Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/3d9fa7b8-b230-3630-8fd3-52254fc19098.roa
File:                     3d9fa7b8-b230-3630-8fd3-52254fc19098.roa (raw, json)
Hash identifier:          /7M/9foDSmgsGXUClbMyEUbsV+qSb4cl6oMIB258yAo=
Subject key identifier:   CE:8D:54:B1:93:1F:54:59:72:45:19:48:F7:A1:E0:69:6A:EF:E1:D6
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584B1806DAC3138BD4DDD7027EE0
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/3d9fa7b8-b230-3630-8fd3-52254fc19098.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     7992
IP address blocks:        24.55.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:da:c3:13:8b:d4:dd:d7:02:7e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=df3997cc-08ab-4d0e-b245-e82266d93cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8d:ef:6c:dc:aa:31:bd:01:96:99:3c:6f:49:
                    5d:24:76:74:96:f8:7a:45:bf:97:92:9c:9a:78:96:
                    c9:e8:db:e6:1f:39:b7:7a:36:20:3e:08:60:70:47:
                    01:ae:84:0a:6b:b8:06:11:d2:6b:cf:d8:50:3d:4e:
                    d3:ab:39:27:36:67:2d:a1:8c:6d:cb:ec:7e:35:4a:
                    50:c3:1d:ff:80:4e:ac:7f:c1:76:07:57:96:ab:3d:
                    71:c9:0d:d3:f8:0f:21:63:99:11:d1:cd:19:1d:7f:
                    ea:10:ac:3d:98:0a:8c:bf:37:77:3d:18:a2:3a:af:
                    b4:07:34:d4:24:fe:01:e5:cf:a1:42:53:7f:93:e6:
                    89:d3:d5:00:70:ec:83:d6:98:f3:67:ef:b6:f8:94:
                    7d:89:dc:c8:7f:75:89:39:91:4c:9e:bd:85:86:7a:
                    a2:1d:c3:83:18:ad:27:79:39:6d:43:f8:00:a5:08:
                    cf:68:e6:34:81:8b:bf:1a:74:14:8e:2e:86:a2:3b:
                    9f:92:6e:7f:fb:ba:10:c4:d7:74:27:31:92:76:ea:
                    39:6a:a1:a8:ef:02:68:e7:f4:f9:be:19:e1:aa:27:
                    5e:47:49:5b:15:60:59:80:e1:35:d6:c1:e0:57:4e:
                    2e:e6:34:3e:63:2a:3d:e9:32:ed:09:5f:aa:7c:72:
                    44:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:8D:54:B1:93:1F:54:59:72:45:19:48:F7:A1:E0:69:6A:EF:E1:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/3d9fa7b8-b230-3630-8fd3-52254fc19098.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.55.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:d4:39:69:d5:8b:94:dd:96:e8:3d:29:00:8f:85:3a:57:70:
         2b:5b:d2:0d:ba:73:90:e9:2b:1e:3c:80:cf:7c:31:71:4e:db:
         1e:8a:ab:24:a1:18:61:37:80:78:49:ef:d3:b5:5e:08:1f:1c:
         ae:cd:db:3c:15:a5:42:d8:f7:37:4e:2a:1f:34:f3:3b:5c:28:
         fe:94:4a:c7:9f:d0:bf:77:89:e2:b6:fb:c0:31:ba:78:0d:fa:
         2b:d6:be:c6:ae:e1:ba:41:93:2e:13:d0:2e:a8:e6:a3:72:dc:
         27:83:aa:41:da:87:98:36:a9:c6:0e:6e:44:bc:a8:3b:c7:65:
         f8:37:d0:e0:45:8c:3d:02:f5:3d:38:e0:c8:4f:fd:e0:54:0a:
         25:12:e7:41:d9:e9:c6:ab:25:81:17:1e:dc:16:43:68:b2:f8:
         0e:83:6d:cc:77:89:1d:e4:6a:3f:38:67:5d:3d:5d:d7:25:7f:
         ef:d2:8c:ab:78:c0:8a:34:0f:91:92:ba:2c:57:d3:64:da:01:
         3e:ca:af:4d:f4:6d:c7:af:e1:cd:40:ce:f1:11:74:fe:6a:bd:
         a1:42:bf:a9:a1:8b:0b:6b:4d:55:e3:03:4b:aa:2f:e3:14:72:
         a6:1e:40:2f:1b:92:ac:09:75:cd:91:ed:fe:d2:30:93:ca:a4:
         0c:8b:dc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:12:01 2025 by rpki-client