Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/17b3e816-c34c-3fb7-afb7-db8c23f5b073.roa
File:                     17b3e816-c34c-3fb7-afb7-db8c23f5b073.roa (raw, json)
Hash identifier:          bN7PHwQin9izoTxdadimcfLKETGRaVvq1y1dqP/za34=
Subject key identifier:   5A:62:1E:12:3A:F1:12:2D:AA:3E:5A:5C:61:87:05:4A:A8:84:A0:AA
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584BAAD3530DA5BA84973B0B1C80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/17b3e816-c34c-3fb7-afb7-db8c23f5b073.roa
Signing time:             Tue 28 Oct 2025 03:00:55 +0000
ROA not before:           Tue 28 Oct 2025 03:00:55 +0000
ROA not after:            Mon 26 Jan 2026 04:00:55 +0000
asID:                     29752
IP address blocks:        199.190.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:aa:d3:53:0d:a5:ba:84:97:3b:0b:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct 28 03:00:55 2025 GMT
            Not After : Jan 26 04:00:55 2026 GMT
        Subject: CN=06bd626c-a34a-4dbb-8cd7-f113770c85a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:50:4b:f4:bd:79:7d:ab:7e:43:26:21:4e:52:
                    17:a9:32:64:24:6e:bc:01:7c:79:e0:2f:97:0d:38:
                    e7:cb:cd:ff:8c:f8:92:db:1a:31:80:32:a1:5e:f2:
                    98:b9:cd:b7:40:fd:ec:61:61:94:f6:5e:aa:8b:e5:
                    d9:77:d3:1f:c7:c8:2a:88:e4:0d:35:63:9e:1e:05:
                    d4:c8:07:62:22:0d:40:01:82:fa:08:3a:dc:f1:0b:
                    c6:d6:64:86:8a:63:3e:ab:b5:c8:2e:e7:19:d8:8b:
                    45:80:44:b3:1f:f2:b1:bb:8f:3c:c0:ab:b8:82:dc:
                    3d:44:d5:48:78:e6:4f:06:7a:c8:36:49:16:aa:7e:
                    97:01:2a:05:19:18:9b:82:a6:56:e6:7f:56:56:21:
                    66:b3:e5:27:e0:6d:5a:95:26:02:da:02:ae:cf:61:
                    a0:fa:f5:f1:b0:9e:98:87:c1:fa:48:57:1d:cb:d0:
                    b9:53:f5:c9:98:6c:dd:77:15:89:3f:99:b6:f9:9f:
                    fc:71:f4:f7:31:f3:1a:b6:19:a2:b3:5c:fa:62:2d:
                    16:bc:00:d7:a0:5d:8e:2a:6d:57:db:5f:d7:3f:a0:
                    c7:ff:44:42:c6:03:da:13:27:a7:39:df:0f:49:d6:
                    87:44:06:db:e0:24:8f:2c:5d:a4:c5:d5:4b:3a:d7:
                    f4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:62:1E:12:3A:F1:12:2D:AA:3E:5A:5C:61:87:05:4A:A8:84:A0:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/17b3e816-c34c-3fb7-afb7-db8c23f5b073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.190.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:27:18:c4:bc:d2:75:ae:30:b5:85:05:70:7b:96:d5:cd:06:
         b3:71:b2:a5:08:4e:e2:0b:c2:f8:0a:7c:ec:18:91:d9:92:69:
         e1:04:e3:1d:21:21:3d:23:cb:d6:26:41:1e:64:96:76:2c:64:
         16:7b:10:59:91:38:58:87:d9:2f:5d:49:7f:92:9c:ce:75:6e:
         c5:6d:46:33:58:67:3e:81:fd:14:52:a7:ef:41:cf:ff:46:76:
         0f:9f:8e:8b:5f:bc:7f:fa:20:82:fc:56:48:8f:b5:2c:09:6a:
         66:87:c0:9e:1f:ed:c3:dc:01:42:75:9f:04:93:f9:01:48:ef:
         ce:d7:ee:bc:b3:c4:a1:23:7f:c0:22:0e:cd:d3:39:67:cc:90:
         a8:24:7e:ca:b1:a4:6c:4f:be:1b:d1:44:8c:cb:56:f5:a7:f9:
         84:62:be:d5:95:2d:ea:ff:f5:a5:08:e7:e0:ac:85:5d:67:e0:
         bd:82:83:13:b9:6b:d9:e7:ef:d6:28:21:4e:3e:1d:77:94:68:
         5e:4c:5a:fe:94:54:08:18:52:26:24:b4:7c:f5:13:4f:80:29:
         b2:e6:0e:44:19:e7:56:22:f7:a3:1d:b5:69:91:0b:ed:4a:c1:
         40:72:50:a2:df:25:b9:c9:01:29:28:6b:04:59:f2:af:32:f2:
         2a:65:5f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:04:07 2025 by rpki-client