Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/c5f43895-6bc9-3894-bdb7-b3b636b3683f.roa
File:                     c5f43895-6bc9-3894-bdb7-b3b636b3683f.roa (raw, json)
Hash identifier:          pa7NiNQK6xqPxDWNmXTGz/ED2R/3Al5iYWayoW7B8vk=
Subject key identifier:   D9:7B:9B:28:27:F9:14:75:83:77:02:C5:5B:C8:7A:AB:1F:5F:4C:AC
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584B110C0AF5D496F18C5833D540
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/c5f43895-6bc9-3894-bdb7-b3b636b3683f.roa
Signing time:             Wed 03 Sep 2025 01:00:33 +0000
ROA not before:           Wed 03 Sep 2025 01:00:33 +0000
ROA not after:            Tue 02 Dec 2025 02:00:33 +0000
asID:                     7992
IP address blocks:        24.150.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:11:0c:0a:f5:d4:96:f1:8c:58:33:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Sep  3 01:00:33 2025 GMT
            Not After : Dec  2 02:00:33 2025 GMT
        Subject: CN=beefca2f-501a-44e9-aa56-e59b5704f283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a7:73:07:69:76:f5:7a:8c:2b:82:7a:d1:0d:
                    3a:b2:67:b2:d6:87:fd:85:e1:96:f4:16:f0:1c:02:
                    c8:fe:8a:c2:59:84:17:27:83:ce:bd:65:47:de:fd:
                    05:75:7e:28:98:4c:79:a1:68:e0:e2:95:7a:e8:8c:
                    d3:43:c0:17:ab:71:92:86:dd:5d:9c:3f:df:67:95:
                    97:17:1e:0b:46:2b:c4:68:8a:d4:8f:01:4e:fb:ab:
                    5e:80:1c:10:57:b3:df:49:f4:89:dd:6a:9e:a4:a6:
                    c4:b4:65:30:ed:8f:b6:8f:92:07:f8:c0:f7:a5:c9:
                    16:45:34:58:da:03:be:80:a2:e9:26:92:81:5d:03:
                    55:3f:c8:06:60:75:56:a0:13:3b:23:90:12:07:17:
                    8c:d4:4c:97:59:2b:de:2e:3a:93:f4:ca:fc:71:df:
                    d4:95:4f:2a:6a:ea:5b:7e:0a:f3:ae:e0:3f:f8:70:
                    34:8f:b4:21:2a:ff:bd:9d:d2:a2:22:5b:ca:43:9a:
                    22:ec:24:ac:47:14:db:48:b6:5a:07:3e:20:2f:b9:
                    5b:5e:81:d6:1a:11:5a:4f:fc:89:04:b8:6e:0b:2b:
                    90:a1:1d:24:5f:c3:62:b7:53:f6:4b:2b:bd:f5:3e:
                    31:fa:1e:ba:9d:e1:e0:54:d9:b1:d2:23:ed:2c:64:
                    96:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:7B:9B:28:27:F9:14:75:83:77:02:C5:5B:C8:7A:AB:1F:5F:4C:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/c5f43895-6bc9-3894-bdb7-b3b636b3683f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.150.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:6b:f8:18:78:5e:23:62:6b:e8:62:50:1d:3c:17:b3:90:8f:
         87:0f:6d:3a:d6:6d:a5:c5:d7:99:00:37:6b:4a:16:68:10:5d:
         75:67:cb:ad:44:d0:5b:09:b7:3b:a7:ea:e1:75:19:55:52:15:
         36:a5:95:8b:82:06:d0:72:12:ac:10:0e:87:c5:43:d7:90:b6:
         75:40:b3:6f:1e:d9:08:c1:ac:b3:b9:9e:97:fe:22:ed:52:59:
         24:12:fc:f3:3f:c4:85:9a:80:27:88:78:8c:5c:45:b2:e3:09:
         0e:4e:a5:f9:1e:23:4d:99:f1:b4:40:3c:23:a5:ec:bc:1b:50:
         d1:5b:c3:dd:ac:d3:5a:3d:a7:a7:c0:56:1f:d3:1a:e2:8a:36:
         e2:82:1e:a6:d7:78:23:67:9b:88:71:08:88:6b:dc:f8:75:8e:
         cb:5e:7f:2e:39:5f:b5:c4:d3:aa:8b:78:dd:9c:fc:ae:d0:71:
         88:6d:ed:33:f2:e3:35:c8:02:62:c4:c0:28:e8:18:02:c3:4c:
         9a:22:fa:fe:88:3f:44:dc:ce:7a:49:60:54:ad:0e:33:3d:15:
         60:54:24:9a:5e:02:83:b8:52:dc:8e:26:68:65:75:5e:f9:7c:
         c2:c9:e0:2d:e4:fc:1c:bf:3b:aa:e3:66:88:71:6b:9a:db:25:
         b8:c4:ef:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:09:58 2025 by rpki-client