Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/0ad7d478-4c06-3292-89e1-747777b4506a.roa
File:                     0ad7d478-4c06-3292-89e1-747777b4506a.roa (raw, json)
Hash identifier:          rnIF2q/nlQwnQE5497tp8gN3N9ikaLV7rU/XGuiaUB0=
Subject key identifier:   C8:EA:99:27:20:59:F7:20:16:48:50:17:9F:4B:A6:09:8A:03:22:E0
Certificate issuer:       /CN=937a6fc8-35c3-4151-aa2e-2513420f9344
Certificate serial:       010D0C9F4328584B2A2C33C972E42831A3192200
Authority key identifier: 6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/0ad7d478-4c06-3292-89e1-747777b4506a.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     13720
IP address blocks:        69.174.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:33:c9:72:e4:28:31:a3:19:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=937a6fc8-35c3-4151-aa2e-2513420f9344
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=83d2626d-d3c3-4a02-98c9-1e62a2d217c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f0:a4:5b:74:10:2c:f2:90:b5:1f:44:f9:e3:
                    e7:62:4f:d1:35:bf:27:44:93:fb:97:b3:6b:b0:b6:
                    ee:fb:21:cf:6a:19:91:42:58:2b:fe:ac:4a:ad:d5:
                    74:b0:fe:03:78:9e:cc:d2:37:3e:6b:12:f4:41:77:
                    de:da:d9:22:6b:a4:04:52:4e:9c:d9:d3:79:2d:7d:
                    5f:74:53:d4:77:cb:75:cc:36:ac:40:6b:16:74:e2:
                    64:60:34:87:90:dc:bd:eb:c5:70:5e:f9:24:79:c7:
                    a1:4c:b7:b1:a5:ae:8c:08:b5:9f:f6:30:9a:79:2e:
                    59:29:c6:aa:2e:9a:92:07:37:f0:7e:94:e7:70:33:
                    19:0c:cf:1d:1b:07:ad:df:4b:5d:a4:c5:6b:de:e9:
                    ce:a4:b8:ca:39:12:26:07:e7:66:fa:10:02:8a:00:
                    07:05:05:1c:a8:e4:75:5a:2a:89:ed:fc:d9:eb:7e:
                    09:89:ad:b5:6c:c2:db:b7:b6:5c:eb:06:fc:37:d0:
                    44:f5:7a:34:2c:da:b8:6a:35:03:02:51:ab:35:e0:
                    94:78:b8:96:92:ce:13:ce:76:e4:dd:2e:ec:73:24:
                    a1:aa:d3:44:8c:f3:66:78:ea:a7:12:3c:31:61:12:
                    26:6d:5f:86:88:83:4e:51:26:7f:89:f7:9c:64:13:
                    a9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:EA:99:27:20:59:F7:20:16:48:50:17:9F:4B:A6:09:8A:03:22:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/0ad7d478-4c06-3292-89e1-747777b4506a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344/937a6fc8-35c3-4151-aa2e-2513420f9344.crl

            X509v3 Authority Key Identifier:
                keyid:6A:1F:E6:4E:1D:16:39:6D:86:6E:99:3B:A8:64:29:AE:C3:4E:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/937a6fc8-35c3-4151-aa2e-2513420f9344.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.174.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:4a:17:3e:f2:09:8a:d7:a2:72:ff:a0:39:a9:79:56:d0:5c:
         8b:55:f1:76:76:10:d0:da:92:65:cd:4c:86:58:bc:7a:71:e3:
         10:f6:47:6c:d6:9f:a6:0e:cb:b2:f8:94:b0:02:0f:47:f0:5d:
         d2:f3:92:49:05:d7:e2:b6:02:7a:97:c9:9c:19:08:6c:75:c4:
         5d:67:c2:b5:89:b5:ad:23:6f:e0:97:22:f5:d5:fe:56:52:68:
         f8:cb:58:8d:6b:6d:e8:19:98:ec:41:4f:cd:6e:7f:17:57:f8:
         31:60:c7:3f:55:e4:e4:97:6d:b8:ef:7a:25:a8:da:84:74:b0:
         68:5d:64:fb:04:6f:ec:c9:fb:05:f5:0a:b9:6f:02:75:20:d5:
         a6:c4:54:77:7d:a0:9b:94:96:29:44:38:b2:f9:c4:da:9e:05:
         de:71:a0:f0:1d:de:95:8e:a8:b4:37:38:5c:bc:18:7b:2e:6a:
         46:99:6f:2d:1d:d7:ea:7e:09:76:b3:28:a0:cd:e0:53:ab:71:
         f8:3c:22:c5:91:b2:53:dd:08:63:42:cb:14:8d:6b:09:70:41:
         f8:2d:60:c1:c6:9c:77:c6:19:da:3c:72:25:56:07:87:10:e9:
         6f:08:07:8a:af:25:98:d7:12:18:96:c7:51:c6:bb:41:39:c8:
         94:7a:78:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:47:03 2025 by rpki-client