Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/8491bcd5-3593-3080-b953-4fe2d3a28be8.roa
File:                     8491bcd5-3593-3080-b953-4fe2d3a28be8.roa (raw, json)
Hash identifier:          xY37r2lpS9lz0fMqFwuFT4FkpuDALBzp9b0qpaVxnP4=
Subject key identifier:   DE:AC:EF:67:90:A4:9F:20:AC:47:FE:52:1E:47:7F:7D:75:4C:C0:21
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584BAEC7BC3D771C18167264C880
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/8491bcd5-3593-3080-b953-4fe2d3a28be8.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     53475
IP address blocks:        173.251.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:bc:3d:77:1c:18:16:72:64:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=a7d02650-66a0-4469-880b-019cd715a082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9c:c2:ea:31:c6:8d:25:a8:8c:9a:5c:d3:dc:
                    08:52:6d:66:98:23:4e:e3:41:55:0d:2c:28:c9:6d:
                    40:34:b1:f4:bb:6e:af:6f:91:09:97:88:15:d9:3e:
                    7a:06:a2:0b:fb:bb:0a:2d:39:63:a8:ed:fd:35:f2:
                    e0:90:63:0c:b8:13:3a:5c:65:21:b5:91:2b:37:c7:
                    84:1c:af:76:9a:c2:f0:e2:66:ac:68:da:5b:01:3c:
                    b7:37:54:f5:93:b3:81:4e:e2:95:13:61:84:4d:d9:
                    0a:13:e0:10:db:83:55:6b:4f:ea:73:35:77:1b:61:
                    56:21:1e:56:4d:60:70:ea:18:5f:0e:fa:c5:ab:05:
                    68:a9:a9:90:3e:24:e0:ac:4d:17:ef:52:82:eb:65:
                    a2:c8:3c:c6:4c:58:ae:27:c8:08:1a:21:85:24:62:
                    47:3c:b8:fa:59:2b:e0:06:3c:a5:82:5d:d1:ab:f2:
                    58:25:e5:b0:d4:65:ea:b1:da:9a:49:b6:7a:ad:09:
                    0e:95:4c:56:c1:51:f5:4c:21:49:a7:8c:7a:d1:09:
                    2c:e0:7a:8d:d2:0c:84:24:10:d1:21:a6:b9:16:d1:
                    4e:64:8e:8f:e6:50:ce:dd:67:84:99:59:47:66:ab:
                    a9:c4:6a:0e:a5:bc:3a:d6:2d:ac:38:62:b3:51:85:
                    ff:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AC:EF:67:90:A4:9F:20:AC:47:FE:52:1E:47:7F:7D:75:4C:C0:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/8491bcd5-3593-3080-b953-4fe2d3a28be8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.251.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:c7:35:81:ef:7a:82:34:70:f5:a1:e0:df:d2:87:e1:6e:a8:
         ed:42:b7:5b:5d:34:c4:ac:05:9f:9c:22:19:bd:3a:e9:92:d0:
         e3:d7:40:34:fb:aa:56:b6:ca:34:3a:e5:d4:15:2d:6a:e0:79:
         b0:7d:8e:fc:58:25:99:c5:f8:e5:51:ce:2d:3f:4e:62:54:15:
         b2:f2:d3:8e:46:b3:09:22:4b:15:85:aa:9f:45:8a:f7:6c:62:
         bf:fe:e4:c9:de:de:d0:b1:fa:15:97:3d:1b:b9:5c:5a:92:ff:
         66:f2:8b:97:ac:0b:78:1b:83:e0:9b:76:10:c0:2c:31:e3:86:
         33:55:b4:03:96:50:aa:35:e2:db:33:69:ca:89:57:3d:00:40:
         6d:c8:c8:23:9d:d0:8c:7c:61:73:c9:fd:94:2c:56:98:14:96:
         f2:e4:6d:d7:2b:7a:a1:78:8a:04:a9:e4:75:8f:93:24:46:33:
         73:10:53:4d:21:55:aa:71:5d:e0:6e:9e:82:fc:85:13:8c:40:
         60:b5:42:26:fc:9b:04:90:b3:db:17:07:5f:2b:70:5c:98:fa:
         14:4c:10:c7:09:68:23:45:ba:a0:ee:02:b4:6a:c5:d7:c3:77:
         af:8f:2d:46:0b:38:be:1e:63:c3:88:25:7e:d3:92:07:61:1b:
         4f:94:44:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:50:59 2025 by rpki-client