Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b04f3667-170e-38b0-90e2-b80e9d9eddb3.roa
File:                     b04f3667-170e-38b0-90e2-b80e9d9eddb3.roa (raw, json)
Hash identifier:          vb4jo8qLalj+qhbdTf+ngSHXv+T51yToRZrH6qH8J+4=
Subject key identifier:   EA:6D:FA:A5:B4:87:76:FA:5A:10:6A:D4:8A:C5:1E:C9:91:1C:2E:16
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584B6FF7401A5D4FB865CB151300
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b04f3667-170e-38b0-90e2-b80e9d9eddb3.roa
Signing time:             Tue 07 Oct 2025 01:00:29 +0000
ROA not before:           Tue 07 Oct 2025 01:00:29 +0000
ROA not after:            Mon 05 Jan 2026 02:00:29 +0000
asID:                     174
IP address blocks:        173.232.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6f:f7:40:1a:5d:4f:b8:65:cb:15:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Oct  7 01:00:29 2025 GMT
            Not After : Jan  5 02:00:29 2026 GMT
        Subject: CN=13ca146e-1679-4b58-91cd-a49705374fdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:f5:9c:3c:a4:9a:cb:cf:2f:c3:f7:74:85:
                    1f:a9:67:f0:e6:19:f5:37:27:fa:b0:01:5c:06:a7:
                    5a:71:23:c9:b1:54:17:a5:33:a6:40:95:94:c3:18:
                    a1:b4:2a:3b:5e:71:3a:c4:14:03:3c:8b:c6:d8:b2:
                    3d:04:a8:f7:25:36:0e:57:49:f3:20:50:4f:73:22:
                    4f:0c:30:3a:86:6e:2f:75:bf:c6:59:2a:d9:61:b6:
                    2e:94:24:d5:3a:6f:ee:8f:97:96:42:31:7b:95:c3:
                    ef:0a:ff:7e:9d:ef:b2:ab:d3:a1:25:3a:56:8e:3a:
                    c6:a1:c4:2d:c0:da:27:1c:22:4b:c9:b0:26:32:25:
                    25:f4:39:8d:d8:84:70:5b:50:ec:86:fc:f0:4c:ea:
                    8d:2f:76:2a:ce:29:d2:62:e1:a6:5e:a2:10:49:8c:
                    dc:c8:15:1b:fc:b9:59:44:ec:a5:67:3a:e3:42:24:
                    4a:4d:04:b1:13:78:cd:5a:a4:54:f9:b0:a3:fe:9b:
                    bf:29:79:48:2a:e5:3f:9b:d8:6e:c1:ba:5d:ba:3e:
                    04:01:86:61:e4:6b:8d:45:10:30:2e:2f:7e:08:49:
                    ae:11:64:f4:45:1d:20:59:a3:89:0d:a2:07:3e:73:
                    e1:99:5e:44:e1:95:e3:dc:7a:88:eb:92:08:83:9a:
                    4c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6D:FA:A5:B4:87:76:FA:5A:10:6A:D4:8A:C5:1E:C9:91:1C:2E:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/b04f3667-170e-38b0-90e2-b80e9d9eddb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:b6:de:87:6a:9d:bd:70:c6:7f:84:8f:9b:81:ce:ea:8b:8c:
         2a:b4:0a:13:73:6f:53:c1:4d:e9:51:7b:bf:42:0b:0b:8c:ff:
         de:ea:82:20:16:05:84:de:f8:25:e3:39:e3:09:cb:13:b0:65:
         cd:75:74:47:ed:37:2d:15:f8:ed:b1:cf:ed:d9:dc:1a:70:e1:
         9f:c4:9a:09:ec:ec:3b:f9:6e:b6:b5:d4:80:ae:84:3f:29:f7:
         6f:fa:8b:79:01:4f:d6:73:0a:72:11:0d:78:b5:28:f0:81:23:
         bb:44:02:37:fe:6a:92:f5:61:2d:ac:c5:a6:53:a7:77:12:d0:
         06:19:74:8c:7b:9b:a7:81:cb:73:c3:0a:a5:58:59:e8:14:cc:
         d8:0d:a6:03:c1:cf:a9:e4:b4:5d:ab:31:38:a9:0a:85:f7:ca:
         52:1b:58:7a:2a:0f:9f:34:78:7a:6d:57:fc:02:60:cf:97:55:
         9d:12:4a:25:87:b8:e7:80:7f:b9:5e:dd:77:00:2f:3f:68:f5:
         0c:f0:f4:31:a9:25:e1:43:31:59:5b:fa:2b:bd:15:0b:a2:80:
         26:23:25:bd:f5:bc:2e:2a:da:8b:8e:37:be:99:c4:c6:4a:11:
         46:1c:06:40:00:fc:79:f8:72:07:65:ce:db:2c:35:59:ae:aa:
         55:36:78:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 15:38:56 2025 by rpki-client