Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c1b82c95-4135-3547-8235-aa4128c275eb.roa
File:                     c1b82c95-4135-3547-8235-aa4128c275eb.roa (raw, json)
Hash identifier:          ePBmk7wGnaDnc1Lut+raUinuFRH1hX1Pz+OmiPSvUkA=
Subject key identifier:   C2:01:B8:87:00:E5:D2:C9:BD:01:C7:16:60:70:D5:68:EC:82:36:7C
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584B37AB5FB5E2644A43E480DFC0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c1b82c95-4135-3547-8235-aa4128c275eb.roa
Signing time:             Tue 16 Sep 2025 21:02:27 +0000
ROA not before:           Tue 16 Sep 2025 21:02:27 +0000
ROA not after:            Mon 15 Dec 2025 22:02:27 +0000
asID:                     0
IP address blocks:        204.246.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:37:ab:5f:b5:e2:64:4a:43:e4:80:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Sep 16 21:02:27 2025 GMT
            Not After : Dec 15 22:02:27 2025 GMT
        Subject: CN=39cfde87-a294-4495-814a-65698ea74e61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3b:6b:84:06:e0:8f:bd:9c:f5:fc:40:4b:d7:
                    2d:d8:3e:26:7e:dd:99:fc:e2:3b:42:f0:1c:21:9d:
                    5c:76:49:4d:dc:8f:af:84:0b:f9:e7:a7:a4:ce:a6:
                    93:46:05:53:3f:89:a1:8d:e4:c7:d6:fd:ba:62:66:
                    76:72:3e:18:23:c6:50:8c:1d:fd:63:e5:03:e2:b5:
                    70:c0:7c:ba:96:0a:05:c0:13:27:a7:09:34:c0:f2:
                    58:2a:f4:50:65:b7:f6:14:61:43:27:93:fb:69:4e:
                    c0:6a:25:c5:49:5b:e4:a5:3c:eb:b5:b0:d3:23:9c:
                    b5:98:a7:61:55:9c:39:ac:c3:0f:68:70:0e:01:2e:
                    57:ed:12:70:ee:88:d9:6f:5a:32:6e:bc:b8:81:27:
                    be:06:e8:45:a5:2d:c1:81:9e:5c:65:10:70:76:fe:
                    03:a1:73:bd:68:d8:0c:ab:f4:c6:35:d2:a0:a1:a6:
                    0b:07:32:03:7c:08:5a:6f:95:9a:5a:aa:fe:1a:6d:
                    cd:7c:31:a9:f4:44:85:9c:52:a6:90:d8:85:81:73:
                    54:f1:85:00:f8:28:71:be:71:96:71:28:dd:bc:22:
                    dc:da:65:75:82:40:3e:25:f6:60:50:ad:b0:f2:9d:
                    3e:c5:2a:3b:ff:6a:29:41:c5:22:d1:d8:09:19:b1:
                    d3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:01:B8:87:00:E5:D2:C9:BD:01:C7:16:60:70:D5:68:EC:82:36:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c1b82c95-4135-3547-8235-aa4128c275eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.246.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:0e:a3:4d:44:c5:ff:0c:2f:59:04:e7:a6:c9:90:6f:81:84:
         18:0a:78:e6:6a:cb:6d:45:44:cd:d6:00:9b:71:d4:08:2e:79:
         99:15:35:8a:7d:ce:63:04:fb:71:74:c8:5d:95:46:51:fa:a8:
         26:af:e0:fd:fc:c4:01:46:a6:ba:2e:3a:19:5d:91:9e:05:0d:
         a5:64:26:e2:5c:d6:bf:a5:e4:f6:ee:af:f8:31:33:48:43:a3:
         7d:64:24:1e:32:68:dc:58:f2:b7:df:06:c4:f8:d3:9d:86:62:
         15:6e:00:ca:98:d7:bd:aa:6f:df:07:48:b3:7a:78:34:32:29:
         83:f2:ad:48:c0:8f:44:b1:78:c5:85:f5:6e:c8:1b:cc:e8:fb:
         7a:e4:3c:53:04:ae:0e:09:1b:e4:c6:9f:7a:a1:eb:27:f0:ad:
         48:f3:1d:2d:a3:cf:14:20:ae:eb:62:62:25:d1:69:02:fb:4e:
         88:e1:06:49:ce:b7:1e:f5:ee:5d:e5:79:f2:fc:97:75:b7:6c:
         ab:c7:e5:50:82:4c:1e:42:f5:32:e7:f7:64:2b:7c:72:ce:48:
         f7:97:b2:55:78:be:b9:7c:9e:2b:28:1a:df:02:fc:01:18:7e:
         ce:3f:da:80:84:6c:a4:98:67:bd:ad:76:ff:d5:52:6e:89:59:
         c4:48:35:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 00:16:07 2025 by rpki-client