Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc/e3401b9c-1bf9-3a60-be31-0d6fa8b0f307.roa
File:                     e3401b9c-1bf9-3a60-be31-0d6fa8b0f307.roa (raw, json)
Hash identifier:          f2MaFm2FrL0VDOZ4Z+4c6wt5q5Ft2D6TUtgxT1LGkkA=
Subject key identifier:   FE:E7:76:5D:BD:53:28:43:0D:22:AD:64:34:D3:03:81:32:24:F4:76
Certificate issuer:       /CN=a45f8c7b-223d-4018-88a7-ac0de71fddbc
Certificate serial:       010D0C9F4328584B0A115D9AF65CEE6E28BDF180
Authority key identifier: 55:E5:25:B7:50:08:8E:31:0D:E5:3C:33:39:FD:0E:67:E6:BB:A0:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc/e3401b9c-1bf9-3a60-be31-0d6fa8b0f307.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     961
IP address blocks:        205.166.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc/a45f8c7b-223d-4018-88a7-ac0de71fddbc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc/a45f8c7b-223d-4018-88a7-ac0de71fddbc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:5d:9a:f6:5c:ee:6e:28:bd:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a45f8c7b-223d-4018-88a7-ac0de71fddbc
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=f9d4b27b-9107-4c54-96f6-593c81c010bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:53:e9:64:7c:de:1c:8d:1d:97:af:d9:7f:77:
                    33:2c:c6:65:2b:f7:27:15:e4:13:5b:02:db:ef:23:
                    ff:78:f1:96:5d:63:63:bc:f8:af:2c:2c:0e:02:ee:
                    db:b8:59:39:4c:c2:5d:d2:bc:90:a4:0e:28:86:8c:
                    00:10:50:e5:07:2f:57:a2:b9:bd:00:7c:da:67:2e:
                    d4:c3:ac:4f:25:c7:7e:d0:a4:28:b8:ab:83:17:3e:
                    db:ce:b9:3e:41:90:ef:b5:33:5f:16:fd:10:58:db:
                    98:4c:c4:89:00:05:b1:b5:e4:be:8f:8b:20:dc:07:
                    13:70:24:0c:f9:0e:6f:a2:0b:0b:9f:11:98:f2:2d:
                    bf:31:96:05:2a:cb:c8:48:76:73:9a:cf:9f:84:ac:
                    85:4b:b2:bf:e1:d5:d8:71:7b:a2:ee:a1:7f:02:29:
                    dd:ec:0a:9b:39:85:b3:87:a6:dd:66:43:56:90:f7:
                    81:ad:9b:e6:69:48:67:a2:b9:4d:fb:55:53:1e:10:
                    2c:14:d3:43:d5:20:a0:a5:a2:89:1e:c4:f9:52:5d:
                    cb:a5:cc:3e:c0:21:26:21:3d:16:eb:60:10:1c:5d:
                    16:1d:18:26:c3:80:d7:72:70:09:d0:f9:1f:17:a1:
                    7f:b4:6d:2d:fc:9b:27:39:f1:1c:c2:01:5f:97:8c:
                    08:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E7:76:5D:BD:53:28:43:0D:22:AD:64:34:D3:03:81:32:24:F4:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc/e3401b9c-1bf9-3a60-be31-0d6fa8b0f307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc/a45f8c7b-223d-4018-88a7-ac0de71fddbc.crl

            X509v3 Authority Key Identifier:
                keyid:55:E5:25:B7:50:08:8E:31:0D:E5:3C:33:39:FD:0E:67:E6:BB:A0:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a45f8c7b-223d-4018-88a7-ac0de71fddbc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.166.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:0a:71:43:f0:54:f2:f7:92:2a:4d:16:d6:ea:31:97:82:56:
         e9:f6:10:62:f2:ce:7b:04:0c:c1:b4:1f:b7:4e:6b:3a:7a:6c:
         d1:c0:d9:58:1a:af:dd:e8:de:bf:89:79:8c:2d:a1:5e:53:e2:
         e7:c1:8f:e0:59:22:6a:b6:ef:ef:55:76:06:d6:dc:8a:f0:52:
         ca:0f:6f:2f:ac:63:d0:12:0f:6c:c4:a8:25:13:0f:09:70:29:
         0e:34:f9:dc:29:5f:0f:54:e9:ac:95:b6:d2:ad:65:49:3c:eb:
         2e:ad:37:5f:cb:21:87:0d:b1:69:21:ec:25:ce:19:9c:be:60:
         5b:eb:d7:f1:4e:55:b3:5a:ba:0e:60:2a:4b:51:a4:a3:02:e3:
         98:75:8b:10:6f:e1:f1:b7:c8:cd:a5:84:2b:45:c2:bc:a2:b8:
         f6:52:ad:75:93:c6:d0:08:fd:09:38:0b:d2:63:c1:7c:2b:0f:
         ab:7c:b7:fc:34:c4:98:8a:ad:1f:12:79:93:d3:45:69:66:c7:
         d3:d3:d0:da:ee:d7:57:ff:3a:9b:fe:f8:51:14:d4:f9:49:1b:
         d6:59:db:3d:19:92:3c:a7:f0:1e:4e:7e:a7:44:04:56:e9:54:
         f4:5c:8b:7b:90:ec:81:36:97:c3:59:bc:39:19:5e:19:76:ad:
         97:17:e1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:30:08 2025 by rpki-client