Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2518c7f5-af6d-3969-95ff-b03021a4240d.roa
File:                     2518c7f5-af6d-3969-95ff-b03021a4240d.roa (raw, json)
Hash identifier:          5r9pNq70IVW8ri8zbUutQ9+wRTHS2y5TiOEjFH8afN4=
Subject key identifier:   9E:7A:0C:E5:45:B9:32:B7:0B:22:EA:5C:DD:8C:D7:1A:7E:9C:67:0E
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584A81462B517EA5745E8BD36F00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2518c7f5-af6d-3969-95ff-b03021a4240d.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     19905
IP address blocks:        173.17.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:2b:51:7e:a5:74:5e:8b:d3:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=0b5606e3-e6fd-48c5-a3ea-3b9c46e0bf27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c6:1a:71:ae:ce:45:89:45:85:0c:24:dc:e0:
                    d1:52:5e:e2:9f:1f:57:1b:18:28:4f:dc:b3:1f:40:
                    0b:47:ca:7e:64:27:e1:f7:60:be:80:e0:68:12:41:
                    42:17:62:07:ce:db:48:51:1c:ce:4e:99:81:31:47:
                    fb:e0:b8:ce:7a:32:ec:ee:d3:78:24:59:87:b0:55:
                    62:97:cb:38:0a:7e:f1:ce:da:c9:09:b0:de:d8:ca:
                    34:96:d1:8c:fa:66:92:4e:08:ec:bd:c7:11:15:df:
                    5c:16:42:16:f2:92:70:6c:fa:00:a4:2f:3c:b7:f2:
                    c9:02:03:c0:d0:55:90:f9:1e:8a:ae:90:ff:8d:c6:
                    12:0b:92:89:0d:30:09:f5:59:10:99:66:e7:4e:58:
                    e0:4b:3c:b3:3a:b8:17:f1:5f:48:3e:24:9a:41:f2:
                    d8:da:ec:f7:cd:1c:fd:85:13:c9:aa:cd:8e:44:2d:
                    bc:5a:cd:54:41:dc:91:50:33:f7:dd:1c:e3:ed:fa:
                    32:47:2c:de:f4:f4:7d:cc:fa:63:e5:91:0f:fa:58:
                    d7:39:84:1c:15:65:bb:2d:30:6f:76:f1:7a:2f:4e:
                    ab:34:15:f7:95:be:a2:e5:5a:b0:4e:92:a6:c1:7a:
                    3a:ee:1b:20:0d:30:b3:e9:c0:7a:8e:ef:f0:fa:d1:
                    0b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7A:0C:E5:45:B9:32:B7:0B:22:EA:5C:DD:8C:D7:1A:7E:9C:67:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2518c7f5-af6d-3969-95ff-b03021a4240d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.17.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:7c:c6:b2:7d:53:00:5d:1f:5e:06:56:f9:85:f1:27:f5:f1:
         56:35:1a:fb:72:b9:57:d7:d7:13:34:06:bc:ff:b3:5f:03:2e:
         d6:fb:c2:cf:5c:2c:a5:8e:fb:30:2a:da:60:a2:a9:08:62:57:
         9a:8e:6b:32:05:ae:50:07:6d:93:5b:fe:0f:c0:14:5f:f6:65:
         ca:ad:33:be:d2:24:ed:f0:fb:6a:6a:9a:61:c8:ff:8a:82:1d:
         6f:a9:0b:a2:eb:83:ed:24:be:98:0b:91:a0:fe:ab:57:27:92:
         d6:9b:5e:41:a8:66:af:ee:d1:29:fa:25:d4:46:73:4e:64:29:
         2b:54:1a:21:10:d2:49:55:b8:13:e7:df:e9:9b:68:b9:27:4f:
         7b:a8:c1:d2:47:3f:d5:7c:9d:03:b5:71:89:15:ff:68:ab:04:
         a2:2e:f9:fb:26:c1:23:d5:d7:ec:4f:a4:d0:54:07:59:aa:bb:
         b8:56:63:6a:80:a0:d6:00:34:db:25:40:43:84:1e:56:86:eb:
         64:6b:8d:3f:6d:45:3f:7d:7f:29:d9:6b:cf:ac:18:06:80:ea:
         fc:22:12:e8:aa:af:1a:7b:4f:88:2f:4d:50:b3:77:fd:56:c2:
         e9:35:e5:07:7b:d0:20:ed:93:8f:c5:38:d0:5b:ef:1b:55:4f:
         93:0c:2a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:39:14 2025 by rpki-client