Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1452ac5f-507a-3b47-bd00-7a31b77774fd.roa
File:                     1452ac5f-507a-3b47-bd00-7a31b77774fd.roa (raw, json)
Hash identifier:          IST3dq+SHYTmcHYwJdVm641q6OyXlYG9/gzetef85hM=
Subject key identifier:   46:53:35:18:D6:21:B4:B6:14:02:35:48:9F:F6:64:25:C3:FA:BC:53
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B031693692D5EB215D56AE580
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1452ac5f-507a-3b47-bd00-7a31b77774fd.roa
Signing time:             Fri 29 Aug 2025 01:00:32 +0000
ROA not before:           Fri 29 Aug 2025 01:00:32 +0000
ROA not after:            Thu 27 Nov 2025 02:00:32 +0000
asID:                     852
IP address blocks:        173.182.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:03:16:93:69:2d:5e:b2:15:d5:6a:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Aug 29 01:00:32 2025 GMT
            Not After : Nov 27 02:00:32 2025 GMT
        Subject: CN=20b524a1-6161-4346-9f9c-d1102d46c1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:75:eb:19:08:88:e1:34:8a:66:2e:85:36:ec:
                    12:09:c5:b0:6b:f5:b3:32:75:36:cc:30:87:87:67:
                    9f:c7:5f:c6:49:30:b9:d0:14:3d:a6:66:ae:8d:0b:
                    59:3f:4c:22:87:9d:8d:3f:e4:60:6c:a4:66:e9:1c:
                    d9:ff:52:a9:e6:31:00:2b:e3:d0:f7:9c:ae:f2:f2:
                    7b:f4:f1:c6:5a:0f:8a:01:a6:8d:7b:19:1a:b5:83:
                    3c:9a:c4:b6:58:2d:b5:f3:e9:8b:e3:10:f7:ec:b3:
                    55:66:b9:ee:66:e6:d4:8d:0d:eb:c0:10:52:9e:31:
                    57:55:93:40:e1:a6:1c:28:99:53:14:77:44:a9:6a:
                    bc:26:4e:e3:ef:1c:bb:3f:94:8d:b0:21:09:bc:90:
                    83:de:fc:29:1d:8e:08:8d:c2:27:7b:04:2d:af:2d:
                    18:5b:5a:73:e4:04:8e:6c:c6:73:eb:61:45:2f:28:
                    3d:26:be:10:28:75:ce:e0:72:a8:4b:27:16:9f:57:
                    cd:ca:96:a0:97:a4:fc:1f:2e:ba:71:ca:1a:34:84:
                    82:1b:6a:b5:9c:4d:4b:c8:12:15:26:06:12:ce:81:
                    94:22:1b:7a:c3:11:ff:5e:0d:a7:56:ca:78:0b:cb:
                    d5:1b:9a:fb:e6:bf:af:ed:4c:b0:02:d2:50:af:d6:
                    37:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:53:35:18:D6:21:B4:B6:14:02:35:48:9F:F6:64:25:C3:FA:BC:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1452ac5f-507a-3b47-bd00-7a31b77774fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.182.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         f7:42:96:f7:3f:4d:6d:57:f6:d0:12:8b:ed:cf:2e:31:73:37:
         cb:4b:f6:a5:83:b9:ea:23:15:29:86:65:af:5d:aa:20:4d:5e:
         3b:02:ee:4c:eb:78:d3:e1:96:f4:7e:7c:a6:7e:a0:2e:51:47:
         07:91:cb:15:e0:c2:ab:11:de:fa:6c:ae:49:86:c1:14:b9:4e:
         48:56:e2:58:81:08:51:1e:7e:5e:71:60:10:65:f8:5a:d3:9f:
         28:48:90:b3:b8:5c:2b:16:93:0d:90:09:cd:06:5f:b8:75:5c:
         1f:ef:3b:3e:e7:6a:28:58:36:c2:dc:8a:68:63:6d:a3:2b:1e:
         05:a6:84:6c:9e:5e:52:12:9e:ec:c2:a8:2a:96:91:15:1a:4e:
         87:10:ce:6e:9c:c9:ad:d3:9b:eb:20:76:e6:88:a5:b3:4d:3d:
         8f:06:3e:0d:45:b7:60:81:bd:68:a9:2d:3d:be:5b:84:d4:ee:
         fa:38:53:03:c1:94:ae:e3:d1:e5:37:c3:2e:b6:1b:25:10:48:
         82:ac:4a:e9:a6:ba:c1:66:a2:8b:16:67:99:ee:f1:ca:51:ae:
         c4:08:c9:a8:ae:32:73:45:7c:1b:67:03:e0:c2:73:3a:79:90:
         ba:30:12:a8:49:ae:b7:f6:80:24:20:d0:3e:ac:8c:05:66:67:
         8f:68:7d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 22:28:31 2025 by rpki-client