Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/923d10f4-214a-3d9d-bdd9-d06f363baa32.roa
File:                     923d10f4-214a-3d9d-bdd9-d06f363baa32.roa (raw, json)
Hash identifier:          54/pIJRc1YHMzqJ8yE4eCwso18VQhcx+7Qhx2kIjW0w=
Subject key identifier:   FC:BE:DD:4C:CA:9D:4A:34:25:15:C9:98:D1:FD:DE:AE:FA:A0:CD:2C
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584B20673A980952015F2C2FB200
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/923d10f4-214a-3d9d-bdd9-d06f363baa32.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     3257
IP address blocks:        173.44.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:67:3a:98:09:52:01:5f:2c:2f:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=d88796b3-6e45-4ae6-a0df-8a659e7aa875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:44:3f:7b:db:59:52:6c:c9:66:84:95:3d:78:
                    69:0d:c9:e8:b2:23:94:3d:f2:31:cc:f7:de:6b:ab:
                    f3:5f:19:2a:08:ed:a8:46:6c:ec:ff:62:a8:dc:fe:
                    39:95:e1:3f:04:aa:fe:0e:4d:60:1e:02:db:b0:19:
                    cb:8e:9b:a4:f0:2a:36:5f:89:13:e7:00:c1:a3:57:
                    3d:65:b7:7d:56:6e:6f:fb:f9:5f:b2:80:ca:37:88:
                    53:bb:f9:e2:56:c7:72:35:3d:66:22:72:cf:36:21:
                    0e:2d:03:71:63:60:f3:4c:82:78:3f:19:7a:bc:cc:
                    64:3c:be:72:a0:31:d0:11:69:87:c2:0d:ae:d3:b1:
                    38:e8:e1:61:d3:0b:48:65:d4:a8:fc:a9:22:eb:87:
                    d3:88:22:0b:a4:8c:41:fa:d7:b3:a8:b5:62:bb:ef:
                    70:05:62:01:5e:61:82:44:51:40:2d:6f:2f:53:8b:
                    fd:21:3b:46:dc:01:d5:41:40:11:87:78:43:50:bb:
                    24:36:a2:11:4c:4d:b3:11:ea:83:f7:4e:9f:de:49:
                    e4:27:6c:f8:65:22:c7:42:7c:38:ca:c9:c3:99:1d:
                    14:55:5a:88:a7:fe:2f:47:7e:9b:09:04:da:f3:f9:
                    8f:aa:97:a2:09:0f:b9:1b:0e:40:9e:74:6c:ef:a7:
                    8d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BE:DD:4C:CA:9D:4A:34:25:15:C9:98:D1:FD:DE:AE:FA:A0:CD:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/923d10f4-214a-3d9d-bdd9-d06f363baa32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.44.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:6a:d5:43:29:0b:ba:a8:4d:2c:43:ae:b2:fc:f2:0f:68:4a:
         2f:fc:a2:92:af:80:97:b3:11:db:09:81:c0:dd:4a:df:01:07:
         68:78:37:89:97:88:71:ab:32:c4:c6:b3:0b:0d:6d:2e:f4:b9:
         ae:49:88:61:f0:9d:e3:a2:d3:b2:16:28:9f:e8:f5:fd:a2:31:
         10:18:73:a5:28:f2:21:cd:22:02:94:46:50:fe:3d:80:8e:4d:
         5f:ba:a1:92:6a:59:8f:5e:0d:37:3d:5f:6b:49:6c:8f:42:df:
         de:a2:b5:d6:93:dc:af:f5:d0:8a:c5:5b:ca:cd:90:92:57:d8:
         a3:d9:1f:74:dd:69:96:f9:8f:da:e0:e9:e8:7e:25:56:f7:ab:
         56:7e:2b:25:d0:36:c7:16:34:28:44:10:c4:0b:09:9d:b9:2d:
         13:02:d2:3e:15:de:4f:74:92:e9:2a:78:36:2e:94:c7:11:a2:
         4b:c8:b1:d7:db:c9:98:71:bb:67:cc:7d:c9:26:cf:eb:73:0e:
         e6:28:c6:1b:95:16:ca:bb:aa:66:8c:df:dc:23:75:fd:91:0f:
         0d:78:65:a9:1a:fc:1d:99:b7:ca:1f:7f:68:4d:ea:2b:07:34:
         45:38:70:64:2e:a1:f2:3e:d7:b6:5c:87:92:03:29:b3:6c:17:
         f2:6a:7f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:39:34 2025 by rpki-client