Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c756bf3b-d5bc-3258-88cb-6fc38fd26459.roa
File:                     c756bf3b-d5bc-3258-88cb-6fc38fd26459.roa (raw, json)
Hash identifier:          vPei9kWMDB7V4i60Os9hJzorp+cDAQkmCOsutYvM7LA=
Subject key identifier:   F1:C8:F9:F8:C3:DB:59:CB:F0:70:9B:ED:1D:07:6F:D5:63:8D:27:67
Certificate issuer:       /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial:       010D0C9F4328584BC10AD8926A59952944B90D00
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c756bf3b-d5bc-3258-88cb-6fc38fd26459.roa
Signing time:             Wed 05 Nov 2025 02:00:31 +0000
ROA not before:           Wed 05 Nov 2025 02:00:31 +0000
ROA not after:            Tue 03 Feb 2026 02:00:31 +0000
asID:                     400238
IP address blocks:        147.185.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:c1:0a:d8:92:6a:59:95:29:44:b9:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
        Validity
            Not Before: Nov  5 02:00:31 2025 GMT
            Not After : Feb  3 02:00:31 2026 GMT
        Subject: CN=245b0da0-8b32-4843-b687-e0ed4d4034be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:19:2f:55:c3:74:b1:d2:2d:60:91:18:14:01:
                    20:eb:ae:e7:62:c4:5f:80:66:79:fd:0b:51:76:46:
                    bf:88:ba:82:07:06:29:b7:91:fd:46:65:0e:17:cf:
                    68:71:d4:20:0e:7a:80:5a:47:a1:05:2e:0f:98:01:
                    07:62:99:39:99:fe:cf:4e:c7:de:ed:30:d4:ce:d7:
                    ae:52:54:22:0d:04:c4:d0:bf:87:15:4b:5f:88:60:
                    33:ab:7f:79:39:e9:5a:23:98:c2:b5:f5:bf:ba:3a:
                    c8:0d:9d:2e:42:10:26:ab:7a:10:24:d0:92:2e:22:
                    4e:d5:f8:9e:7a:2d:e4:38:a6:b3:b1:71:de:c6:8a:
                    42:d2:9b:5f:7d:e0:6d:80:76:cf:4d:82:2c:3a:d9:
                    58:c8:5a:57:d6:63:43:0a:7c:92:1a:f6:8c:ad:0d:
                    c5:42:0c:85:aa:09:07:e5:ca:88:4c:c6:68:15:80:
                    86:48:69:0b:91:b5:ed:98:7c:db:6d:30:76:78:a2:
                    13:b6:a0:42:89:be:e9:d6:fb:9f:d3:fb:72:7d:7b:
                    06:96:e9:49:e3:53:6c:ab:b0:76:ac:04:76:1a:a1:
                    33:f4:4e:a3:7c:ab:f5:6b:99:f4:cc:9b:04:22:1f:
                    c9:27:a1:8b:22:6f:1d:5e:7b:60:e2:8d:c5:b8:65:
                    3f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C8:F9:F8:C3:DB:59:CB:F0:70:9B:ED:1D:07:6F:D5:63:8D:27:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/c756bf3b-d5bc-3258-88cb-6fc38fd26459.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.185.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d6:93:7b:eb:d9:66:93:60:a4:a1:42:4b:75:07:4d:0e:5b:
         9d:0d:ea:94:2f:fb:77:d8:b7:17:09:88:f2:3d:e0:96:19:e9:
         05:a0:cc:6d:ae:84:b5:2a:81:6f:94:3c:28:be:09:ae:59:aa:
         97:7f:8c:cf:3d:1e:c1:b4:b6:a1:b0:3f:e0:10:7a:d2:1a:a7:
         8a:af:d0:5a:ab:84:fe:99:f6:34:e0:08:bf:81:1d:f9:7b:0a:
         b6:5c:c2:9f:36:a0:a8:3a:05:09:43:c3:3e:58:67:33:b1:0c:
         50:39:1e:e1:ea:7e:a2:93:03:b4:4c:ba:1b:2f:ea:32:87:81:
         6b:4e:bc:8f:3b:aa:a2:87:8c:69:e4:e8:76:a1:ee:70:3b:ab:
         dc:7d:aa:ad:b0:68:04:2b:34:88:b7:3c:a8:c0:71:5d:fb:9e:
         de:1b:39:f4:44:58:f1:10:2d:3a:a1:dd:27:40:6b:71:85:4b:
         f4:4d:67:46:50:75:9f:5c:92:dd:37:7b:59:db:ec:6d:d0:da:
         9e:d6:db:02:47:bd:61:75:08:c7:07:03:39:89:8d:4c:6f:41:
         3e:52:89:4a:2e:3e:a9:03:c1:98:4a:13:9d:98:74:4d:7d:51:
         fd:8a:5b:cb:1f:58:53:01:de:b3:61:60:68:5b:91:bd:11:cb:
         f9:10:b2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:12:43 2025 by rpki-client