Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/1d61b838-fdfa-373c-b8ed-ddeac4cbc23e.roa
File:                     1d61b838-fdfa-373c-b8ed-ddeac4cbc23e.roa (raw, json)
Hash identifier:          SR/6F+aO7JbG8Op4723fINaCPdfEcn2IOXFqmmwiTA0=
Subject key identifier:   11:AF:31:F9:A6:77:8B:3A:DD:01:6B:FF:81:6B:C8:B2:46:43:AA:16
Certificate issuer:       /CN=ee24f36d-faae-4b96-97ad-782fa99ddc29
Certificate serial:       010D0C9F4328584B0A115FE94A0634DF0CA23900
Authority key identifier: 1E:18:C0:52:32:5D:C0:37:4F:DD:46:87:55:38:86:C0:27:90:FE:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/1d61b838-fdfa-373c-b8ed-ddeac4cbc23e.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     40703
IP address blocks:        168.161.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/ee24f36d-faae-4b96-97ad-782fa99ddc29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/ee24f36d-faae-4b96-97ad-782fa99ddc29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:5f:e9:4a:06:34:df:0c:a2:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee24f36d-faae-4b96-97ad-782fa99ddc29
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=d72e4177-9eb8-453e-b5b9-fc258f43947e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:46:55:63:9d:75:62:b1:80:50:6b:91:b0:92:
                    a8:e4:01:f5:f0:be:12:38:06:6e:36:5b:3e:8a:76:
                    8d:7b:30:3c:46:53:4a:25:ed:38:e1:b0:e7:20:1f:
                    18:f0:12:39:8c:cd:eb:4b:7f:28:00:f2:36:30:6f:
                    9f:ae:5d:84:2d:4d:e5:b3:17:ab:9c:93:a5:d6:0c:
                    4b:99:81:d4:46:2e:5d:d6:5e:40:6b:98:1a:07:55:
                    75:fc:87:db:bf:aa:e9:c1:bf:57:c7:a4:07:13:d4:
                    8d:92:fb:80:75:7b:9b:b1:da:9f:4d:b2:f0:15:4c:
                    6d:17:db:50:bb:08:e7:2d:f9:3c:7c:ff:70:d7:e6:
                    f4:2a:2d:e4:fa:e9:8b:25:e8:38:63:d8:de:6b:36:
                    a5:61:74:6b:61:a9:18:c3:e1:f9:cf:1d:f8:fb:5d:
                    2e:d2:1d:ad:33:a4:5c:cd:73:e0:fc:e2:26:34:20:
                    f5:4e:b4:5a:f0:9d:06:3f:fe:f0:04:ae:eb:79:8a:
                    9a:ec:fa:4c:f5:c5:38:56:a8:9a:c1:9b:38:fa:3a:
                    12:9d:b4:ec:1b:19:46:af:ee:de:a1:fc:2b:6b:de:
                    43:f4:a3:b0:67:0f:00:5b:26:87:26:6e:bb:46:e8:
                    69:4e:17:14:8d:4c:51:8a:8d:dd:4e:52:97:37:a8:
                    a0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AF:31:F9:A6:77:8B:3A:DD:01:6B:FF:81:6B:C8:B2:46:43:AA:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/1d61b838-fdfa-373c-b8ed-ddeac4cbc23e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29/ee24f36d-faae-4b96-97ad-782fa99ddc29.crl

            X509v3 Authority Key Identifier:
                keyid:1E:18:C0:52:32:5D:C0:37:4F:DD:46:87:55:38:86:C0:27:90:FE:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ee24f36d-faae-4b96-97ad-782fa99ddc29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.161.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ab:88:25:79:98:88:76:15:48:33:db:e8:fa:63:19:40:63:
         71:f1:ac:cb:68:95:b7:22:91:b2:39:9e:a0:13:43:00:6d:f9:
         83:f9:4c:56:1a:15:04:ef:f0:19:cd:db:4c:fd:3f:8e:02:31:
         8e:88:b0:3d:47:fd:10:9e:b4:37:99:14:c1:31:d6:ff:fc:ff:
         28:bc:ba:2c:e8:4f:03:71:28:70:77:d0:18:1e:c8:e5:04:a7:
         9a:4f:fb:d6:f7:8a:65:be:c5:d3:5f:c3:bd:1e:d8:45:55:ec:
         27:30:b1:d6:94:8c:eb:51:29:51:9a:2e:43:b3:17:95:3f:6e:
         86:05:8f:c0:a0:b8:2a:86:42:3a:49:aa:83:9b:19:85:54:9d:
         d9:3d:a0:c0:b2:2b:a8:63:cb:a7:8e:cb:be:b8:eb:7b:4f:49:
         73:ca:42:3f:a0:df:6f:3f:a7:ac:79:75:4c:c6:a1:ce:7d:69:
         ef:33:28:bd:e2:73:6b:ab:63:a0:05:b5:0f:e1:ec:6a:2a:03:
         e8:37:1e:0a:6a:bf:c2:c7:e1:d3:94:79:a6:3f:bb:3c:73:c2:
         16:20:ef:71:c3:f4:d0:37:d9:29:e5:ef:b6:97:cc:70:8e:98:
         74:ce:2c:ab:6f:43:39:41:19:6c:8e:39:f4:23:a3:b4:78:75:
         55:c1:a3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 00:23:07 2025 by rpki-client