Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/240b6f95-075e-3765-ac83-646e1bad1d40.roa
File:                     240b6f95-075e-3765-ac83-646e1bad1d40.roa (raw, json)
Hash identifier:          4p4w+9S1307VttUtjl2rOZjIx4xYcN0lwJ1E0duLb/Y=
Subject key identifier:   A8:68:95:54:3A:7A:01:E4:4B:A0:1B:53:AF:B3:DA:00:1A:19:D4:C5
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584B7F52461E167BE9A013AFD180
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/240b6f95-075e-3765-ac83-646e1bad1d40.roa
Signing time:             Sun 12 Oct 2025 13:00:37 +0000
ROA not before:           Sun 12 Oct 2025 13:00:37 +0000
ROA not after:            Sat 10 Jan 2026 14:00:37 +0000
asID:                     33363
IP address blocks:        107.147.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7f:52:46:1e:16:7b:e9:a0:13:af:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct 12 13:00:37 2025 GMT
            Not After : Jan 10 14:00:37 2026 GMT
        Subject: CN=7473a002-ccab-407d-98e1-b409a19b76fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:40:d1:7a:2c:94:8c:2f:00:eb:8a:42:7c:56:
                    7c:68:57:3e:88:d7:28:11:bc:82:fa:99:0a:9e:a3:
                    57:08:85:22:bd:da:c2:43:70:08:27:ef:a2:d7:17:
                    3c:08:46:fc:e0:94:0c:6c:35:45:4d:cb:10:66:78:
                    b6:52:cf:b2:79:1b:a1:49:85:75:c2:90:30:1a:9e:
                    19:c2:de:a4:95:54:a9:4e:73:48:91:cb:ee:48:82:
                    c2:4c:e1:99:54:1e:7a:8b:1e:75:dd:89:fa:a6:96:
                    60:cb:18:9d:73:4c:45:3e:4a:8a:24:82:8f:34:58:
                    68:42:b9:1b:d1:f6:66:ff:63:1d:73:15:a1:ae:72:
                    85:df:b1:b9:b6:1d:de:43:c4:bc:f9:c0:63:c8:a6:
                    7a:07:9f:4f:f9:46:98:c7:23:2d:6c:ab:07:5d:95:
                    12:24:a5:c9:82:5d:ec:fe:dc:13:5f:c5:4c:6d:05:
                    5e:a4:4f:c7:51:1d:10:eb:21:20:30:8e:2f:8e:9c:
                    9b:70:dc:bc:5b:30:12:30:07:71:1f:a0:3a:44:75:
                    7c:b3:ed:29:c5:6e:d2:85:0b:51:bc:76:35:45:4e:
                    20:5e:55:46:5d:13:36:9c:d4:33:c6:08:29:82:e5:
                    17:d6:48:b4:d4:81:38:09:cd:8d:5a:26:e0:1b:7a:
                    48:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:68:95:54:3A:7A:01:E4:4B:A0:1B:53:AF:B3:DA:00:1A:19:D4:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/240b6f95-075e-3765-ac83-646e1bad1d40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.147.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:10:ca:c7:c5:69:3a:e6:9d:8f:a0:66:c3:82:9c:dc:8f:87:
         1a:ac:f6:a1:7d:b8:12:f7:c0:09:c8:a1:2f:7b:c4:ae:e6:e5:
         67:61:4d:7b:c2:64:74:58:85:56:a7:9a:5a:27:41:28:8b:fc:
         bd:33:9a:79:35:88:72:b5:05:d1:c7:50:fa:67:c3:d8:b0:5a:
         85:06:2d:84:8c:4f:95:43:7b:47:5e:46:f6:fb:76:3f:08:1c:
         df:9f:c1:30:a9:17:65:58:b7:22:9d:f6:65:3c:80:92:ba:f1:
         bf:14:62:3a:25:12:c3:b9:0c:34:52:8a:6e:6e:e2:0e:d3:ca:
         3f:38:f4:d6:ef:1e:f0:97:a0:2b:13:74:e8:3c:e4:63:97:f5:
         7a:13:42:03:3e:57:0c:24:5c:4e:e8:49:59:7b:25:69:4b:5e:
         1a:a4:b2:fe:f5:ed:37:06:d6:bb:18:e3:00:54:d0:5f:87:59:
         65:24:d9:a3:0c:22:fb:51:fa:1a:b4:23:80:89:77:80:6e:63:
         95:0c:cd:6f:48:de:6e:7a:a6:6c:a0:0a:b0:4c:33:36:e4:89:
         36:c0:3e:f2:f0:dd:44:3f:b8:de:f6:a5:29:d3:6c:86:d3:83:
         d8:df:ac:69:cb:56:82:68:44:ce:f2:e6:f4:e2:6f:04:5a:92:
         31:42:54:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 05:07:50 2025 by rpki-client