Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/0b27cfcb-f09b-3b45-90d8-a84c60580bc1.roa
File:                     0b27cfcb-f09b-3b45-90d8-a84c60580bc1.roa (raw, json)
Hash identifier:          eja8fKejvhzbuMVqBvKCbNK6H6cDkCN8EyaYv/7YORA=
Subject key identifier:   C3:04:BF:24:FC:45:93:4F:2E:62:56:14:63:07:B8:60:4C:59:E2:4B
Certificate issuer:       /CN=3ebba851-73dc-4c81-9c85-edb63b33b305
Certificate serial:       010D0C9F4328584AF521712B0C128441CA39BA00
Authority key identifier: A3:42:73:1D:17:E0:73:0A:39:C2:4C:9E:F9:F5:EA:8E:BC:C5:71:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/0b27cfcb-f09b-3b45-90d8-a84c60580bc1.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     40523
IP address blocks:        192.41.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:71:2b:0c:12:84:41:ca:39:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebba851-73dc-4c81-9c85-edb63b33b305
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=553a5d85-cd79-4a26-b764-23789e57b626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:70:31:5b:a9:21:1b:81:1a:4e:14:92:1a:9d:
                    c0:84:0e:1a:33:9e:67:0d:15:84:8b:8d:ce:ca:25:
                    f5:71:8c:c0:85:33:b2:18:66:65:f7:57:31:b9:52:
                    a5:bf:9d:ca:08:9a:b5:67:0a:38:94:5d:f2:d5:9a:
                    48:7f:62:1c:a6:7c:81:d0:0f:6a:1c:ff:2f:90:29:
                    bd:5b:33:ea:7c:8d:00:d0:e7:8a:e4:24:5c:4b:29:
                    7b:a9:7e:07:ea:05:10:7a:e8:4b:aa:a6:e4:f9:32:
                    36:25:95:7e:b2:c6:72:63:0c:d8:92:a3:74:3e:24:
                    3b:3c:19:2d:9b:65:5d:a3:b0:4e:12:95:68:0f:da:
                    9a:9f:58:56:6d:6f:f9:ef:c3:b4:5f:11:56:b9:60:
                    e0:c0:78:14:b7:70:db:7d:b9:98:75:b7:ae:23:5d:
                    2e:51:4a:5a:9e:2b:ed:70:4f:ce:c5:f4:25:00:6d:
                    9f:35:06:3b:ca:d7:cc:e0:83:82:b4:5f:de:f4:6d:
                    4b:5f:4f:66:80:e1:81:be:13:01:48:cf:6d:04:55:
                    2f:86:ed:7a:78:e2:5f:4c:06:42:a3:22:a8:43:62:
                    e0:83:84:3c:ae:c2:23:08:75:20:05:e5:4d:4b:d6:
                    5d:81:84:de:c9:33:5b:fd:80:1a:13:f8:3b:8f:97:
                    00:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:04:BF:24:FC:45:93:4F:2E:62:56:14:63:07:B8:60:4C:59:E2:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/0b27cfcb-f09b-3b45-90d8-a84c60580bc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305/3ebba851-73dc-4c81-9c85-edb63b33b305.crl

            X509v3 Authority Key Identifier:
                keyid:A3:42:73:1D:17:E0:73:0A:39:C2:4C:9E:F9:F5:EA:8E:BC:C5:71:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ebba851-73dc-4c81-9c85-edb63b33b305.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:34:d2:34:95:64:ed:20:25:fc:40:98:6d:9d:3f:b7:00:9d:
         86:35:e0:32:69:7e:e9:2b:6d:1e:a9:a0:2f:bf:fa:2e:42:06:
         04:f2:6e:be:23:5f:c7:12:32:89:db:5f:6c:94:78:ad:fe:c8:
         fa:f7:92:7b:6b:67:7f:1e:51:f9:ad:87:26:21:1c:55:a5:93:
         6a:5d:3d:5b:9e:c7:38:13:bf:18:ab:04:a4:ce:4d:75:1b:8b:
         89:3a:f1:92:6f:9b:99:d8:30:f9:1b:98:91:f3:29:22:07:d2:
         1b:68:a3:ed:d7:b3:d6:a8:fc:11:f9:35:2d:16:60:90:93:8b:
         8b:60:13:7c:3a:3f:c9:51:06:e8:b9:54:25:cd:0a:04:8b:e8:
         9d:65:d7:f5:de:af:70:f8:24:5a:23:64:84:0b:58:db:a0:a1:
         b3:b6:ef:55:71:aa:f0:60:dc:30:b4:cf:a2:b4:b8:6e:5a:1f:
         c1:32:db:6e:96:83:e1:83:df:57:5b:56:5b:c5:48:95:5b:2b:
         64:24:a4:b2:61:6c:a7:b3:a1:9b:1a:2d:6e:11:ef:60:cd:c5:
         64:ea:f8:4c:ae:b6:ff:1a:d5:cd:1f:38:80:02:e3:fa:36:8a:
         37:6e:2c:30:29:43:47:28:15:ad:fb:b8:81:4a:98:45:c6:a5:
         72:cc:d1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 12:15:03 2025 by rpki-client