Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91c1a825-c546-4358-bf02-8458d881147a/f0d40cbb-7940-3f0b-a7f9-219ea77617f3.roa
File:                     f0d40cbb-7940-3f0b-a7f9-219ea77617f3.roa (raw, json)
Hash identifier:          Lz/PctkOBFai+iBfMZgZJV7MQRoxKMYdO/HgzuwpGCQ=
Subject key identifier:   EC:64:D5:12:6B:EF:7E:45:2A:E8:DE:7D:B6:A7:EB:64:75:42:39:77
Certificate issuer:       /CN=91c1a825-c546-4358-bf02-8458d881147a
Certificate serial:       010D0C9F4328584B970CEEC546100A3987AF4580
Authority key identifier: 29:8E:E1:FE:D0:44:00:33:47:9D:60:61:E3:1C:07:BA:AE:CD:0C:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91c1a825-c546-4358-bf02-8458d881147a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91c1a825-c546-4358-bf02-8458d881147a/f0d40cbb-7940-3f0b-a7f9-219ea77617f3.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     26383
IP address blocks:        207.174.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91c1a825-c546-4358-bf02-8458d881147a/91c1a825-c546-4358-bf02-8458d881147a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91c1a825-c546-4358-bf02-8458d881147a/91c1a825-c546-4358-bf02-8458d881147a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91c1a825-c546-4358-bf02-8458d881147a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:ee:c5:46:10:0a:39:87:af:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c1a825-c546-4358-bf02-8458d881147a
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=a5c7c19e-9575-4393-9795-5ce90ec52f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:46:9a:96:21:db:e3:c4:fe:1c:e7:5e:aa:49:
                    34:d3:10:e9:97:a1:b1:14:15:d4:78:98:ef:1b:f2:
                    48:95:84:c2:9c:b8:9d:92:9f:f4:ec:c3:7d:56:c3:
                    38:2d:b5:af:c6:c9:fe:b2:2e:61:9d:ed:35:4c:2b:
                    9c:f3:37:fd:fb:5a:63:bf:a1:03:33:c0:11:7c:6d:
                    67:db:27:d3:b7:7e:83:26:5a:6a:de:c2:a7:b4:76:
                    87:ad:18:1a:b3:91:e2:a2:7d:f7:b7:85:cb:95:9b:
                    fd:cf:fc:35:1d:1d:00:1c:10:5e:03:95:10:84:e7:
                    ba:30:4b:5d:73:c5:86:f9:0c:ff:57:26:af:8f:fe:
                    98:63:16:bd:5a:4b:6c:90:17:55:9b:36:7c:df:8d:
                    1b:bb:2d:f5:c7:5d:5d:33:b1:7f:fd:e0:dd:39:3d:
                    31:48:9a:47:a2:6e:b2:24:ef:68:c7:b8:1f:c1:d6:
                    c0:e1:bd:e5:81:21:cb:59:59:ad:78:37:ab:65:a5:
                    91:a4:cd:62:23:7d:18:28:90:db:1d:ac:de:cc:b1:
                    73:ff:a7:cb:a3:57:fa:47:25:b9:cd:48:05:9c:62:
                    28:c0:5a:7b:fb:71:de:c6:d4:a2:41:e7:85:21:ea:
                    6c:77:78:48:a9:7d:6f:63:1c:1a:b7:e2:92:93:a3:
                    49:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:64:D5:12:6B:EF:7E:45:2A:E8:DE:7D:B6:A7:EB:64:75:42:39:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91c1a825-c546-4358-bf02-8458d881147a/f0d40cbb-7940-3f0b-a7f9-219ea77617f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91c1a825-c546-4358-bf02-8458d881147a/91c1a825-c546-4358-bf02-8458d881147a.crl

            X509v3 Authority Key Identifier:
                keyid:29:8E:E1:FE:D0:44:00:33:47:9D:60:61:E3:1C:07:BA:AE:CD:0C:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91c1a825-c546-4358-bf02-8458d881147a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:5c:18:4c:07:60:6e:76:87:80:b3:3c:2a:64:f8:73:f4:39:
         ae:b2:aa:03:ba:9a:e0:00:1a:8a:29:25:7b:6c:ed:7c:6c:80:
         2c:ac:83:10:6d:9a:02:8e:22:e1:47:4e:b0:b4:8b:f7:2e:1a:
         1a:f6:ef:74:fb:0c:af:ac:f0:4e:b2:b3:5f:63:4d:22:a6:3b:
         6e:35:0a:36:2b:e8:90:0b:2b:45:0f:8c:e2:11:5f:24:2d:ec:
         d8:b7:42:f4:63:d7:45:92:92:52:3d:d8:5f:33:a8:c8:04:8c:
         2d:69:85:e6:af:c6:97:a3:f9:21:ce:25:13:ee:6a:45:26:13:
         0d:7a:82:7f:65:f5:6f:0f:fe:4c:e9:8e:bb:fb:e1:fa:80:f6:
         6f:ba:eb:4b:ae:c7:22:85:1b:53:3e:5d:d4:40:34:9b:7a:1c:
         5e:b2:35:52:83:d6:8a:c4:64:ab:d8:5c:0b:21:db:32:74:9f:
         ef:02:eb:7c:4b:1a:cc:80:9b:cb:6f:db:bc:80:ba:cc:04:bb:
         b4:e3:f7:c1:f8:6a:e4:80:51:b4:80:63:c3:86:ed:38:00:73:
         18:6f:05:4a:67:d9:02:02:f2:d7:f0:af:7b:e6:7a:6a:22:57:
         1f:e9:8f:c6:af:f0:9e:84:e5:f9:21:60:64:f0:88:17:8e:22:
         68:59:25:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 11:58:09 2025 by rpki-client