Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/79af2351-bc12-3c89-8202-a27c2b80b2b1.roa
File:                     79af2351-bc12-3c89-8202-a27c2b80b2b1.roa (raw, json)
Hash identifier:          +k9kgPE1RKAJ6kqxvQ42FjMc1Yro+1DeaPdW+vSNrJM=
Subject key identifier:   0B:01:71:3A:17:0F:5E:05:B5:2D:56:CF:1B:4F:ED:CB:CB:DB:D5:6E
Certificate issuer:       /CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
Certificate serial:       010D0C9F4328584BA0D25B9D897E9A5286BB8500
Authority key identifier: AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/79af2351-bc12-3c89-8202-a27c2b80b2b1.roa
Signing time:             Fri 24 Oct 2025 13:00:38 +0000
ROA not before:           Fri 24 Oct 2025 13:00:38 +0000
ROA not after:            Thu 22 Jan 2026 14:00:38 +0000
asID:                     209453
IP address blocks:        173.246.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:d2:5b:9d:89:7e:9a:52:86:bb:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14ee329f-6a96-44cb-8cc5-222e0fec8c3a
        Validity
            Not Before: Oct 24 13:00:38 2025 GMT
            Not After : Jan 22 14:00:38 2026 GMT
        Subject: CN=d9fd7d45-1e83-422f-a27a-4b3707dd60e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cf:cf:0e:c9:67:72:ff:03:bc:96:99:1a:39:
                    3b:8d:63:9d:13:68:79:8e:a8:cf:bb:5f:17:c4:be:
                    23:53:85:9b:8b:c5:69:1d:19:85:ff:03:d4:c6:bf:
                    93:1d:4d:28:70:c0:76:86:6a:b9:a2:00:4e:91:7d:
                    0f:f0:13:4f:06:f3:c2:17:80:26:b3:71:8e:a2:72:
                    08:68:99:f6:03:6c:0c:c5:ba:87:a4:94:cb:92:79:
                    f8:51:f8:a9:d8:4e:ab:13:02:ee:cb:59:2a:ca:ef:
                    a7:1b:1f:99:56:39:c2:15:b4:96:2f:c1:bb:b5:73:
                    8f:5a:14:77:5b:51:68:cd:c8:c6:bd:e6:f3:d5:02:
                    8a:74:6b:8b:22:74:5a:4b:48:76:9b:49:5e:48:72:
                    e2:1b:82:bc:ee:26:2c:cc:29:ed:15:e4:47:d9:bb:
                    b3:d4:42:f9:f8:9b:5c:22:d0:7a:70:41:d5:dc:cb:
                    ad:2e:2b:5c:4b:fd:9f:80:02:20:18:32:2e:43:86:
                    f3:52:d9:99:8f:73:e9:10:95:d6:25:c6:9d:a2:19:
                    d1:de:53:69:39:0a:db:17:8f:c8:1c:8e:2f:bd:93:
                    28:a0:e6:3c:46:57:e4:67:19:e9:cc:9c:60:22:38:
                    d9:eb:82:5c:4c:10:7b:c5:fa:52:2b:25:e7:08:29:
                    d7:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:01:71:3A:17:0F:5E:05:B5:2D:56:CF:1B:4F:ED:CB:CB:DB:D5:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/79af2351-bc12-3c89-8202-a27c2b80b2b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.crl

            X509v3 Authority Key Identifier:
                keyid:AE:48:23:F9:A1:EA:C3:0A:1E:7A:D0:58:AA:D4:EA:78:AF:C1:EC:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/14ee329f-6a96-44cb-8cc5-222e0fec8c3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.246.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:a2:7f:2b:61:2b:0f:ee:97:c4:3e:b9:ad:2a:1b:a8:9e:fb:
         84:2a:9e:c2:23:4d:a1:34:56:93:65:33:f1:0b:32:9a:3b:e2:
         86:31:c2:1d:00:a7:67:32:5b:6f:50:fa:ee:8e:26:96:29:5b:
         c7:75:31:66:29:2e:4c:23:5d:7b:f8:15:73:02:3c:3f:79:5a:
         0a:de:25:05:0f:da:cf:c4:f5:3e:21:b1:05:a9:6d:d5:3e:35:
         f7:3c:b4:9c:8f:55:5e:c5:ba:3c:0c:c5:1a:d9:0e:4d:2c:f7:
         91:f2:44:25:24:3b:59:d3:b3:9a:d1:74:30:75:3b:79:33:17:
         29:49:ea:cf:c8:3b:c2:7b:16:4a:37:95:52:a2:2a:71:2e:63:
         db:13:39:63:65:55:80:07:5e:8d:dd:3e:2e:c9:27:c8:fe:e9:
         3e:a0:1b:8c:7e:49:a4:50:e4:79:60:75:70:f2:5d:dc:39:2a:
         ac:09:05:34:98:e9:6a:2c:b7:e7:ec:c0:8a:9d:ad:79:25:21:
         df:99:23:70:8e:eb:0a:83:b1:14:2c:cc:18:28:7f:fe:47:82:
         3e:c2:79:1f:e8:85:c8:79:04:7a:82:3e:4e:47:12:3b:4d:ca:
         ff:15:96:50:71:01:15:c7:d9:85:01:29:36:e5:65:14:80:4d:
         21:dc:99:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:59:42 2025 by rpki-client