Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/30045496-fbf9-3b3d-abd4-a8521a8506ee.roa
File:                     30045496-fbf9-3b3d-abd4-a8521a8506ee.roa (raw, json)
Hash identifier:          qIv0c/85UEf2ivTsulq9abutZhGC9xUcbVwlA7FliiQ=
Subject key identifier:   FF:EB:91:17:D0:96:7B:36:22:FE:F9:4B:A9:4D:96:EF:23:1D:1D:80
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584B7B2200162BA758E1A409AA20
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/30045496-fbf9-3b3d-abd4-a8521a8506ee.roa
Signing time:             Sat 11 Oct 2025 01:00:30 +0000
ROA not before:           Sat 11 Oct 2025 01:00:30 +0000
ROA not after:            Fri 09 Jan 2026 02:00:30 +0000
asID:                     15169
IP address blocks:        172.217.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7b:22:00:16:2b:a7:58:e1:a4:09:aa:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Oct 11 01:00:30 2025 GMT
            Not After : Jan  9 02:00:30 2026 GMT
        Subject: CN=8d5f8060-1cda-48be-831a-aed78afcb246
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:47:20:1c:7f:98:ca:f5:b3:ab:f2:ed:67:a3:
                    d5:1d:01:09:5d:e5:2d:59:9e:10:3b:83:38:35:27:
                    47:ca:a2:09:61:74:89:00:4c:ce:f9:e6:b2:31:76:
                    d6:6b:20:de:2d:d1:62:c5:ba:64:8e:a4:74:2f:2e:
                    e2:bd:79:ce:f7:24:5c:44:ba:08:4e:3f:c0:b9:b3:
                    25:b5:e8:97:d1:ce:3d:86:03:c5:d8:43:9c:12:d1:
                    5f:d6:df:02:87:98:08:be:f5:6d:3a:04:11:23:a5:
                    4e:c5:e1:93:a9:82:9b:fc:50:98:65:9f:f1:a7:31:
                    4e:e8:dd:50:ec:f3:4c:da:b0:6b:38:3b:36:0d:ba:
                    85:93:eb:30:c7:3b:f1:f4:e4:c2:4d:25:5d:fc:2a:
                    37:3e:eb:99:04:a7:61:5a:63:be:fe:99:8d:86:39:
                    3c:1f:1f:8a:63:05:51:c1:6c:fb:81:bc:6d:12:e2:
                    bb:77:0b:0d:17:ee:0c:c2:c6:95:ab:a7:07:36:ef:
                    61:f8:5c:e8:ee:ff:31:39:99:68:fe:36:b4:8d:f5:
                    53:dd:04:d2:16:62:2d:b6:6b:19:a7:63:23:8a:04:
                    30:2e:a6:c8:a8:e2:20:77:1d:4a:bc:08:07:2d:7a:
                    34:4b:6f:bb:87:4e:9e:92:d1:69:92:2d:a3:76:a0:
                    bc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EB:91:17:D0:96:7B:36:22:FE:F9:4B:A9:4D:96:EF:23:1D:1D:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/30045496-fbf9-3b3d-abd4-a8521a8506ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.217.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:0e:78:f6:8f:d6:9c:61:87:8b:95:ce:2b:49:ac:3d:eb:4a:
         e9:35:d1:9c:2c:d8:9f:a4:ec:92:3b:ab:3f:52:43:31:1b:7d:
         44:d9:49:05:b7:a3:7d:5b:06:55:c7:0c:3a:b0:57:3f:9f:23:
         1e:64:90:22:73:e8:a6:ee:76:e2:13:ad:18:88:79:a0:0c:0a:
         b7:f6:a4:5e:dd:71:58:8f:ff:66:cd:96:9b:fb:bf:86:8e:a8:
         a5:85:a9:23:2a:0c:32:3a:22:a8:1f:c5:c2:13:fb:cb:da:a0:
         92:b0:ac:df:52:96:f0:71:54:2f:36:c5:4d:05:10:49:06:9c:
         fe:f2:94:bf:48:dd:44:0a:ee:07:67:17:d2:e8:64:64:46:77:
         d3:d5:33:a8:cf:10:a8:25:a7:1b:5e:e7:0a:2a:ee:37:29:2f:
         aa:55:e9:37:2c:04:1b:41:b9:33:5a:91:25:58:b3:3f:13:e2:
         2c:a7:a4:cf:1f:8a:a9:c1:31:76:c5:fa:eb:71:ad:95:27:a0:
         0c:72:01:c3:f0:58:4e:f5:e8:f8:a2:5f:3b:f4:d7:ee:bc:53:
         e6:89:da:9c:50:e1:10:1d:a9:1c:b3:73:ca:1f:e7:45:56:85:
         41:b7:67:c7:29:7d:16:86:4f:0e:ab:1a:29:f9:15:46:f2:c7:
         53:a6:a4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 08:42:05 2025 by rpki-client