Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/f8b4e3a7-848b-3a6c-95a7-29dc7d67de38.roa
File:                     f8b4e3a7-848b-3a6c-95a7-29dc7d67de38.roa (raw, json)
Hash identifier:          QCm23W/5cosyoIg9o82ZTcZRS7ZDkS4vGsnfIGaeocw=
Subject key identifier:   E3:EE:27:6A:1F:DA:C0:70:C5:73:65:B8:0C:E7:60:16:96:97:68:AC
Certificate issuer:       /CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
Certificate serial:       010D0C9F4328584B970CEF74E9133317253A8760
Authority key identifier: 1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/f8b4e3a7-848b-3a6c-95a7-29dc7d67de38.roa
Signing time:             Tue 21 Oct 2025 01:00:31 +0000
ROA not before:           Tue 21 Oct 2025 01:00:31 +0000
ROA not after:            Mon 19 Jan 2026 02:00:31 +0000
asID:                     394080
IP address blocks:        172.110.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:97:0c:ef:74:e9:13:33:17:25:3a:87:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f426bc-e016-4e31-8424-bc7cb86a808e
        Validity
            Not Before: Oct 21 01:00:31 2025 GMT
            Not After : Jan 19 02:00:31 2026 GMT
        Subject: CN=6ba4218f-9c1c-42b6-a69f-708ad170cfc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:19:55:9e:6f:e1:b6:a8:6f:7e:c9:bd:6e:b9:
                    f3:8d:b7:08:3e:7d:4e:30:df:9b:01:bb:52:62:d5:
                    fa:d9:d2:0f:c3:15:47:47:14:8e:f1:71:71:6b:3f:
                    c3:cc:64:74:21:be:0e:c1:a1:cd:7a:5f:f7:be:7e:
                    b0:79:1e:da:75:85:1a:0a:fe:7a:75:e8:71:35:19:
                    1b:06:ab:fd:02:c6:84:b7:a7:28:4f:1a:c2:1a:1a:
                    e0:d0:9d:a0:bc:8a:26:7e:ad:5c:44:b9:a2:a3:b7:
                    af:a7:da:af:06:7b:97:ae:50:ec:cb:6e:29:c7:a5:
                    8c:97:4b:02:3d:aa:79:19:93:29:fd:f4:a5:69:a6:
                    93:5a:f2:11:35:ac:5f:b3:2c:04:52:b7:23:d7:af:
                    20:dd:44:73:7a:0a:5e:17:5b:23:a5:f2:c7:6a:2c:
                    da:d6:24:1b:40:6f:92:d7:5d:53:e1:3e:cf:8f:75:
                    be:4c:9f:71:d3:a0:77:fc:70:a6:80:a3:4c:af:e1:
                    b8:1a:c0:7f:11:52:f0:0f:3f:5b:0b:42:1b:6c:c4:
                    7d:73:c8:af:99:34:ca:80:69:ec:ed:b7:84:b1:48:
                    d4:b9:a9:af:c1:4f:5f:c9:58:31:bc:f5:97:55:28:
                    b0:d4:4c:f5:01:4a:30:f9:86:7e:cd:20:9d:c9:7e:
                    4a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EE:27:6A:1F:DA:C0:70:C5:73:65:B8:0C:E7:60:16:96:97:68:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/f8b4e3a7-848b-3a6c-95a7-29dc7d67de38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e/a7f426bc-e016-4e31-8424-bc7cb86a808e.crl

            X509v3 Authority Key Identifier:
                keyid:1B:0E:96:00:4E:02:17:E3:9D:04:F9:A3:1D:9E:D9:03:EA:6B:D0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a7f426bc-e016-4e31-8424-bc7cb86a808e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:b9:2e:2d:cf:10:62:a4:f8:85:96:3d:7a:77:30:5c:98:7c:
         dc:e7:6b:a4:2d:79:2a:ff:4a:ac:cb:6f:91:ec:80:31:6b:d1:
         5d:99:d5:7c:05:ba:c0:70:7e:83:91:0c:65:0e:7f:ce:a6:ee:
         5b:26:d3:94:d7:d7:b8:93:b6:e2:d0:0d:bd:c8:b3:19:ea:e8:
         86:2b:cb:45:1f:1d:34:fd:ff:c5:96:12:ae:ce:8f:24:6b:50:
         4b:8f:ce:bc:32:b8:b7:a9:ee:dd:37:fe:93:6c:2b:14:56:70:
         25:21:ae:cc:fb:53:69:c6:f1:dd:f1:40:ec:2d:db:8a:2b:d4:
         ac:cb:a4:a7:29:25:7e:f6:da:7b:2c:80:f4:c1:8b:de:a0:bf:
         97:0d:5f:12:90:63:a9:15:0a:7c:a0:8a:b9:8d:55:58:aa:2f:
         52:7e:60:c3:8b:4b:cf:21:28:ad:21:25:04:bc:41:11:84:bb:
         1b:00:5b:1a:04:a9:68:63:22:b9:2d:9c:34:33:b8:0a:a8:35:
         33:4f:fc:5c:db:e6:3f:73:65:b0:e0:f3:24:64:41:7a:a0:e0:
         33:e9:48:cc:c2:0d:c8:3a:64:25:8f:b1:04:a4:7c:e5:96:45:
         45:2f:2c:d9:64:57:38:f6:71:7f:df:bb:88:4a:c3:5b:bf:8a:
         fc:d6:53:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:58:24 2025 by rpki-client