Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/6ea4ec39-2374-39db-a186-6482c6c3b511.roa
File:                     6ea4ec39-2374-39db-a186-6482c6c3b511.roa (raw, json)
Hash identifier:          iNIFAxDLHFnD4lPVXlztHgAMyCpYO7Vc3kNDFwniwM0=
Subject key identifier:   CD:06:8E:F9:1F:9C:35:FC:40:E4:DB:9A:68:05:BC:C9:67:14:40:8E
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584B5DD1E84051B82EFC49498180
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/6ea4ec39-2374-39db-a186-6482c6c3b511.roa
Signing time:             Tue 30 Sep 2025 13:00:40 +0000
ROA not before:           Tue 30 Sep 2025 13:00:40 +0000
ROA not after:            Mon 29 Dec 2025 14:00:40 +0000
asID:                     62904
IP address blocks:        173.232.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:d1:e8:40:51:b8:2e:fc:49:49:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep 30 13:00:40 2025 GMT
            Not After : Dec 29 14:00:40 2025 GMT
        Subject: CN=d490156d-4856-42ea-b02d-16526c6f3f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:77:be:9f:10:bb:01:e9:7e:a8:07:64:cb:f0:
                    f3:73:50:a8:40:02:be:3a:77:68:d1:3d:ee:35:cd:
                    d2:5a:b9:74:cb:dc:35:a8:3e:dc:9d:70:9e:79:bf:
                    13:90:e1:64:bb:2c:d2:e5:82:56:ea:94:91:7d:71:
                    24:37:cf:2b:c4:29:9e:06:fc:75:1f:bf:01:df:fa:
                    25:c2:b6:74:9f:44:5e:11:19:3d:3f:37:d7:5c:f5:
                    28:34:bc:ab:57:85:41:bc:9c:45:60:e4:13:f3:77:
                    03:db:b3:fa:58:c3:3e:8d:30:d9:03:45:5d:19:6c:
                    c2:99:cb:e1:fe:44:4d:17:76:32:47:5e:04:96:48:
                    f1:fe:17:48:fc:19:12:5d:54:9a:c1:0c:64:f3:8b:
                    f6:25:21:30:4a:78:0a:a6:58:b2:ed:50:71:d4:bd:
                    0f:d7:26:09:2e:d8:18:57:86:09:23:c8:4e:ac:4f:
                    97:08:52:40:3b:df:b7:7a:1b:0b:fc:54:1e:5d:51:
                    de:f7:55:9c:e4:b8:98:d0:5d:23:f5:ce:bd:dd:67:
                    9e:2d:5f:0e:08:d1:fe:37:ed:f9:82:09:6d:a5:b6:
                    68:ad:ea:0b:43:b4:9d:03:fa:3d:d8:9b:b0:b1:c1:
                    ce:c4:71:6d:31:fa:0b:c4:e6:78:f4:70:60:0d:15:
                    c1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:06:8E:F9:1F:9C:35:FC:40:E4:DB:9A:68:05:BC:C9:67:14:40:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/6ea4ec39-2374-39db-a186-6482c6c3b511.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:90:dd:d8:f9:96:2f:42:fe:f9:6a:f1:26:48:5c:55:5d:72:
         db:15:dd:cc:3c:5f:d6:2a:be:6b:d7:d3:15:02:a0:8d:dd:4e:
         ad:d5:55:9d:c5:90:b5:81:e2:ab:70:c6:80:fb:15:82:69:56:
         0a:14:03:f2:80:d0:79:69:9f:8a:d4:da:17:60:ed:f0:42:ad:
         40:71:45:22:f8:23:c8:89:37:7c:91:85:23:ef:a4:be:0e:7a:
         90:0c:c1:89:59:f6:dd:43:61:b1:af:23:8d:2c:04:75:8c:87:
         83:8c:51:54:fd:85:77:19:65:0b:93:2e:44:56:75:42:a6:14:
         9f:16:5b:db:95:b4:9f:1b:cb:e2:d0:79:18:e9:4e:4c:a8:72:
         2e:29:40:c5:1a:04:21:d4:5e:6e:29:a4:b2:20:3a:db:04:5a:
         72:c3:a3:e3:50:ab:d0:2a:ed:06:31:5b:34:9d:39:0c:ee:b7:
         91:29:0e:4e:cf:11:fd:1f:b8:2a:09:7d:76:47:83:d6:be:0f:
         74:3d:e8:fb:a9:1d:af:34:56:e2:62:0f:5e:38:f1:22:d4:ab:
         3c:d3:4c:5a:76:dd:1f:cf:5f:3b:6d:a2:5b:92:d8:44:0e:93:
         fe:38:bb:9f:cd:0c:aa:83:cb:78:3a:97:58:fd:bd:64:60:81:
         7b:0b:31:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:38:06 2025 by rpki-client