Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/2580fcf7-f952-3b13-8c40-9f20098d0edb.roa
File:                     2580fcf7-f952-3b13-8c40-9f20098d0edb.roa (raw, json)
Hash identifier:          szkGvHsfkpoiC5x7khH5N/LfF1Aw8cq3Jiqp1EpWer0=
Subject key identifier:   74:34:D5:2C:BE:1A:D1:19:F8:F6:E0:FD:A9:6A:3E:30:80:81:25:5B
Certificate issuer:       /CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Certificate serial:       010D0C9F4328584B13D6AA27179B5870E6EEB200
Authority key identifier: 31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/2580fcf7-f952-3b13-8c40-9f20098d0edb.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     47050
IP address blocks:        173.224.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:aa:27:17:9b:58:70:e6:ee:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=b990bdaf-c673-4de8-a374-ddf797577c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:dc:41:bc:d8:ff:dc:ac:41:9f:7f:7b:00:df:
                    ad:b3:2e:17:6e:ff:28:f8:f2:27:1c:5f:1a:60:1f:
                    43:00:e0:bd:a5:a2:4f:42:9d:78:30:0e:1d:da:97:
                    eb:b2:47:8c:03:d9:a6:6b:b2:fd:6a:a5:a1:b5:ea:
                    3a:16:33:ab:10:92:b7:15:e5:b0:c9:da:68:46:cc:
                    05:6c:d6:f6:91:00:0e:7e:64:51:63:46:fe:ac:df:
                    21:67:f1:eb:c0:95:21:80:d5:55:88:b6:38:95:21:
                    9a:b4:ad:14:17:6f:e9:3b:6d:f3:0d:1e:64:44:83:
                    fe:43:96:b7:07:c2:a9:c2:04:09:af:95:81:19:bf:
                    a7:2c:2c:d7:c5:1e:ba:08:2f:65:eb:73:d4:36:17:
                    85:5c:7f:4e:b0:15:a1:28:4c:7f:55:63:c0:80:84:
                    5b:82:80:ef:d8:9a:97:54:b1:14:07:39:88:02:40:
                    0d:a3:cf:6f:33:4a:cf:cd:e5:df:85:58:82:20:25:
                    53:2e:ac:fb:49:7b:ba:e5:1e:6d:e1:be:b9:c4:3c:
                    59:46:1d:32:6b:10:ee:65:01:fe:65:1d:a7:cf:a5:
                    f9:2c:83:50:c3:d0:eb:d7:a0:fd:a0:7a:00:3d:f1:
                    b3:83:e5:b8:2a:8e:74:df:27:0d:ee:65:75:b3:94:
                    ff:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:34:D5:2C:BE:1A:D1:19:F8:F6:E0:FD:A9:6A:3E:30:80:81:25:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/2580fcf7-f952-3b13-8c40-9f20098d0edb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.224.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:a3:29:df:00:3f:26:81:2f:0d:14:d0:fc:b3:b1:42:c8:de:
         85:e8:af:22:47:ff:a2:66:fe:03:fe:84:f5:d1:20:cb:64:14:
         cf:8d:15:f3:3b:71:7e:57:85:d3:09:da:b4:e9:07:2a:0c:14:
         57:c7:78:80:3e:17:5e:6c:57:c7:7a:0c:ad:e8:52:3a:4b:5b:
         1f:fd:e1:36:3f:06:dd:19:8b:32:ac:04:c9:b5:4d:11:d0:c6:
         bc:12:3d:09:7c:43:a4:24:9e:65:65:43:81:c6:f3:ed:9d:51:
         4d:22:c6:3f:73:64:ff:32:26:59:96:2a:7b:75:79:08:e3:a8:
         6c:33:d0:78:92:e1:d9:38:fa:25:7a:97:0e:16:8b:37:eb:93:
         77:b5:7f:e2:33:e1:00:7e:62:04:c1:ec:26:32:01:1e:19:d9:
         67:35:36:bf:22:9f:39:b4:69:0c:7a:16:c7:83:8c:57:20:08:
         09:7e:37:23:cf:d4:bb:c0:a6:75:57:51:f1:c5:6a:3e:ed:8c:
         e2:29:eb:e1:c0:d3:b1:53:d0:e8:c5:2a:3d:11:67:43:fe:67:
         5e:2e:0c:2e:4e:ea:b1:b4:1e:0e:d1:a8:60:8b:d6:eb:55:78:
         9b:81:dd:ab:d6:5b:d5:c2:18:64:b5:bd:e0:f0:42:6a:d6:ad:
         8f:03:2a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:12:04 2025 by rpki-client