Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e8d1a292-4a56-301a-af82-db7855cbcefd.roa
File:                     e8d1a292-4a56-301a-af82-db7855cbcefd.roa (raw, json)
Hash identifier:          LnY3L2XuEezE3eLIqYYqE4yryNrdhXMf8OnQpHFN05s=
Subject key identifier:   1B:BB:7F:33:65:B4:32:D7:F2:C3:9F:1E:BF:A0:5F:BF:41:25:89:1B
Certificate issuer:       /CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247
Certificate serial:       010D0C9F4328584B2B919AE61EE0040ABB305080
Authority key identifier: 42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e8d1a292-4a56-301a-af82-db7855cbcefd.roa
Signing time:             Fri 12 Sep 2025 13:00:42 +0000
ROA not before:           Fri 12 Sep 2025 13:00:42 +0000
ROA not after:            Thu 11 Dec 2025 14:00:42 +0000
asID:                     13767
IP address blocks:        142.147.79.0/24 maxlen: 24
                          162.254.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2b:91:9a:e6:1e:e0:04:0a:bb:30:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7bb9775-9631-4be4-a9c6-11b8ddfe6247
        Validity
            Not Before: Sep 12 13:00:42 2025 GMT
            Not After : Dec 11 14:00:42 2025 GMT
        Subject: CN=2899ca6f-8c8a-4a8e-a7c5-4dfb98e47bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:be:b8:e0:56:9a:12:ac:c2:ba:4e:d3:c3:72:
                    a6:1f:c1:a2:fe:c2:d4:38:44:d9:c4:0e:d6:ff:c6:
                    a2:52:60:3e:9a:88:16:12:f6:95:16:e5:d1:93:f3:
                    c9:94:a1:be:11:3a:29:0c:ec:9e:8c:6f:d7:00:de:
                    f8:bd:a2:3c:a7:b8:a0:19:06:6d:89:15:94:9e:b6:
                    3f:58:c7:29:40:2d:ed:ac:fb:ac:81:f5:7b:63:2e:
                    7d:07:18:67:1a:e7:96:c1:94:cd:13:b5:ec:73:58:
                    fd:ed:a3:24:7d:7d:30:2c:7d:1e:ef:58:02:d8:de:
                    1f:6b:cd:a5:93:b4:15:05:57:77:81:d0:da:89:a8:
                    e7:e1:3e:c5:b3:b3:7a:db:32:bb:17:d2:94:94:8c:
                    01:67:5c:a6:f9:9a:a8:79:3f:a9:8e:98:31:1d:ac:
                    2a:d7:49:c8:6f:eb:80:18:ea:6f:b4:ae:4b:38:8d:
                    24:0c:fb:17:bc:54:6c:f5:10:1c:25:89:ba:19:8f:
                    10:ac:7f:cd:09:a9:f5:a4:2d:6d:1f:ef:a1:4c:cf:
                    3e:cd:d9:0f:bc:ff:c4:a0:2b:5c:0e:78:3e:a9:06:
                    d5:7a:6d:6d:aa:fd:6d:04:45:62:a1:b2:7b:03:f3:
                    da:a5:92:e1:99:19:80:25:71:2a:bc:e7:17:0b:45:
                    e6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BB:7F:33:65:B4:32:D7:F2:C3:9F:1E:BF:A0:5F:BF:41:25:89:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e8d1a292-4a56-301a-af82-db7855cbcefd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.crl

            X509v3 Authority Key Identifier:
                keyid:42:CE:C2:66:75:1E:F3:81:F0:25:35:81:40:83:B0:04:D7:68:EB:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e7bb9775-9631-4be4-a9c6-11b8ddfe6247.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.79.0/24
                  162.254.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:d0:ef:d6:ee:30:65:b2:16:09:a3:5c:93:26:84:be:b8:b3:
         1e:45:c0:05:27:be:4c:19:35:db:b0:06:69:a0:05:c8:68:fb:
         b5:da:c3:65:b6:48:d2:42:3a:31:14:70:9e:b7:c4:44:3a:61:
         7c:a5:07:29:cd:66:2d:b0:09:7f:00:4b:24:d6:7a:54:48:12:
         f9:74:3a:38:5b:b4:af:3d:0b:f4:04:aa:7b:cc:a4:f7:c2:89:
         0b:3d:51:6c:e1:ee:88:72:cc:26:73:f0:1b:62:5c:bd:22:a1:
         e4:02:44:97:1d:02:6c:59:d4:31:b9:f9:2c:0e:2e:83:35:d4:
         d4:2c:ef:b4:04:a2:3f:b0:93:da:8f:a5:d5:c2:87:10:aa:50:
         71:b4:03:7a:73:55:90:55:b9:4a:27:ae:23:d4:63:28:aa:8f:
         d7:05:00:41:6e:55:c6:26:c8:ea:be:9d:f9:bd:2a:09:32:3d:
         50:af:d4:ec:dc:0a:05:16:16:d8:2c:0f:73:fb:bc:c1:59:76:
         85:42:49:2e:41:67:85:b5:eb:17:91:89:14:ce:fe:00:bc:16:
         25:10:9a:26:25:1c:a6:d0:56:89:79:7d:c5:a7:80:68:af:2c:
         d6:23:55:42:72:7b:98:3b:44:81:21:22:bd:d2:33:9f:79:f9:
         27:2c:5c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 09:57:32 2025 by rpki-client