Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/15c09553-60f2-351f-8873-becfe791f01a.roa
File:                     15c09553-60f2-351f-8873-becfe791f01a.roa (raw, json)
Hash identifier:          4EhAa+tc0LRmHfKHJ6gIso6ymd921jpVtZsa6Gud8hU=
Subject key identifier:   7E:C1:1F:A4:7B:33:51:7E:35:D4:B5:51:D4:F2:0C:BC:79:C5:25:7E
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584B0B76B01A373CBC358D0E1E78
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/15c09553-60f2-351f-8873-becfe791f01a.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     394285
IP address blocks:        174.137.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:b0:1a:37:3c:bc:35:8d:0e:1e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=e796201e-ff58-42ee-9472-3e0bf832f392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:67:32:a2:89:41:02:df:24:df:bc:05:6c:2b:
                    6f:7a:02:92:47:7d:12:bf:52:05:a4:e0:58:da:37:
                    0c:ab:e6:cf:d3:7c:ae:f5:a3:16:11:72:9e:81:a4:
                    8d:66:43:0b:2f:b7:0e:55:77:bb:2e:dc:f7:26:79:
                    e5:0e:49:21:e1:63:5b:ea:ea:59:22:f0:c4:23:d6:
                    97:17:cc:45:27:30:0e:d4:6a:1c:cf:bd:c3:e4:8e:
                    d7:9c:40:20:c9:a4:f2:2a:36:5d:eb:18:3c:e4:34:
                    1b:c2:25:52:42:db:7f:bd:4f:5d:d0:21:e9:8d:df:
                    2e:89:19:43:3c:80:c8:51:f6:c7:eb:a3:55:de:57:
                    86:da:2d:bf:18:c0:18:f1:79:79:c3:6a:e9:4a:ee:
                    50:91:4b:53:55:4f:7e:6c:a5:96:8e:d8:72:52:1d:
                    8f:ad:5e:d7:21:75:7a:f0:b8:22:fb:6d:b6:e2:4e:
                    d6:03:9e:4a:e2:60:e6:5d:f3:59:f2:b1:6e:06:31:
                    f1:a9:c3:bd:0c:c9:29:33:a4:da:7c:23:15:3d:5f:
                    5b:ce:20:63:c9:6c:d9:5e:8f:24:02:51:ab:ee:93:
                    45:38:ce:21:45:fa:ee:58:16:49:c5:5c:df:75:20:
                    10:73:40:1a:7e:42:ff:7d:0f:69:75:68:71:63:1e:
                    82:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C1:1F:A4:7B:33:51:7E:35:D4:B5:51:D4:F2:0C:BC:79:C5:25:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/15c09553-60f2-351f-8873-becfe791f01a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:2a:95:54:e9:d8:ca:3a:75:03:ce:91:19:09:99:44:a1:01:
         7e:e1:e7:e0:5f:70:53:a8:f8:b3:8e:cf:66:69:b9:28:0d:5c:
         a5:29:05:41:a7:5f:b9:cd:a2:ab:1f:94:8a:20:4b:6d:80:18:
         e1:c4:5b:12:60:bf:6d:22:7f:41:0a:bb:71:6d:e6:97:22:15:
         f9:32:50:c4:da:af:c6:38:5c:4c:f6:c6:8c:11:79:fb:d4:55:
         e8:05:4e:7d:1c:63:a2:31:08:e8:d7:44:75:66:0d:8c:5d:a9:
         be:a9:90:d4:4a:79:2b:ac:55:d7:d2:8c:da:99:58:32:7a:b6:
         29:40:c3:1b:c2:13:84:98:fc:96:3c:8c:47:38:ea:8c:94:d4:
         11:b0:39:b5:70:a1:5c:af:ad:89:c6:c8:ba:05:67:22:59:31:
         df:75:57:d9:35:45:2e:02:a0:eb:88:e5:76:a1:c6:da:0c:55:
         67:dd:4b:a3:47:52:87:38:ca:8a:f2:ad:af:17:df:9b:1b:ca:
         13:c0:2d:67:0f:61:cf:d7:42:3d:0b:27:b5:70:2b:26:e6:1e:
         a1:99:98:2a:0f:8c:86:2d:5f:ac:bd:cb:66:0b:3a:bf:fd:42:
         21:db:90:d4:af:7c:06:aa:fb:0c:3a:92:12:8d:80:f4:2a:65:
         07:90:a0:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 15:53:42 2025 by rpki-client