Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/a45f74c0-9fe9-39a1-8ec1-86c28d5b5c37.roa
File:                     a45f74c0-9fe9-39a1-8ec1-86c28d5b5c37.roa (raw, json)
Hash identifier:          EjqD1rlhMa/f92oVJoI2NFaKUDaWaHVNdUKLzmimvNA=
Subject key identifier:   19:73:7E:49:99:96:CD:D2:E6:7B:7A:B3:11:2C:05:67:7B:7A:FC:4F
Certificate issuer:       /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Certificate serial:       010D0C9F4328584B99D78B2F505EB922452FA100
Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/a45f74c0-9fe9-39a1-8ec1-86c28d5b5c37.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     11377
IP address blocks:        149.72.100.0/23 maxlen: 23
                          149.72.102.0/23 maxlen: 23
                          149.72.104.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:8b:2f:50:5e:b9:22:45:2f:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=b9db1ed5-5907-44c9-a988-dba96d4cd714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3f:53:35:42:67:c9:52:1f:f5:f2:19:d0:17:
                    cd:19:46:94:e4:37:fb:93:d2:17:c2:eb:70:32:60:
                    c9:a6:1c:2f:78:47:e7:b0:5c:0b:ac:5b:fa:a4:8d:
                    1c:49:74:0c:c7:de:35:37:d8:54:10:98:f3:f1:d6:
                    a4:06:36:73:a2:fb:1c:f7:45:1a:1a:4c:94:ab:64:
                    1a:7d:ed:eb:f9:20:21:58:5e:76:0d:73:01:bb:30:
                    fb:0d:55:3f:3a:35:47:30:6d:2f:14:49:1f:53:0b:
                    e1:8f:f6:c0:9d:a0:35:8f:69:88:5d:1a:38:bb:d9:
                    02:66:4f:05:6b:fe:dd:b8:8b:a8:ed:ca:16:84:43:
                    e9:22:79:9b:98:7b:93:a8:a2:90:19:fe:92:14:4c:
                    9a:33:33:48:35:ca:7d:3c:d0:d1:07:1d:16:53:9d:
                    dd:d0:eb:7b:53:91:5b:1f:24:77:2a:fb:6d:39:38:
                    b2:13:4b:00:cd:71:f4:e4:99:45:0f:13:eb:37:df:
                    c8:e3:f6:f6:bd:6a:76:e9:44:b8:1f:2c:8c:38:c6:
                    53:92:14:f8:73:54:6c:7e:ba:d8:22:5f:39:f2:d2:
                    a5:21:66:49:d6:d0:39:59:8b:4d:48:38:df:d3:37:
                    e6:80:2a:2f:e8:05:e4:7c:3c:8b:35:a7:d9:c1:32:
                    b1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:73:7E:49:99:96:CD:D2:E6:7B:7A:B3:11:2C:05:67:7B:7A:FC:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/a45f74c0-9fe9-39a1-8ec1-86c28d5b5c37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl

            X509v3 Authority Key Identifier:
                keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.72.100.0-149.72.105.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:d1:3c:88:e7:d3:d3:9c:50:4c:51:7a:a2:01:3c:27:a4:40:
         89:71:c1:a3:9f:f2:2e:f2:4e:e7:09:85:82:2a:a0:82:99:18:
         c6:a9:3c:ef:86:1c:a1:a1:1a:09:42:19:b7:d7:d4:8d:14:c9:
         d0:98:d3:88:ee:a1:d1:19:bc:89:45:ac:a2:58:7d:05:a4:be:
         4b:64:57:7e:2f:eb:31:af:1f:39:fd:11:83:22:87:17:c8:fd:
         75:0b:7d:3f:5f:92:55:36:35:ae:54:66:52:38:f4:45:ae:e0:
         76:0c:12:6d:39:f1:fb:e6:5c:bb:d0:29:3e:4e:ac:5c:fa:b7:
         b8:f7:e6:ed:54:b7:ea:cd:92:f5:a0:c7:da:c8:89:96:da:4b:
         f5:0f:b4:a8:25:df:fd:89:a9:f9:0e:70:03:9e:bb:97:d2:1e:
         c4:19:93:90:37:00:a5:86:62:6d:1a:c7:61:72:07:25:b4:44:
         ab:8d:91:83:66:73:e8:04:95:d5:10:f4:08:25:2e:08:70:1b:
         94:aa:7c:30:1a:34:a2:82:37:31:42:f6:fe:15:8a:d9:5b:a9:
         ca:f6:77:f2:2a:21:86:78:a7:47:90:86:fd:33:2a:cc:a2:7f:
         10:04:32:34:e3:e4:86:44:8e:e1:51:7c:16:ab:11:08:ac:b5:
         66:60:61:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:20:50 2025 by rpki-client