Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/3edc617e-d4ef-36f4-bf5f-b1b19be514b2.roa
File:                     3edc617e-d4ef-36f4-bf5f-b1b19be514b2.roa (raw, json)
Hash identifier:          qlhpb44amY3uTzQArq8nUNUCkRCK/aKeq+L/XH4Mz58=
Subject key identifier:   BB:60:87:DA:A8:F9:44:CE:0E:D2:B4:84:84:83:09:92:74:29:74:8F
Certificate issuer:       /CN=6b8a7f7f-f857-4ca7-814b-452e6da3c835
Certificate serial:       010D0C9F4328584B328C3169E07BB18C5BFE95B0
Authority key identifier: 6B:85:C0:FF:65:B6:47:21:7A:90:D2:4C:37:9F:2B:17:B7:1D:13:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/3edc617e-d4ef-36f4-bf5f-b1b19be514b2.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     19755
IP address blocks:        199.73.124.0/24 maxlen: 24
                          199.73.125.0/24 maxlen: 24
                          199.73.126.0/24 maxlen: 24
                          199.73.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/6b8a7f7f-f857-4ca7-814b-452e6da3c835.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/6b8a7f7f-f857-4ca7-814b-452e6da3c835.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:31:69:e0:7b:b1:8c:5b:fe:95:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b8a7f7f-f857-4ca7-814b-452e6da3c835
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=ae4a4750-872a-435b-88c4-a84dd7181fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5b:61:47:42:74:bc:b5:d4:9e:e4:39:12:d8:
                    57:46:a4:99:78:1f:a0:2d:33:55:b7:d7:0b:52:fe:
                    c8:35:66:05:3b:ce:96:de:87:1e:b3:9a:c3:f2:5e:
                    8c:6d:0d:70:9b:e5:eb:0c:e4:95:9d:0b:69:4a:b6:
                    53:e5:33:e6:d7:59:db:dd:bc:59:ea:89:c5:30:40:
                    67:c3:55:bd:3c:13:da:ba:1e:84:a6:1d:5e:ba:d4:
                    3f:e2:80:f1:56:e4:dd:d5:e8:4f:e3:27:a1:15:a9:
                    27:a7:6e:7f:73:10:46:ec:e9:3c:1b:67:9f:39:46:
                    d8:a2:2f:ac:aa:2a:ab:3e:a7:e1:16:9b:1a:3e:67:
                    87:6d:5d:c7:d5:16:81:3b:2c:01:d7:45:ac:e5:a5:
                    6c:b1:cc:dd:7b:a0:0f:72:66:00:db:63:c3:9b:e9:
                    58:e1:57:c4:fe:b2:d2:aa:9c:0e:eb:5d:b0:69:73:
                    fd:2a:4d:92:c6:bf:b7:30:66:78:2e:2d:f3:06:37:
                    de:70:cf:58:83:5f:4e:43:ac:b1:a5:d8:eb:88:15:
                    d0:c2:bc:28:45:16:50:10:cb:e7:21:94:22:91:9a:
                    0f:b3:e9:ad:ff:66:f9:e2:4a:f2:d3:a8:ed:95:65:
                    9f:8f:5f:61:c4:eb:7e:35:d4:aa:2e:1d:32:5f:b5:
                    ad:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:60:87:DA:A8:F9:44:CE:0E:D2:B4:84:84:83:09:92:74:29:74:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/3edc617e-d4ef-36f4-bf5f-b1b19be514b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/6b8a7f7f-f857-4ca7-814b-452e6da3c835.crl

            X509v3 Authority Key Identifier:
                keyid:6B:85:C0:FF:65:B6:47:21:7A:90:D2:4C:37:9F:2B:17:B7:1D:13:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.73.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:af:11:e8:e7:e1:89:5d:0d:0e:7c:2e:c2:4b:cd:10:6f:7f:
         97:4d:12:f4:5d:43:05:04:1c:f6:51:4c:16:8a:ed:c6:90:b1:
         b5:53:d2:b6:4b:6e:54:3f:fa:8f:79:64:66:6c:73:21:41:62:
         0f:b4:77:f0:ce:1e:69:68:ef:45:07:7f:09:3e:fb:79:ae:6f:
         c5:21:8e:55:08:66:00:a4:d6:9e:4a:6f:01:eb:ec:81:f7:98:
         4d:5d:8b:2f:39:43:bd:8e:cf:38:60:8a:52:5b:eb:db:20:fb:
         0c:3f:b3:ec:33:21:9f:dd:95:c8:56:2c:0e:90:70:6c:3b:dc:
         01:14:60:ad:59:01:fb:50:f8:c5:df:d8:5f:2a:e5:5c:e3:80:
         7f:06:58:d1:10:50:49:94:7d:a1:18:97:3c:cc:71:40:03:2f:
         ea:21:f2:11:02:45:49:9a:87:88:be:5e:1b:59:c4:f7:55:8a:
         67:07:c3:52:fb:6e:ef:24:73:8d:e8:d9:a3:ee:6e:0e:a1:dc:
         02:a1:3b:64:5b:a0:62:e3:0a:7f:63:45:0c:6f:b5:c3:4c:cd:
         cd:b8:7f:54:6d:d3:31:10:6d:c7:92:bd:2a:f1:1b:2c:15:99:
         ce:92:d2:0e:7b:c8:b1:67:f1:78:26:16:fc:f1:b7:13:31:eb:
         a6:b0:e8:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 01:04:35 2025 by rpki-client