Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/d014f08f-8cb8-3dba-844a-e50b9c0f9082.roa
File:                     d014f08f-8cb8-3dba-844a-e50b9c0f9082.roa (raw, json)
Hash identifier:          k3ygiMJkQFnxmSzj/eSDd0MPRq572YeQRyu4ltdLuTA=
Subject key identifier:   7D:81:D3:72:48:AA:7C:C5:83:BE:CE:02:6D:0B:8C:76:4B:29:B5:6B
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F4328584ABEB0DD4CBF74D08D92F8697F
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/d014f08f-8cb8-3dba-844a-e50b9c0f9082.roa
Signing time:             Mon 04 Aug 2025 13:00:36 +0000
ROA not before:           Mon 04 Aug 2025 13:00:36 +0000
ROA not after:            Sun 02 Nov 2025 14:00:36 +0000
asID:                     14114
IP address blocks:        169.145.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:be:b0:dd:4c:bf:74:d0:8d:92:f8:69:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: Aug  4 13:00:36 2025 GMT
            Not After : Nov  2 14:00:36 2025 GMT
        Subject: CN=2e301b26-065a-41a6-bb55-1597ed85fd26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b0:c4:42:94:7d:13:1a:aa:30:95:b5:66:cf:
                    4e:82:f5:71:31:37:64:9d:28:25:c7:56:53:0c:20:
                    a0:5c:43:7a:ff:fc:a7:14:ed:6c:7b:d5:fc:af:4e:
                    e0:a4:2b:05:76:81:7d:39:f1:b5:3a:73:76:62:0a:
                    68:e7:47:27:f2:5c:68:9f:9c:1b:e9:7f:29:11:4d:
                    94:39:26:13:dd:5e:31:11:a0:b4:2d:74:72:6c:c1:
                    eb:57:ba:ed:e6:fc:53:ae:ec:18:a9:fa:b5:1e:e3:
                    53:49:89:1f:f2:8c:92:c1:4c:01:0d:67:20:3b:65:
                    2e:bb:8d:8d:1b:3c:84:a2:29:28:fb:ee:4c:a3:10:
                    60:ef:f8:55:96:22:78:e3:8d:ef:a7:87:df:34:83:
                    74:a0:dd:9f:57:68:11:d3:bb:ce:bd:d7:5d:3b:d0:
                    ff:25:d5:c1:cd:d3:cb:74:9b:59:0f:12:67:8c:a5:
                    1d:8a:75:f2:e2:2d:1d:12:17:70:7b:d9:53:36:65:
                    14:05:37:28:a2:b6:05:64:83:d2:35:36:e5:16:59:
                    4f:88:c1:8b:8a:b8:d0:a3:6b:5d:7a:13:82:ae:6b:
                    49:12:6a:de:e7:2d:c4:2e:41:4b:e1:4e:52:70:a4:
                    92:8f:52:d3:d6:8f:e9:71:fe:94:74:15:d4:b9:54:
                    be:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:81:D3:72:48:AA:7C:C5:83:BE:CE:02:6D:0B:8C:76:4B:29:B5:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/d014f08f-8cb8-3dba-844a-e50b9c0f9082.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:b6:93:cd:3b:94:d4:f3:b8:cf:44:8e:41:1c:ef:18:e3:cc:
         50:3c:e0:af:b4:bf:fe:50:0d:7a:23:a8:16:9e:d5:80:22:11:
         4d:63:55:43:ef:31:52:7d:aa:49:0b:8e:b1:d3:7b:f8:f4:70:
         40:bb:7c:b2:db:bd:b7:41:52:5a:e2:77:9e:ea:15:59:57:c8:
         a1:fe:e0:fd:51:d4:16:1d:42:d9:0d:44:e6:6e:e1:df:06:5f:
         b2:d0:34:c6:a8:c3:5e:a5:e2:71:64:1b:ab:e2:b0:d5:e7:0e:
         02:33:32:49:9a:de:f0:02:4c:e0:f0:23:02:75:51:63:0e:07:
         a5:32:5a:80:b9:ef:ae:aa:91:8f:e2:cd:ce:ab:e1:80:cc:ac:
         cc:8d:50:a8:6a:81:05:10:5b:16:71:f8:e2:f9:35:6d:70:53:
         fc:38:2e:89:86:c4:d5:89:8d:56:d5:19:a2:bd:56:9c:8c:a2:
         00:42:bc:33:74:7d:8f:fd:9f:95:de:ab:19:7b:d6:3f:62:f8:
         26:2f:6b:5c:b9:6a:39:d7:65:02:b1:81:6d:cd:32:9f:51:ab:
         89:13:c9:16:1e:67:9b:3c:e9:a6:c8:d4:f9:f4:d2:b8:5c:36:
         b7:67:64:51:cf:68:2f:ab:51:93:e6:bd:a2:57:ea:06:b8:4f:
         36:0b:2f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:43:35 2025 by rpki-client