Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/94bc69ee-3436-3971-ac45-28b7d239b088.roa
File:                     94bc69ee-3436-3971-ac45-28b7d239b088.roa (raw, json)
Hash identifier:          2WwWRnGks3dvoCDVyQZUYZ2zGK+5330HjAl+XoUU6jc=
Subject key identifier:   E5:48:F2:7F:E4:23:F5:71:05:CF:56:78:C1:43:5C:20:96:43:26:1A
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584AFCF8B7D241AAF7007F03FA80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/94bc69ee-3436-3971-ac45-28b7d239b088.roa
Signing time:             Tue 26 Aug 2025 20:25:36 +0000
ROA not before:           Tue 26 Aug 2025 20:25:36 +0000
ROA not after:            Mon 24 Nov 2025 21:25:36 +0000
asID:                     19905
IP address blocks:        173.23.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fc:f8:b7:d2:41:aa:f7:00:7f:03:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Aug 26 20:25:36 2025 GMT
            Not After : Nov 24 21:25:36 2025 GMT
        Subject: CN=8f95dc34-224d-4961-9e79-e96c1bd79f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:70:9f:bd:c9:44:30:bb:f5:12:73:98:72:34:
                    9f:b9:8d:ee:fd:db:eb:11:f5:d3:9b:36:e8:f6:0c:
                    8e:f7:a9:bc:c8:39:e1:b3:13:5c:63:0a:09:ef:7e:
                    00:17:86:ff:e1:bf:f8:ac:5e:d5:45:9a:28:20:73:
                    45:42:67:39:c3:e5:08:64:d1:c7:8e:90:5b:00:e4:
                    a2:7f:82:81:a7:15:87:ea:9e:14:6a:2a:bb:9d:6e:
                    9b:10:a9:16:4a:7e:53:f2:a1:77:21:18:04:84:96:
                    04:ea:fe:db:92:81:97:39:e2:15:ef:61:62:3d:6e:
                    5e:ae:6a:88:e4:06:00:6c:18:cd:96:fe:7f:a0:f9:
                    52:bc:a4:0d:ee:d1:2f:be:5b:25:9a:19:b3:cf:3b:
                    04:d0:b9:35:ef:6f:97:99:26:ef:e8:67:e3:d0:51:
                    97:3a:74:a7:71:f7:e6:67:ee:1e:8c:a4:75:4c:64:
                    f2:28:dd:d0:2b:d2:b9:91:ec:ae:80:bc:41:f2:c5:
                    3f:7a:f2:dd:1c:ab:87:70:cc:bf:c7:cb:af:05:31:
                    da:d0:bb:be:79:a9:80:f0:49:9e:28:de:82:c9:45:
                    93:55:7b:24:8f:60:dc:13:12:f8:a0:bb:60:1f:61:
                    f1:83:17:aa:72:b9:2d:6f:a4:e3:ae:31:6b:ec:8e:
                    f1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:48:F2:7F:E4:23:F5:71:05:CF:56:78:C1:43:5C:20:96:43:26:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/94bc69ee-3436-3971-ac45-28b7d239b088.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.23.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:f8:b9:fb:f0:8b:3e:79:03:d8:dc:62:2d:5c:01:d1:a1:c8:
         d1:4d:28:9b:26:58:e2:ef:1f:c9:8f:09:b9:f2:35:6b:b4:74:
         17:45:8c:09:e7:4b:a8:b4:5d:54:15:89:21:8b:25:d1:9e:b3:
         c2:cf:f3:48:86:7a:18:ed:c8:0b:c2:4b:36:c7:f6:7a:99:33:
         3b:f0:16:9a:64:92:e4:fd:df:2f:7e:53:fd:9e:51:44:eb:e0:
         c0:6f:61:59:51:41:eb:8d:a0:33:3a:ad:4f:b4:43:30:b8:c9:
         c0:56:bc:51:73:ab:f5:69:7c:77:60:41:62:10:50:41:1d:5d:
         b5:07:4c:99:ec:4d:df:53:54:90:97:6e:09:9c:48:52:21:25:
         c7:8f:67:51:86:23:f3:b9:59:f9:77:15:75:89:a6:06:1d:92:
         37:69:2c:1b:e7:d3:af:82:da:0f:89:6f:5b:79:d6:81:a6:4d:
         a7:52:be:70:30:90:9a:1f:76:89:4e:46:b0:47:23:8b:00:1f:
         c3:21:d1:4b:0f:ef:3e:4b:16:cc:e4:78:62:7f:4b:ea:78:ce:
         73:c2:47:1e:13:35:79:d0:e6:46:dd:ba:d7:4e:5a:8a:6e:5e:
         07:7e:f3:ca:aa:c5:5d:e6:6f:b4:e7:4a:f6:c0:d8:4e:f0:60:
         5c:8a:5c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 05:28:24 2025 by rpki-client