Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/78eed7d8-8055-3e11-b395-9f210dc06ea8.roa
File:                     78eed7d8-8055-3e11-b395-9f210dc06ea8.roa (raw, json)
Hash identifier:          hHJOYqTPfYfaMm2LOfOdY3Dh4VwwUdu0lungfK95+Lw=
Subject key identifier:   EA:CB:48:B5:C9:F5:D4:EF:98:1D:38:B9:61:7C:EE:1B:0F:E4:91:F1
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584BAEC7CA6B5B04F68F8A4B5E00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/78eed7d8-8055-3e11-b395-9f210dc06ea8.roa
Signing time:             Wed 29 Oct 2025 13:00:39 +0000
ROA not before:           Wed 29 Oct 2025 13:00:39 +0000
ROA not after:            Tue 27 Jan 2026 14:00:39 +0000
asID:                     3257
IP address blocks:        173.44.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ae:c7:ca:6b:5b:04:f6:8f:8a:4b:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Oct 29 13:00:39 2025 GMT
            Not After : Jan 27 14:00:39 2026 GMT
        Subject: CN=cbf6c708-faa3-4f08-a252-af7bbbbe4cf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3d:63:6f:5a:50:24:b1:7d:e8:dd:df:e9:b8:
                    3f:cc:fb:37:4d:b2:c8:0c:cc:fd:d8:05:95:73:8d:
                    85:6e:ff:1b:dd:8b:ff:f7:64:b8:fd:bf:4b:83:25:
                    07:e4:84:d1:a6:e1:ca:30:51:b5:7e:2d:28:d2:09:
                    29:49:cd:3d:6b:a9:7a:cb:3e:4e:30:e6:e5:17:bb:
                    a3:6c:7a:40:d6:88:1e:24:0b:2b:79:49:dd:10:37:
                    57:00:df:d1:ac:ca:88:62:ce:3b:4c:3d:54:3e:18:
                    43:2a:1a:80:e9:bc:cc:12:13:a2:65:f2:27:52:46:
                    bf:d4:fd:a8:5e:97:19:c3:74:05:3c:ec:32:09:5e:
                    41:9c:59:fa:0c:02:9c:2e:ce:53:15:a4:c3:86:89:
                    78:b8:ba:6a:9b:0f:ed:60:3d:60:69:e0:35:49:90:
                    88:d3:cd:f2:e9:33:60:f6:b0:de:94:7e:34:81:91:
                    b1:31:96:dd:21:59:b4:1d:85:66:98:47:f5:79:10:
                    72:79:27:47:4a:e8:6a:f1:92:6c:42:d0:71:f6:ac:
                    3e:ec:89:26:3a:88:1a:c7:79:b9:12:1c:c1:f9:1e:
                    c0:11:29:41:b3:a1:7c:07:93:38:ba:45:ea:a2:7f:
                    9a:bd:11:b4:1d:94:e9:6f:e1:55:d3:8f:2f:8f:68:
                    df:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CB:48:B5:C9:F5:D4:EF:98:1D:38:B9:61:7C:EE:1B:0F:E4:91:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/78eed7d8-8055-3e11-b395-9f210dc06ea8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.44.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:2a:c6:43:43:5a:e7:a0:b6:94:30:61:37:7f:bd:65:bf:be:
         eb:71:07:ef:12:e2:a9:0d:66:cd:cc:c9:a1:52:04:25:60:d5:
         e8:6d:85:bf:b2:aa:48:39:73:b1:9b:75:aa:a7:9e:c1:7c:61:
         50:87:65:e8:c3:ad:d1:37:b6:e2:48:d9:f0:97:42:33:c0:b2:
         a8:fd:6d:bb:fd:bc:d9:ac:7d:dd:a0:9e:44:86:df:5f:31:f0:
         76:45:e8:44:19:1e:f1:a4:5e:94:56:a4:fa:38:75:07:53:ca:
         e9:6b:cf:63:13:69:2a:ad:a9:47:a3:d8:34:06:5c:47:dd:8e:
         db:29:2d:bb:db:b7:a0:6e:5d:de:cf:df:a7:f7:72:b7:1b:e2:
         bb:00:ac:b4:53:c3:f7:ca:5c:e8:ac:71:b2:1b:f7:19:67:d4:
         68:9e:f3:51:c2:cb:a9:de:af:6e:09:ed:99:e4:29:55:42:a8:
         24:a3:28:26:61:02:63:84:be:41:2a:f3:24:f2:b9:26:6d:1a:
         80:9f:54:3b:30:41:c0:d5:12:f9:7b:08:35:92:71:56:05:37:
         9d:61:9a:ff:fd:f8:53:dc:cd:b2:4d:46:52:c7:df:98:60:64:
         db:78:af:c2:78:b8:82:83:40:27:49:61:20:fe:e2:cb:7a:c7:
         88:52:f1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:00:36 2025 by rpki-client