Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/5863f2cd-69d2-33bd-8af7-d1bcb385afa3.roa
File:                     5863f2cd-69d2-33bd-8af7-d1bcb385afa3.roa (raw, json)
Hash identifier:          0OGTpuz9GfNprUogc8w1TrlKsmCd8KacUJeUWAkoqZM=
Subject key identifier:   4D:79:C6:AC:56:A4:C1:35:02:C4:5D:23:23:9F:F2:79:20:F5:5A:20
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584B13D6B7A3C06FD6674DBC8280
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/5863f2cd-69d2-33bd-8af7-d1bcb385afa3.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     7992
IP address blocks:        24.36.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:b7:a3:c0:6f:d6:67:4d:bc:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=74e2a81f-7123-43fa-af32-dac489cc4906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:97:0d:65:c7:d2:44:c2:da:3b:25:20:5f:73:
                    96:7e:c3:ad:67:51:8c:27:6a:03:17:d1:9f:18:ec:
                    8a:be:38:d7:85:e7:f7:63:71:11:23:16:d6:09:22:
                    8d:c1:d1:4c:f7:25:27:1c:cd:db:ee:65:55:72:22:
                    6b:89:e7:42:b7:09:e3:fb:1f:91:7b:61:df:9c:12:
                    f8:a5:06:00:8d:0b:8e:43:a8:4b:01:31:7b:3e:3c:
                    ab:f1:03:12:89:c4:6e:b2:69:01:ba:ce:b4:5d:89:
                    f2:8b:7c:81:b1:a5:d0:cf:7b:8e:0e:46:5c:48:c6:
                    bd:40:94:4a:d1:f9:64:2f:49:c8:a0:04:4f:05:4c:
                    7d:ce:d5:12:fa:59:c3:95:d5:53:48:e5:55:dd:a3:
                    54:37:cc:4c:70:56:f0:e0:4a:5a:f9:73:d6:f0:7c:
                    08:91:22:9b:93:b2:b0:06:4b:1f:b3:87:c5:75:d1:
                    be:5a:f0:4b:bb:cb:e9:bd:4e:58:cb:bb:95:ab:33:
                    3c:75:2a:57:d9:27:54:99:35:a7:43:b3:e4:47:7b:
                    0e:03:18:ba:56:68:69:42:1a:0a:89:fc:b9:76:ee:
                    88:2d:49:37:07:ee:32:cd:5d:7b:5b:fc:fa:1e:79:
                    f1:b1:ba:5a:7c:53:22:0d:b2:0a:a9:8c:86:5e:f4:
                    b3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:79:C6:AC:56:A4:C1:35:02:C4:5D:23:23:9F:F2:79:20:F5:5A:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/5863f2cd-69d2-33bd-8af7-d1bcb385afa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.36.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:da:af:94:3a:16:4c:b3:81:7d:5a:98:9a:06:9b:26:35:41:
         2d:04:76:c5:ca:53:e6:84:b7:a5:49:3e:7e:19:5b:a2:dc:e0:
         44:65:cd:4d:1c:79:24:d6:7d:9e:fd:6c:a3:57:3a:0d:f6:db:
         61:2d:ab:79:8a:71:a9:f1:f9:84:5b:0d:f1:d3:68:99:4b:6a:
         a4:9b:71:60:bb:95:b0:b6:9d:e5:8a:e2:52:2d:a1:e0:34:a5:
         1c:f1:f8:be:d0:e3:2d:b3:b6:90:19:ce:ef:4b:85:b4:fa:95:
         bf:7a:91:d4:7a:df:07:27:1e:0e:d7:ed:36:d7:32:02:cf:77:
         01:dd:cb:0c:b5:66:dc:79:ab:fc:32:a4:f1:4e:a8:f9:e0:ba:
         cf:db:16:d0:57:f2:5f:41:13:ba:a4:f4:07:44:ab:4f:a1:9c:
         30:b7:67:81:51:15:41:8c:3e:55:21:06:44:13:e5:d2:da:e4:
         3e:44:69:a0:82:3d:33:05:6e:2b:64:26:57:6a:d2:72:99:3c:
         b2:95:bc:c7:73:d1:39:2b:79:7f:9b:df:29:dd:f2:fe:47:bd:
         d6:34:e5:d9:1f:78:67:9b:46:07:9e:7e:88:ec:6c:b1:d7:02:
         5f:8c:6b:41:1c:5f:ab:34:78:bc:9f:6b:a7:61:cb:c9:1e:62:
         2d:f1:dd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:09:16 2025 by rpki-client