Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/a3d697fb-881c-3ed6-a31a-85b5e6882a6c.roa
File:                     a3d697fb-881c-3ed6-a31a-85b5e6882a6c.roa (raw, json)
Hash identifier:          FjdCn+lZPcpKuCwBh+axRZLwukF4isLxYgS/xA1Y8gI=
Subject key identifier:   89:F9:67:51:F2:56:62:A7:BF:C7:4E:F1:56:97:36:5F:8A:A3:56:56
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584B13D6CB47B96338539F97A200
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/a3d697fb-881c-3ed6-a31a-85b5e6882a6c.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     6250
IP address blocks:        137.118.70.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:cb:47:b9:63:38:53:9f:97:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=c1ce1733-e263-4460-95f9-45f001f76b5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7d:3f:65:55:08:22:ba:6f:bf:fc:2a:9d:fd:
                    ed:42:82:89:45:49:ac:36:fe:78:d5:6b:72:ac:84:
                    90:83:0b:b9:d1:00:e5:ab:e8:44:31:54:89:c8:ea:
                    d6:f6:be:f8:6d:01:d2:d2:6d:66:dc:b3:62:9b:5e:
                    64:a3:28:a3:73:9a:2b:91:bf:e0:02:e6:21:21:70:
                    23:20:07:03:8b:1d:d8:ff:4e:e9:ec:41:21:6b:c5:
                    5e:7f:48:69:b1:5a:15:57:fe:cd:97:f6:e1:4d:44:
                    d6:c0:79:af:e8:f1:ab:c6:55:0e:d8:04:ba:78:6b:
                    34:51:3f:a9:b5:b9:17:9c:46:70:2c:d0:ad:7a:4c:
                    c5:f5:10:10:0e:0e:b1:58:01:67:48:7a:db:a3:c3:
                    e0:3b:13:ae:f3:55:8e:60:4f:38:0a:ab:d3:67:9b:
                    b5:a0:66:c0:8a:d9:98:6c:ea:94:f2:2c:b8:f8:9d:
                    48:7e:54:54:e0:e9:a7:5f:59:41:a6:06:c7:6b:49:
                    53:a4:f7:48:53:b1:a9:eb:ee:68:97:0d:77:83:d5:
                    85:d5:97:21:82:bd:58:4f:21:7c:7e:c9:88:fb:19:
                    b7:dd:ae:02:37:e2:df:9b:26:61:32:00:7b:de:ca:
                    79:65:93:57:db:ee:6d:cd:d1:85:9b:3b:e7:b7:6e:
                    d9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F9:67:51:F2:56:62:A7:BF:C7:4E:F1:56:97:36:5F:8A:A3:56:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/a3d697fb-881c-3ed6-a31a-85b5e6882a6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.118.70.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:98:3d:00:a2:d6:fb:31:0c:8e:a2:bb:bb:c3:c8:d6:0a:76:
         ef:36:26:0c:e4:fc:87:43:e3:dd:80:23:f8:9a:5c:f5:05:23:
         6f:e4:8c:a1:f0:cf:63:7f:ea:96:bf:e6:f3:43:ae:ef:62:a5:
         c7:23:b8:7a:51:93:1e:02:4c:e1:29:2a:95:89:59:f2:4a:2c:
         0d:a5:25:d6:09:ca:38:d9:d3:e4:b5:3e:3b:5d:50:1a:10:c2:
         25:19:6a:fe:06:be:b0:46:d6:68:2e:66:d2:6a:4c:67:87:44:
         16:7b:5f:36:cc:fe:3a:d9:03:c1:6d:46:00:d1:99:98:b1:0f:
         e1:7f:47:63:4e:df:db:62:0d:5e:42:ff:e3:e2:77:0c:8c:96:
         64:7c:c1:95:f4:fd:fd:0e:4f:ba:0d:6a:ce:68:cf:78:8d:e6:
         b4:67:fa:de:16:9b:4c:4d:06:9a:50:1c:49:70:31:d1:cf:75:
         f9:51:32:53:84:b5:18:cc:2e:5f:db:7e:f1:20:3f:46:07:d4:
         a7:24:65:13:9a:a2:c1:2b:0a:20:47:a9:86:f3:86:32:d5:dc:
         63:99:55:5b:4f:d5:9e:d3:9a:0a:90:6c:d7:af:c2:66:c5:22:
         35:b0:d4:62:a7:1e:24:4d:4d:e6:10:16:65:8a:b5:b5:74:20:
         e3:ff:56:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 09:41:10 2025 by rpki-client