Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/c4a5ccae-76fd-3483-b842-be6974d35647.roa
File:                     c4a5ccae-76fd-3483-b842-be6974d35647.roa (raw, json)
Hash identifier:          C0ylVGrH7Vh020wfbHnpZO+qsb8J6yNPC89Ho6ZfBsE=
Subject key identifier:   84:ED:3D:E7:3F:CB:68:6B:9B:59:E2:5D:E6:F1:7A:B3:6E:77:E9:43
Certificate issuer:       /CN=d862b5c6-40a1-4249-a26e-11938a702985
Certificate serial:       010D0C9F4328584B0B76B1C117F6C9DA84FE4680
Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/c4a5ccae-76fd-3483-b842-be6974d35647.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     15257
IP address blocks:        173.195.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:b1:c1:17:f6:c9:da:84:fe:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=eb866ee8-1cf8-4b65-8508-9c7abe402497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:29:38:71:9d:0d:7f:b0:f8:ac:da:46:44:56:
                    c7:82:9b:19:3a:4d:7d:c4:87:69:9e:a7:26:1c:e6:
                    cd:f6:7a:1b:ed:b2:2d:2e:f8:32:3d:35:20:2d:32:
                    62:19:78:68:13:b2:3d:ed:d0:33:10:11:fc:84:04:
                    5f:98:21:e3:03:65:67:a0:db:95:9a:88:ab:4d:0e:
                    d1:8d:91:be:28:2d:fb:b6:bc:d4:03:a8:b9:88:5c:
                    ba:ab:e5:ea:60:8e:07:df:08:89:03:ac:10:c0:f0:
                    46:85:c9:c3:bb:b3:3f:5e:9a:b9:89:e5:8c:3d:57:
                    41:08:e4:cd:16:7c:86:22:27:60:ce:70:d1:d2:52:
                    56:83:8d:d8:83:a8:c5:bd:bf:9c:54:45:ac:d6:2f:
                    03:7b:1d:11:5b:ab:ab:4e:87:f0:17:5d:f8:0e:63:
                    e9:fd:42:1b:5e:63:93:43:87:ec:d3:52:47:ba:aa:
                    11:ed:40:18:6c:a1:32:4a:23:6e:18:6f:2c:b6:f1:
                    7c:97:e7:0b:93:ef:25:a6:49:01:01:f9:21:e4:13:
                    f9:96:c2:bc:6e:e4:99:95:30:13:82:6a:b4:49:13:
                    d8:a7:9c:a7:3d:f0:78:88:42:1a:fb:a3:01:1b:1b:
                    e6:28:83:cc:1f:b3:56:f2:2e:02:59:32:4b:f6:a4:
                    f2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:ED:3D:E7:3F:CB:68:6B:9B:59:E2:5D:E6:F1:7A:B3:6E:77:E9:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/c4a5ccae-76fd-3483-b842-be6974d35647.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl

            X509v3 Authority Key Identifier:
                keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.195.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:2f:ad:5f:88:0e:11:d5:ac:e9:c0:21:6a:78:83:8b:27:14:
         ba:93:6d:15:2f:d9:e3:ea:bc:39:9a:68:79:cd:fb:a9:be:ea:
         25:2e:4d:4b:4f:5f:1a:7a:08:84:a5:4c:bd:88:6d:d0:aa:be:
         d3:03:14:14:85:e5:58:37:4d:ac:a9:5a:6a:40:77:87:df:43:
         d8:21:0a:af:e0:31:fa:72:bb:79:f4:b1:2d:ae:cb:d0:aa:96:
         4a:f3:2c:37:76:0e:da:6c:7c:6b:79:4a:0e:54:b8:18:e0:8c:
         87:5f:da:3d:ba:1a:00:a6:15:63:19:76:6b:0f:53:31:d6:0c:
         90:b3:19:0c:d2:72:c7:71:9d:b3:61:d8:9c:b6:9e:01:13:c2:
         ec:9a:11:38:82:bc:01:bb:34:eb:68:a5:d1:8c:3a:0e:5f:72:
         ae:ef:72:7f:8a:e7:15:1f:9c:5e:2e:f8:1d:17:10:71:5a:82:
         e2:7c:78:d7:88:c0:cf:34:63:2f:4d:43:a0:a6:0f:cd:74:1a:
         62:c6:46:9c:2f:d7:05:7c:52:91:24:7f:d5:be:36:37:51:32:
         58:1f:57:ce:66:22:55:07:5e:ca:d4:fb:dc:01:a9:90:0e:da:
         af:81:d3:37:8e:21:f4:67:53:7c:d6:a4:25:4d:e2:1a:d7:be:
         9d:fb:e7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 02:03:03 2025 by rpki-client