Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/74564d89-8c64-3bcc-a70f-70303d155fc2.roa
File:                     74564d89-8c64-3bcc-a70f-70303d155fc2.roa (raw, json)
Hash identifier:          +0nxM7ysqdmeK4Ccdol/MEh2dtToBtzTl1teP9wSD80=
Subject key identifier:   56:77:72:5C:3E:C4:87:8E:72:68:4B:67:64:C7:21:62:EE:03:1D:6D
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584B64CE6E99A0256B4E4BE44C40
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/74564d89-8c64-3bcc-a70f-70303d155fc2.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     16509
IP address blocks:        158.51.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:ce:6e:99:a0:25:6b:4e:4b:e4:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=eeb8f356-1fb7-4f92-8ab2-14562380c846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f0:5b:23:73:2c:3c:43:78:6c:7a:23:f9:5a:
                    88:e1:a2:2f:cc:bc:d7:18:5f:2a:c4:00:6b:f0:05:
                    21:fd:fd:a2:58:1b:b3:77:ec:24:67:ae:13:f5:49:
                    4d:07:4d:ad:ee:45:c9:ce:56:46:52:c0:48:65:7c:
                    3a:9d:62:73:7c:44:1a:3d:28:90:61:99:5f:de:41:
                    97:ff:de:e4:27:1c:d6:47:1e:97:6e:60:44:3d:8b:
                    5c:c1:79:6b:94:cb:11:66:67:7c:78:3b:ac:40:21:
                    54:72:ca:8d:7e:5f:61:2d:c2:f0:8b:2d:58:b4:ef:
                    d7:95:2d:1a:6d:e3:81:f1:c4:5f:17:d2:6f:c8:03:
                    57:0c:3b:47:0e:f9:f9:93:c3:38:64:d0:fa:ca:47:
                    26:4e:03:df:a2:df:5e:3a:d9:f4:e5:96:1d:0c:dd:
                    16:ed:c8:31:a3:c5:49:69:16:8d:e2:e3:e6:9e:01:
                    bc:4c:ea:b6:fe:b4:c0:18:1f:5e:54:a6:a2:d5:e9:
                    33:6e:fa:ea:bb:8a:13:a0:01:cf:91:56:77:ce:b4:
                    87:5a:0a:da:17:67:1d:eb:a6:59:d8:20:61:f2:e5:
                    ed:7f:08:3b:99:17:88:9d:d8:98:10:ec:25:ca:58:
                    02:99:41:c3:96:bf:89:e0:b5:cd:f0:9f:74:97:eb:
                    88:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:77:72:5C:3E:C4:87:8E:72:68:4B:67:64:C7:21:62:EE:03:1D:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/74564d89-8c64-3bcc-a70f-70303d155fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c9:8c:2b:0c:22:32:a1:8c:ed:35:cc:9d:36:c4:6d:e0:d5:b6:
         dd:7c:a9:4e:65:29:dd:aa:af:f0:8d:57:69:75:86:a0:b7:01:
         0d:f4:bb:d4:1a:8f:24:61:35:2d:1f:03:c5:b1:5e:ff:ca:a2:
         34:55:70:db:02:76:60:10:2c:02:40:f7:a4:9f:56:cb:7a:af:
         d9:17:34:83:92:94:a7:6c:26:a0:2b:65:44:6e:2c:e9:6d:fc:
         1c:a0:68:37:36:97:58:1b:21:b8:78:22:e7:b3:2e:70:f0:53:
         40:f2:a7:26:76:66:05:03:5e:aa:4d:29:5d:fc:41:9c:3d:aa:
         2f:f0:b3:d2:2e:a1:8d:32:42:cc:43:2a:ab:67:39:55:8e:e6:
         4c:0a:39:6f:61:05:6f:98:21:9e:99:d0:88:36:37:33:19:3f:
         d1:67:60:4a:a8:51:7f:4b:2e:b0:b3:8c:47:d0:e8:dc:65:9c:
         6b:24:e2:ba:45:a6:cb:81:40:77:20:61:5d:fe:68:a9:f6:6e:
         93:fd:b5:f6:08:80:0a:15:be:65:81:b6:a2:5e:aa:a0:8a:eb:
         5d:29:42:89:14:5c:c2:3a:89:0c:b1:37:09:28:e8:1b:59:6f:
         d6:98:16:2f:c7:01:ac:ad:03:72:a5:a7:e9:11:b0:50:cd:84:
         2f:62:3b:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:52:39 2025 by rpki-client