Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/31fbfac3-3eee-330b-b4fc-6a494f86a985.roa
File:                     31fbfac3-3eee-330b-b4fc-6a494f86a985.roa (raw, json)
Hash identifier:          NpRhDwkvT+aB6+flBDGfo50soxM0TUSvze1oX3g/dVQ=
Subject key identifier:   C0:93:18:7B:F4:30:4A:F7:05:A1:C5:E3:F1:3B:7D:7B:6D:44:85:FF
Certificate issuer:       /CN=f40e4177-8831-4c30-83f0-fa2c74173aff
Certificate serial:       010D0C9F4328584B477C9CC52D6D94AAD08F9880
Authority key identifier: 19:D9:FD:6D:F5:8C:FE:30:7D:D1:9A:39:59:39:DC:F3:7B:81:68:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/31fbfac3-3eee-330b-b4fc-6a494f86a985.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     400860
IP address blocks:        207.166.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/f40e4177-8831-4c30-83f0-fa2c74173aff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/f40e4177-8831-4c30-83f0-fa2c74173aff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:9c:c5:2d:6d:94:aa:d0:8f:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f40e4177-8831-4c30-83f0-fa2c74173aff
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=71209883-1e9c-4677-ac1e-f751e50b906e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ed:16:58:0a:03:e5:ce:af:0b:ef:b3:9a:44:
                    c3:ef:e7:00:e5:6f:91:c2:dd:87:af:1a:77:c7:b1:
                    71:b8:46:d9:28:e4:6d:0b:72:1d:25:de:c8:34:17:
                    51:c3:1b:5f:f4:13:90:7b:9c:cc:50:66:bf:ba:01:
                    32:ad:55:9a:a8:85:9c:34:ab:24:c3:3b:14:3f:0c:
                    7f:ba:e4:f6:9a:7c:e5:e8:d4:80:e6:73:a6:9c:f0:
                    70:d2:2d:bc:ac:b7:cf:33:d6:e2:a7:3d:79:2b:a5:
                    62:3d:7e:aa:cd:68:c9:ae:40:74:4b:09:b8:c3:c9:
                    1c:7e:35:c3:54:97:96:c5:21:45:b0:d7:24:b6:76:
                    72:79:53:17:cd:9f:07:5f:19:ff:39:93:fa:57:b4:
                    f9:0a:cf:53:03:5d:a1:1f:a4:0f:66:cb:55:3d:d1:
                    be:16:f0:d5:77:7f:d5:09:bd:d8:76:68:59:9a:25:
                    b7:b7:10:da:b0:f2:e0:c8:e6:66:a0:10:6e:38:23:
                    84:35:8f:0a:a4:0e:34:82:00:da:16:92:98:3e:9b:
                    ac:fe:eb:fd:57:f5:6e:d5:a4:d3:26:0e:04:02:3e:
                    96:24:83:03:e1:02:bd:ea:c5:cc:04:e4:ac:cd:e0:
                    9f:c9:59:d2:00:ac:e6:8c:e9:37:02:73:03:56:6c:
                    c3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:93:18:7B:F4:30:4A:F7:05:A1:C5:E3:F1:3B:7D:7B:6D:44:85:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/31fbfac3-3eee-330b-b4fc-6a494f86a985.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/f40e4177-8831-4c30-83f0-fa2c74173aff.crl

            X509v3 Authority Key Identifier:
                keyid:19:D9:FD:6D:F5:8C:FE:30:7D:D1:9A:39:59:39:DC:F3:7B:81:68:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.166.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:2b:f4:24:24:2b:74:54:90:49:ce:3a:33:9a:30:64:bd:26:
         fd:49:74:cc:2b:b4:9d:e9:f8:58:d6:fb:73:ff:70:25:3d:bf:
         ac:01:18:f2:eb:c4:d5:a5:1f:1b:c4:96:d9:78:91:45:91:de:
         41:1a:fd:8e:11:2e:e4:7b:23:0d:b9:14:22:7e:c6:0a:cd:23:
         18:24:e9:3b:4f:9d:0f:c8:cf:54:81:3e:90:c4:d9:67:7d:ca:
         6d:35:77:56:4e:9f:77:bb:44:06:22:54:52:75:bf:c4:b7:b7:
         35:57:89:c1:3e:ee:ce:61:c5:ab:1a:49:1b:e4:b2:fe:bb:ae:
         f2:95:63:db:f4:36:b7:b2:9c:98:d6:5e:3c:9e:13:6d:33:60:
         39:7e:20:e8:f0:8f:27:e6:08:63:36:ee:e4:c7:af:79:39:38:
         dc:d6:03:e2:6d:f1:7c:a2:e4:97:5d:18:3d:fa:b4:4e:f2:e5:
         d5:21:3e:57:cc:24:85:b9:03:75:0e:da:8a:7f:05:85:16:cd:
         18:21:44:9a:5e:c6:15:3f:61:aa:7f:e6:2b:ac:b1:ba:18:7d:
         10:23:70:0d:34:02:f2:6a:55:2b:d7:50:39:61:b5:51:03:14:
         b5:08:5e:75:af:c3:9e:b5:bc:4d:20:81:92:75:2e:4a:02:08:
         1b:95:fd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:54:16 2025 by rpki-client