Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1d03a2cd-01aa-30d7-a2d0-f81b889117c5.roa
File:                     1d03a2cd-01aa-30d7-a2d0-f81b889117c5.roa (raw, json)
Hash identifier:          oobVunFD8mnDi4FTpGmFc6D2blagl8vWDIb2+EsmxiI=
Subject key identifier:   7A:1D:FD:61:52:E0:D1:A6:4D:EF:96:9E:83:5D:05:33:C9:E3:5F:08
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584AB4EF0614F46DB195D7E6D000
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1d03a2cd-01aa-30d7-a2d0-f81b889117c5.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     174
IP address blocks:        173.232.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:ef:06:14:f4:6d:b1:95:d7:e6:d0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=0e81b812-4df1-4a26-90bc-889993976d3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:51:17:37:18:22:d7:df:48:1e:9a:2f:ee:c2:
                    1a:1b:14:6d:a7:87:6a:bc:87:18:20:fe:40:76:60:
                    e7:79:eb:2d:d6:cb:7a:17:38:0a:a2:ae:44:7b:a8:
                    c5:51:04:0a:9e:67:10:98:ac:28:df:b5:cb:8f:14:
                    9f:e5:2c:ea:dc:bf:41:d8:d7:a2:5c:d9:3c:c3:ca:
                    6a:5a:19:c5:12:92:79:91:3e:3b:30:f4:23:26:11:
                    79:72:cb:dc:7d:28:96:e5:89:42:8d:74:4d:61:40:
                    82:e0:d3:db:e8:74:1e:35:32:8e:bd:95:e8:7f:8c:
                    4a:fb:98:7e:db:43:af:7a:cf:f9:b0:76:16:a5:85:
                    3f:dc:ab:4a:54:36:d0:f4:d0:db:a2:5c:51:34:bb:
                    60:b3:16:8e:36:28:1a:de:66:af:4f:18:a2:ea:ef:
                    87:ca:f8:ba:95:5d:30:ad:e0:7e:9e:85:ba:c4:df:
                    bc:10:30:3d:04:61:5e:a9:08:de:24:e3:67:71:ed:
                    35:35:17:09:41:93:18:b7:15:3a:11:cc:30:dd:50:
                    03:04:52:59:3d:29:b7:04:98:2d:92:61:f5:91:eb:
                    b5:13:16:3c:ad:72:a2:03:77:f3:f4:ad:96:c2:58:
                    ce:13:83:5b:e0:eb:48:93:af:28:d2:13:d9:ca:a5:
                    c8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1D:FD:61:52:E0:D1:A6:4D:EF:96:9E:83:5D:05:33:C9:E3:5F:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/1d03a2cd-01aa-30d7-a2d0-f81b889117c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.232.161.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:e7:70:a8:92:86:a3:69:fe:eb:99:6b:f1:e9:6e:a5:48:99:
         c3:9c:ba:bb:f9:8e:64:0a:ae:fa:7e:c3:69:68:0d:65:77:12:
         d4:9d:ce:8a:fd:e6:4f:b5:16:ab:5c:f4:3f:22:05:ba:0e:95:
         69:c0:69:19:7f:7a:3b:b1:b5:21:aa:b1:83:96:f8:a1:17:0e:
         33:6f:b1:cf:37:3f:bd:1a:aa:6e:bc:22:7f:7e:36:7a:91:2f:
         b3:37:90:96:68:1c:ed:9a:cc:1c:f2:66:88:92:f7:2f:c3:30:
         4a:f0:77:3e:5c:e6:bb:b8:3f:69:6d:a4:57:63:91:d7:8c:7c:
         4a:0e:32:65:0f:22:a4:94:c8:e4:1e:c0:42:e1:54:41:30:a9:
         8c:d8:53:25:d0:9c:d2:85:93:7a:17:0f:41:6a:d1:aa:13:d9:
         85:91:69:63:25:3b:2e:d4:c5:c4:fb:1d:4b:c0:6f:28:84:8b:
         25:a7:d2:5f:27:57:ad:ca:95:b4:06:18:62:6d:10:09:f5:09:
         1d:30:fe:a6:c5:92:c4:99:78:c4:33:40:be:54:39:d9:cc:a0:
         d2:f9:b6:57:6a:63:c5:95:e6:7b:11:b9:2b:6f:02:db:e9:f4:
         ab:4e:ce:7a:b6:78:05:9f:f9:8d:18:82:9f:b5:9d:33:e4:80:
         2d:3a:05:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:21:35 2025 by rpki-client