Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c234103-2a4a-46bc-b849-1904e488961e/b48b1dd7-fa54-3850-994a-15c1b97f8412.roa
File:                     b48b1dd7-fa54-3850-994a-15c1b97f8412.roa (raw, json)
Hash identifier:          0ZN+YKTGX0pKrFGxGufOOA0xdlHTK84W7VLp71TnirY=
Subject key identifier:   F7:DC:54:9B:84:3D:AC:01:15:AA:EE:79:C3:EA:46:75:DE:38:1C:C2
Certificate issuer:       /CN=0c234103-2a4a-46bc-b849-1904e488961e
Certificate serial:       010D0C9F4328584B5D3ABA6FE0600C4C7EF10B80
Authority key identifier: 6C:AE:6F:0D:22:BD:D6:33:49:F4:6A:05:91:56:2B:56:3C:1A:75:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c234103-2a4a-46bc-b849-1904e488961e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c234103-2a4a-46bc-b849-1904e488961e/b48b1dd7-fa54-3850-994a-15c1b97f8412.roa
Signing time:             Tue 30 Sep 2025 07:56:12 +0000
ROA not before:           Tue 30 Sep 2025 07:56:12 +0000
ROA not after:            Mon 29 Dec 2025 08:56:12 +0000
asID:                     17397
IP address blocks:        199.73.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c234103-2a4a-46bc-b849-1904e488961e/0c234103-2a4a-46bc-b849-1904e488961e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c234103-2a4a-46bc-b849-1904e488961e/0c234103-2a4a-46bc-b849-1904e488961e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c234103-2a4a-46bc-b849-1904e488961e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5d:3a:ba:6f:e0:60:0c:4c:7e:f1:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c234103-2a4a-46bc-b849-1904e488961e
        Validity
            Not Before: Sep 30 07:56:12 2025 GMT
            Not After : Dec 29 08:56:12 2025 GMT
        Subject: CN=570c5728-b394-410d-b7ff-ebd36b3f3dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7a:ea:59:2e:ec:1e:1f:ad:bc:61:07:c5:64:
                    20:43:15:be:d0:75:53:6b:b5:ca:98:ef:66:94:f1:
                    61:aa:1f:9b:f1:36:9d:1e:87:c7:f7:00:d7:d8:fb:
                    27:f7:c1:40:80:fb:5a:67:2c:3c:d0:54:b0:e0:bd:
                    f2:be:e9:c7:da:7d:7b:2d:73:2c:7f:31:7c:ea:df:
                    2b:d6:b0:4e:14:e7:3b:33:16:f0:c0:9d:ec:3a:27:
                    40:ad:3d:f9:41:ab:36:6c:af:03:2b:ec:a9:0e:6a:
                    88:bd:ac:35:87:b0:8e:d3:f4:f4:4b:ad:93:5a:81:
                    8a:c6:7b:a6:99:2f:bb:9a:91:3a:82:c7:f5:5c:5d:
                    33:c7:9a:f1:27:ab:c6:1b:a5:8e:f6:6e:f2:b5:34:
                    d5:2f:46:22:3a:a8:6f:d1:08:91:30:5f:a2:94:01:
                    71:7d:59:2f:cd:7b:a2:6a:15:00:25:42:ca:a6:ef:
                    da:23:a2:f4:33:4f:3e:75:45:4a:7a:5f:6d:b3:03:
                    98:a0:2f:23:47:79:2c:50:b9:55:98:93:52:f5:4b:
                    db:c5:2d:18:61:e3:da:04:fc:4d:35:f1:25:1c:1c:
                    15:5f:c6:85:1d:b7:2a:19:03:2d:4c:f7:bd:5d:03:
                    03:d1:68:02:76:18:61:21:27:57:82:f3:f8:6f:24:
                    de:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:DC:54:9B:84:3D:AC:01:15:AA:EE:79:C3:EA:46:75:DE:38:1C:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c234103-2a4a-46bc-b849-1904e488961e/b48b1dd7-fa54-3850-994a-15c1b97f8412.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c234103-2a4a-46bc-b849-1904e488961e/0c234103-2a4a-46bc-b849-1904e488961e.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AE:6F:0D:22:BD:D6:33:49:F4:6A:05:91:56:2B:56:3C:1A:75:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c234103-2a4a-46bc-b849-1904e488961e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.73.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:2d:da:29:e0:87:71:07:06:b1:3a:3f:7b:86:55:ee:b8:4d:
         37:13:e4:b2:0c:36:b7:9e:e0:b7:c3:5b:b7:e6:26:55:58:21:
         1f:b0:8a:18:b5:3d:f0:7a:97:43:fb:de:d5:17:2d:7f:8f:eb:
         58:4c:c1:f7:2a:7a:7e:9a:6e:15:d1:2e:0b:11:8b:31:aa:e2:
         3a:7d:53:4e:c8:ff:44:52:3f:da:d3:ae:4e:ff:56:81:7b:c5:
         bb:f4:1b:89:a9:d1:f8:70:ad:95:58:ba:69:2a:77:c1:ea:59:
         d1:c3:41:fe:55:94:82:c5:53:77:07:04:07:b0:95:f6:2f:22:
         14:2a:0e:dd:50:ee:de:08:46:40:61:0c:63:01:ad:78:01:08:
         b4:d1:3e:e1:df:70:93:a6:d3:0a:c2:29:20:96:78:4e:4f:a1:
         59:a8:22:56:f4:23:50:43:1b:49:39:1b:14:03:23:c7:5b:06:
         69:c7:73:83:07:49:a4:71:dd:a1:8c:14:50:69:8e:e6:fe:15:
         70:eb:e2:08:41:d8:4b:a4:2f:33:cd:23:26:a7:89:f2:9e:20:
         95:dc:99:0e:33:99:bc:0a:a4:03:64:4c:8e:b0:4e:64:e3:74:
         91:09:10:34:49:05:2b:73:0c:c1:11:d7:d2:c1:de:e3:ba:e4:
         10:c2:8f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:13:11 2025 by rpki-client