Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/917dd06f-b3c3-3d3e-825f-4c74e7ab757e.roa
File:                     917dd06f-b3c3-3d3e-825f-4c74e7ab757e.roa (raw, json)
Hash identifier:          yuWlLxk3c3u+XyjiiVgOMEvZYYtVPa8hBvhGYlM8JMU=
Subject key identifier:   37:20:39:42:D3:67:B0:5E:28:22:2A:C2:78:1A:6F:4E:70:86:B1:C3
Certificate issuer:       /CN=17499469-12e7-4915-9db8-02bba626b87d
Certificate serial:       010D0C9F4328584B6E91F4E94910214C6EC580C0
Authority key identifier: 6E:89:08:E4:43:38:96:4D:4A:79:D1:ED:FC:6C:82:71:63:3C:26:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/917dd06f-b3c3-3d3e-825f-4c74e7ab757e.roa
Signing time:             Mon 06 Oct 2025 13:00:41 +0000
ROA not before:           Mon 06 Oct 2025 13:00:41 +0000
ROA not after:            Sun 04 Jan 2026 14:00:41 +0000
asID:                     396432
IP address blocks:        194.107.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6e:91:f4:e9:49:10:21:4c:6e:c5:80:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17499469-12e7-4915-9db8-02bba626b87d
        Validity
            Not Before: Oct  6 13:00:41 2025 GMT
            Not After : Jan  4 14:00:41 2026 GMT
        Subject: CN=70c67feb-51a9-4ac6-88b2-7678e2967c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:48:d1:ac:43:aa:34:f4:4e:c1:a7:9a:56:22:
                    94:bb:fb:cc:93:36:96:26:24:a2:99:1f:15:79:18:
                    a2:07:27:8d:4e:eb:1d:33:d5:47:90:b7:55:a4:db:
                    7d:9d:3b:84:aa:61:62:78:89:6e:3d:70:69:9b:10:
                    fb:8f:47:ff:f9:8e:a1:84:2b:70:11:01:07:50:28:
                    20:10:cb:de:12:46:a6:dc:69:70:0a:cf:5c:66:95:
                    8a:b8:71:2a:50:76:85:f1:6e:ad:3e:7f:7a:25:de:
                    98:a9:c3:a1:0d:c4:94:1d:2c:2a:fe:7f:c0:57:ef:
                    93:1a:83:4d:56:b6:76:53:32:ef:35:3f:b1:41:5c:
                    da:86:a5:93:a4:03:5f:7c:2e:fd:4a:44:fd:ed:6a:
                    15:f6:bc:ba:a5:68:ba:b8:56:16:79:3a:fb:28:76:
                    90:b2:46:81:cf:d7:6c:47:76:93:22:e6:ac:af:77:
                    16:ea:40:3f:76:42:ba:f5:95:8c:a0:d6:b0:ab:9a:
                    89:72:dc:a0:80:f3:5a:73:2b:0d:43:31:90:cf:bc:
                    77:20:48:55:db:42:38:0f:29:b8:af:f5:fc:ed:59:
                    9d:8a:f7:99:13:e0:cf:f8:b1:ab:dc:5a:ee:d8:ea:
                    1f:cc:ec:9d:46:3a:32:10:81:97:44:4d:57:fc:dd:
                    05:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:20:39:42:D3:67:B0:5E:28:22:2A:C2:78:1A:6F:4E:70:86:B1:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/917dd06f-b3c3-3d3e-825f-4c74e7ab757e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d/17499469-12e7-4915-9db8-02bba626b87d.crl

            X509v3 Authority Key Identifier:
                keyid:6E:89:08:E4:43:38:96:4D:4A:79:D1:ED:FC:6C:82:71:63:3C:26:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/17499469-12e7-4915-9db8-02bba626b87d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.107.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:15:67:56:f7:94:fe:1e:df:c3:d5:99:13:be:bd:f7:5f:d9:
         4f:6c:55:8f:56:95:9a:80:db:86:8d:18:4d:51:07:b5:90:0e:
         77:80:c9:1c:35:e0:63:4d:b4:5f:f5:d1:13:a9:9c:c3:03:78:
         3f:f8:b6:3e:63:83:57:e0:58:17:6a:ac:ed:cc:fa:0b:b3:cb:
         fc:c7:1c:32:8e:ec:02:53:a6:81:b3:fd:d9:cd:b9:60:2e:74:
         92:47:72:2b:31:cc:92:e9:56:e7:f3:3c:ba:aa:cb:3c:88:06:
         76:1d:81:e1:2c:3a:9d:1b:9c:84:6b:19:3d:3f:e1:8c:34:54:
         23:79:0c:36:bb:02:84:0e:8c:7b:60:08:2d:a3:c1:2e:f4:bf:
         87:b4:96:be:39:54:8e:5e:9d:4f:c6:fd:6a:6f:c2:7e:a8:de:
         e9:1a:fc:5a:ed:9f:2a:9b:24:b5:66:cf:45:50:8e:fb:dd:bb:
         29:1f:23:66:bd:26:bf:6e:46:07:c4:b9:1f:32:a6:31:41:c9:
         0e:a0:b0:3b:ac:40:f6:bd:33:83:6f:dd:7b:06:3f:e4:85:c7:
         2d:03:b8:83:de:0c:80:10:3c:dd:26:5e:27:3d:cd:4e:f5:af:
         fd:ec:35:b9:d0:be:2c:01:36:47:21:6b:da:8b:5f:aa:c6:5d:
         5b:27:37:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:29:07 2025 by rpki-client