1d:25:c1:42:ef:b9:b2:e7:
                    a3:f2:ea:d2:8f:1e:be:3c:da:c0:c7:fd:f6:2b:71:
                    b9:86:6d:6f:ee:f5:24:c1:99:a5:b4:82:ee:55:28:
                    1a:20:6a:ee:a1:b0:7d:ef:5e:fd:73:03:a0:be:af:
                    ed:0f:12:4c:ef:af:dd:0f:6d:32:3d:59:be:4d:4b:
                    12:e5:10:4c:f4:98:f9:9f:57:16:31:1b:f1:5c:7b:
                    24:4e:8d:96:0b:9b:5c:b1:ee:51:d1:c1:e8:46:70:
                    74:d7:6b:d3:9c:0a:11:88:80:19:48:96:1a:df:a9:
                    c9:e7:52:d5:bd:c1:0c:ef:4e:4c:c6:c4:4d:3f:8a:
                    e5:dc:66:db:5b:ae:1c:ad:ee:85:4e:47:0e:40:74:
                    3f:5f:2d:44:7b:2e:ee:56:e0:5e:17:df:13:a1:d2:
                    ce:35:7f:41:c6:3b:cc:02:9f:56:b7:54:41:4a:16:
                    1f:df:2a:7a:01:5c:ad:3b:d7:ae:6c:b2:92:2f:1a:
                    8c:7a:dc:96:db:c0:79:47:e6:f0:51:44:e7:e4:6d:
                    54:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7F:65:C0:6C:52:E0:B8:9F:82:C8:80:52:FA:34:9D:35:E5:F8:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d46f89b5-55b9-3f1d-a3b1-da4414b06a84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.29.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:2a:a0:fb:fd:46:9f:8c:f0:9a:26:56:f5:fb:63:aa:48:7f:
         e8:81:a6:cc:19:e5:d0:c8:e0:42:ca:9b:cb:5a:b5:65:3b:98:
         0d:11:44:c5:b8:d7:99:f4:e1:97:25:16:7f:73:9b:0c:52:a1:
         31:d7:a7:46:46:78:87:f0:5f:09:5f:b2:bf:94:e6:8f:8f:ee:
         e0:6e:fe:77:3b:dd:8d:3f:71:40:25:e6:f1:39:23:9c:a0:77:
         cc:e3:5d:2b:ca:e4:99:fa:c3:f3:88:8e:47:35:43:9d:2f:18:
         0b:31:df:60:87:4e:c0:70:05:16:49:15:24:b3:b4:1c:74:68:
         65:d2:a4:29:b4:61:17:3d:24:85:a3:df:bc:81:c8:3b:09:a6:
         59:71:f1:d4:c5:77:09:68:b0:c8:03:7c:11:2c:24:64:90:92:
         3d:95:7b:36:f6:d4:64:20:f6:43:2d:af:1b:d8:b6:7f:8c:07:
         5c:c6:48:35:89:95:e2:c5:3d:14:ea:8d:05:b1:84:51:71:ed:
         c4:c2:a6:0b:ea:12:dd:2f:63:59:0c:62:99:04:0f:0c:94:0f:
         13:05:3d:bc:1d:31:11:68:99:a6:8f:f4:ba:45:15:0a:a8:65:
         83:22:74:c2:7f:10:95:ef:da:9c:83:2c:00:64:a6:9e:39:dc:
         dc:8a:fa:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 03:00:36 2025 by rpki-client