Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/e4fa4cf4-cb7c-3815-98bc-7ef83d7860d6.roa
File:                     e4fa4cf4-cb7c-3815-98bc-7ef83d7860d6.roa (raw, json)
Hash identifier:          cN84wulmvaRwvB+P+gxOdMDfUg0kseQl8m13SNIKiYI=
Subject key identifier:   87:22:B3:8B:B5:93:1A:18:DD:94:A1:54:F5:BB:A4:78:96:A9:6C:AF
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584B7A34EDBA2255DC05907DDCC0
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/e4fa4cf4-cb7c-3815-98bc-7ef83d7860d6.roa
Signing time:             Fri 10 Oct 2025 17:02:58 +0000
ROA not before:           Fri 10 Oct 2025 17:02:58 +0000
ROA not after:            Thu 08 Jan 2026 18:02:58 +0000
asID:                     9304
IP address blocks:        173.232.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:34:ed:ba:22:55:dc:05:90:7d:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Oct 10 17:02:58 2025 GMT
            Not After : Jan  8 18:02:58 2026 GMT
        Subject: CN=7e31f4c3-a382-4297-a638-24dbd6d661d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:41:46:23:9a:34:9f:fc:07:33:86:79:8f:74:
                    19:61:98:2b:18:7f:20:8f:19:be:75:a2:a7:0e:e8:
                    b6:a9:6f:12:1c:d5:b0:27:79:4a:e9:99:66:c4:93:
                    97:92:75:e1:10:d4:f1:28:27:8e:45:ae:a7:06:44:
                    82:51:33:e2:f3:2a:ce:28:91:f1:fc:0c:f2:a3:de:
                    be:10:dc:72:06:41:a4:bf:10:72:eb:c9:ca:f9:d6:
                    ca:e1:3c:5c:73:96:28:05:9b:59:6e:64:72:c3:5d:
                    da:c0:96:2a:a0:ca:79:3e:37:08:34:16:50:97:a1:
                    16:f2:cc:32:1d:05:8b:30:ab:39:00:d1:60:18:8e:
                    ec:4c:1a:db:a6:a7:4c:34:d6:24:41:0b:36:76:95:
                    8c:f5:c5:9b:c6:11:81:19:4d:6a:f9:75:bc:9e:60:
                    9c:23:a4:69:9d:bb:af:26:1e:e2:51:86:55:07:d8:
                    d2:26:60:ab:73:f5:cb:0a:dc:42:e2:40:b0:71:25:
                    08:bb:f4:06:0c:d7:4d:78:a6:fd:c0:e6:ad:f9:72:
                    cb:41:36:f9:38:e0:87:06:c9:d0:f5:cf:42:45:5f:
                    87:0d:09:e1:b4:76:8f:08:20:d9:75:dd:da:41:b2:
                    f2:eb:b1:81:28:40:f6:9b:18:f9:da:46:91:2e:8a:
                    73:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:22:B3:8B:B5:93:1A:18:DD:94:A1:54:F5:BB:A4:78:96:A9:6C:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/e4fa4cf4-cb7c-3815-98bc-7ef83d7860d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:18:9c:6b:91:37:14:02:bd:96:12:5f:45:99:97:ce:3e:61:
         21:00:7d:52:3d:82:97:da:65:a6:60:4b:cc:e8:4d:81:bf:43:
         08:03:27:3a:44:56:e2:6d:e4:2c:f9:3f:22:5a:98:ca:a0:3a:
         e3:ce:6d:52:ad:c0:cb:27:fa:2c:c3:2e:04:6f:e2:ef:0c:37:
         31:1e:be:6e:18:85:de:eb:30:b3:a8:ca:5d:a9:62:eb:bc:47:
         ba:57:4a:30:69:05:a8:7e:31:aa:18:5f:79:32:84:a3:86:5d:
         0e:4a:c5:d3:5b:fc:ac:a7:b2:ba:3f:41:89:a6:bf:61:e4:24:
         f2:80:fb:17:b4:00:2e:fb:1f:09:83:7a:82:a3:bb:9f:34:19:
         bd:c2:b3:42:0a:c5:24:fe:1c:4a:86:a7:2d:51:b0:00:23:7e:
         d3:e8:44:44:04:2c:e6:2e:89:a6:68:be:b6:98:24:3c:23:83:
         c6:b5:32:51:6e:97:b5:d2:3e:76:4b:e9:64:12:de:02:8a:bb:
         fe:18:33:e4:e3:c4:c1:d3:e1:a8:e7:fc:1e:a6:be:8c:6b:e9:
         62:5b:3d:ee:c3:69:71:06:66:d5:62:67:ac:6e:fe:fb:2e:60:
         35:2c:46:fd:e6:19:42:da:a7:1d:3b:80:7a:5f:d6:f3:e2:dc:
         10:4c:56:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:24 2025 by rpki-client