Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/53895135-fed1-3426-82d9-07353402cfa0.roa
File:                     53895135-fed1-3426-82d9-07353402cfa0.roa (raw, json)
Hash identifier:          oV/+rFXBv140rcfW9sO1+XgUCQkM63cwDIosmJqsCHA=
Subject key identifier:   68:2B:72:5B:3F:7B:7C:54:16:46:A5:D5:41:5F:2A:5C:B1:0A:43:DD
Certificate issuer:       /CN=1dd142d7-5311-487b-9c11-f16950e4d57d
Certificate serial:       010D0C9F4328584B48E1B0A3D708B18D76C2E580
Authority key identifier: 47:2D:B1:E4:1E:4C:0B:09:C7:5E:2C:AB:35:6C:84:10:8B:80:F6:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/53895135-fed1-3426-82d9-07353402cfa0.roa
Signing time:             Tue 23 Sep 2025 01:00:33 +0000
ROA not before:           Tue 23 Sep 2025 01:00:33 +0000
ROA not after:            Mon 22 Dec 2025 02:00:33 +0000
asID:                     36082
IP address blocks:        173.241.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/1dd142d7-5311-487b-9c11-f16950e4d57d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/1dd142d7-5311-487b-9c11-f16950e4d57d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:48:e1:b0:a3:d7:08:b1:8d:76:c2:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd142d7-5311-487b-9c11-f16950e4d57d
        Validity
            Not Before: Sep 23 01:00:33 2025 GMT
            Not After : Dec 22 02:00:33 2025 GMT
        Subject: CN=5106053e-a070-4f53-9afc-602cc52c880e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a0:bf:34:b4:09:d7:c4:ee:c3:0f:c8:69:74:
                    71:2c:4f:67:07:9f:a5:c8:d2:93:a0:bf:59:ec:5f:
                    e0:34:30:df:77:f8:e8:4e:78:b2:24:ea:88:89:b7:
                    de:25:4d:fe:6b:e7:95:4f:dd:ab:4b:4a:06:2b:65:
                    30:35:41:0b:08:89:62:56:00:40:e2:c7:d4:e8:70:
                    3f:bd:f7:4b:90:85:36:92:ca:7c:9a:23:eb:60:da:
                    c7:13:7e:ee:5b:6b:98:18:6f:de:14:08:a2:d1:3c:
                    ea:3b:a9:02:c9:1e:02:ec:df:a3:10:41:e1:63:58:
                    a2:a5:ca:ad:73:de:0c:34:81:8e:fc:8a:3b:18:f2:
                    fd:28:8a:72:25:f1:ec:20:90:c2:ae:94:3b:64:8c:
                    76:8e:f2:22:55:ee:69:77:0a:f5:0a:83:b0:16:34:
                    f0:c1:68:c1:de:34:9b:66:9c:29:78:01:27:3d:52:
                    f2:47:50:df:11:39:ba:41:e4:49:f4:eb:af:9b:95:
                    65:f5:d0:a8:48:f7:87:35:ae:cb:41:ef:cf:01:5c:
                    60:2c:e3:05:01:59:fe:29:d4:2a:b8:dc:a1:a5:00:
                    80:3f:20:e2:e2:1d:eb:7f:f0:6d:67:cb:13:f2:48:
                    31:05:94:00:6c:46:4b:51:4e:25:21:ba:40:49:5a:
                    dc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2B:72:5B:3F:7B:7C:54:16:46:A5:D5:41:5F:2A:5C:B1:0A:43:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/53895135-fed1-3426-82d9-07353402cfa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/1dd142d7-5311-487b-9c11-f16950e4d57d.crl

            X509v3 Authority Key Identifier:
                keyid:47:2D:B1:E4:1E:4C:0B:09:C7:5E:2C:AB:35:6C:84:10:8B:80:F6:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:a4:35:df:10:e3:7a:b1:1c:d1:31:1c:75:84:a0:e1:2a:42:
         30:0d:07:38:ad:e0:f7:d6:3f:f1:e4:dc:e2:bd:01:4e:58:5f:
         69:68:15:46:29:54:c9:98:2b:fe:c1:75:7b:e5:e1:e3:8e:67:
         e3:30:88:6b:89:6c:20:9a:ce:ca:6c:75:88:d3:03:60:41:75:
         9a:0e:8a:01:92:b8:6e:d3:15:bf:40:86:74:85:09:7e:e8:3d:
         6f:d7:96:b7:55:9b:c3:6b:fc:b6:39:b0:5e:4e:67:d9:01:76:
         b2:c6:24:96:8b:fb:01:ad:b5:ab:d0:01:e2:56:f9:17:d2:92:
         69:af:f1:9d:c9:54:c1:e9:b2:17:b7:7d:d2:3f:0d:83:7b:d8:
         49:78:af:24:02:29:c0:33:db:6b:0f:de:e3:c7:2c:12:40:91:
         5f:39:2d:f2:f3:0a:b5:fb:78:75:68:ba:ab:9c:ad:56:3a:75:
         8c:9a:03:00:aa:18:b5:a8:ee:25:a8:4a:e8:db:c1:f4:2c:f3:
         26:af:a9:f6:c6:34:1b:7c:70:99:32:a8:60:f4:a9:68:81:1b:
         3d:2b:fe:21:fb:77:4b:11:74:df:5c:38:a9:48:64:31:8a:e2:
         05:fe:ec:a4:b4:b0:ad:fb:28:ca:87:6e:b5:fb:3f:ae:8a:a1:
         19:22:70:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:36:58 2025 by rpki-client