Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/c4a59c11-de1f-3741-8b9f-b65994e31210.roa
File:                     c4a59c11-de1f-3741-8b9f-b65994e31210.roa (raw, json)
Hash identifier:          +gnFSaiq/6eOqsci3MGy+ZNJJH0tDrxG5wxFLOQUeSA=
Subject key identifier:   98:77:0F:82:6C:18:DD:D2:4B:17:69:51:46:57:AF:D2:65:CF:3B:53
Certificate issuer:       /CN=1dd142d7-5311-487b-9c11-f16950e4d57d
Certificate serial:       010D0C9F4328584B99D786EE348C01DD045F3F40
Authority key identifier: 47:2D:B1:E4:1E:4C:0B:09:C7:5E:2C:AB:35:6C:84:10:8B:80:F6:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/c4a59c11-de1f-3741-8b9f-b65994e31210.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     32627
IP address blocks:        173.241.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/1dd142d7-5311-487b-9c11-f16950e4d57d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/1dd142d7-5311-487b-9c11-f16950e4d57d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:86:ee:34:8c:01:dd:04:5f:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd142d7-5311-487b-9c11-f16950e4d57d
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=57fed9db-bfde-4ec1-816b-6ead7b43cc5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b2:72:49:98:89:a4:6a:04:c3:04:3a:a1:34:
                    c0:ce:aa:f9:60:b3:50:54:3b:d7:39:de:89:52:42:
                    14:48:ea:3d:4f:bf:41:32:fd:d6:9e:99:bc:de:53:
                    23:69:1d:8c:7b:f5:54:f0:ad:32:a7:68:1d:c7:f3:
                    f5:49:41:7e:12:5e:21:d4:35:a5:59:32:cb:24:9c:
                    9a:26:71:58:4b:22:30:f8:51:47:67:d0:45:7f:46:
                    93:b7:1e:fc:6d:6f:bb:f0:93:27:78:ee:a1:da:1c:
                    82:78:58:1d:c5:59:85:2e:97:e2:27:0f:22:44:b1:
                    8b:27:ec:ce:3a:d2:d9:00:1b:cd:af:6f:ae:25:d3:
                    8e:2b:63:c9:ea:55:40:b7:e4:5d:ee:95:10:00:49:
                    f9:e0:90:aa:33:bd:de:c1:2f:0e:92:16:68:de:85:
                    80:26:72:82:c9:a1:53:bf:a3:6f:87:a7:74:0b:d9:
                    d5:1b:c4:b3:57:39:b7:8a:68:43:f6:38:d3:cb:cd:
                    2e:ae:a6:f4:57:64:d0:93:e5:f5:35:eb:0a:a1:d3:
                    84:77:1f:1d:4e:a9:fb:5c:41:3b:5c:bd:a5:89:1d:
                    f1:29:51:99:48:ab:6d:a4:2d:fb:35:9d:5d:cb:fd:
                    64:2d:88:55:32:ab:34:a8:85:f7:54:13:84:78:10:
                    d5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:77:0F:82:6C:18:DD:D2:4B:17:69:51:46:57:AF:D2:65:CF:3B:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/c4a59c11-de1f-3741-8b9f-b65994e31210.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d/1dd142d7-5311-487b-9c11-f16950e4d57d.crl

            X509v3 Authority Key Identifier:
                keyid:47:2D:B1:E4:1E:4C:0B:09:C7:5E:2C:AB:35:6C:84:10:8B:80:F6:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1dd142d7-5311-487b-9c11-f16950e4d57d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:da:84:61:cf:f0:9a:56:ae:7c:f0:40:07:25:30:db:ac:17:
         09:47:9e:f4:31:6d:e1:29:ab:d0:10:ba:13:07:60:10:ba:35:
         06:23:0c:7f:37:a0:d5:68:93:94:e9:d6:c5:1b:76:57:a3:37:
         2e:53:11:d1:56:64:0e:3f:d5:9b:d8:77:19:cd:f8:5c:17:29:
         77:a4:c4:34:4c:50:3a:df:a6:25:74:cc:ed:5d:90:c4:b8:7c:
         be:2e:22:50:68:0c:67:55:16:a0:2d:5f:0f:bc:d0:a2:10:0b:
         93:09:2d:2b:dd:ea:cb:0d:44:87:e1:0a:cf:5b:e2:d3:a4:77:
         c2:79:6e:2b:ed:c8:6e:41:4e:be:f7:4c:39:c3:64:40:87:59:
         55:68:3c:36:89:f5:2b:2e:81:3f:d0:22:0b:3e:4e:52:8d:b4:
         26:02:4b:dc:c1:30:e6:dd:c9:bb:b9:b3:ed:87:d1:43:55:59:
         6a:e8:f4:e7:85:f7:75:ba:27:92:a2:ba:8b:4b:49:3e:07:f2:
         2a:2f:9c:a6:7c:14:56:c8:08:cc:d5:e7:d5:ad:1f:98:8d:33:
         a6:35:a3:43:58:18:8d:f0:fa:16:29:d2:de:80:03:55:6d:38:
         b3:68:52:8f:90:83:5d:a4:1e:4e:ab:92:7a:37:b4:06:eb:1c:
         02:99:9d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:33:19 2025 by rpki-client