Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/fa992bc0-4266-3263-bc3c-296661220bcb.roa
File:                     fa992bc0-4266-3263-bc3c-296661220bcb.roa (raw, json)
Hash identifier:          utPbWlIbzuyqiK7KFrEahfuMeUytU8fgGxJZEpdTaUA=
Subject key identifier:   FF:A9:DA:13:1B:FA:BB:AC:80:03:29:9B:F5:37:BC:AD:DD:1F:68:37
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584B1806D9CA44115A267E9FE8C0
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/fa992bc0-4266-3263-bc3c-296661220bcb.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     7992
IP address blocks:        24.141.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:d9:ca:44:11:5a:26:7e:9f:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=80c0e48a-127b-479e-9b60-399ec107d5fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:54:c6:2f:8a:91:47:6e:30:16:9d:54:d7:b9:
                    40:f5:a4:df:f6:1a:09:72:08:16:b1:04:23:a2:b3:
                    de:ea:36:c4:58:ad:ca:20:d9:d7:a2:84:80:6c:d7:
                    f3:49:b5:18:d4:31:c5:0f:d1:1c:35:48:c6:f0:22:
                    eb:12:32:28:c4:56:20:ab:e2:71:f2:1f:23:3b:78:
                    e3:ba:2e:72:6f:c1:5f:c8:3c:4b:cd:76:37:41:31:
                    a8:14:90:8a:19:66:c8:7d:74:bf:cf:1b:b2:1d:81:
                    81:1a:40:08:ae:fd:6d:82:cd:38:8d:5e:66:ac:04:
                    e9:86:ea:8d:d3:7d:40:7d:56:73:5f:91:3e:89:16:
                    e1:f6:96:8b:84:98:12:a0:da:24:50:c6:ee:09:bd:
                    62:83:22:5c:41:1c:e5:da:a7:56:ee:e8:a3:85:ac:
                    d6:d9:a0:48:cc:11:17:2d:6d:54:bf:5a:a6:9a:af:
                    8d:17:32:07:c4:57:cd:4e:4b:7d:74:1d:6d:62:d7:
                    76:73:e3:b2:32:03:15:09:07:3d:58:25:bb:3e:96:
                    e5:db:0e:1b:af:39:b1:a6:c9:84:69:42:66:b4:a8:
                    6d:02:40:aa:34:fa:8f:53:80:5e:8f:23:c0:ca:34:
                    8c:ff:f2:e8:9c:a0:73:57:78:88:38:94:94:41:63:
                    05:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A9:DA:13:1B:FA:BB:AC:80:03:29:9B:F5:37:BC:AD:DD:1F:68:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/fa992bc0-4266-3263-bc3c-296661220bcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.141.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:0d:8d:74:4f:dd:83:ee:d0:3b:7e:95:ff:52:d1:ff:8f:ac:
         fc:bf:a7:08:45:f0:a7:b9:22:1c:b1:5b:dc:58:70:11:3e:5f:
         93:0e:d6:c6:43:70:ef:32:6b:4a:93:8b:20:6c:a3:f3:a6:67:
         b3:b1:59:92:7d:28:66:2a:09:61:44:81:af:08:d1:f1:ec:80:
         d4:d3:f1:a9:36:b9:cc:31:70:b4:df:e5:86:14:83:6e:20:9d:
         3e:6a:08:65:32:d0:82:69:8e:fa:fd:7c:87:90:c4:3e:12:72:
         d6:a6:b8:3f:eb:95:31:c0:13:ac:14:7b:54:9a:49:72:d4:6a:
         6e:81:51:aa:04:14:20:27:fd:bb:07:dd:05:19:e0:3b:a7:0c:
         96:db:24:d2:d6:28:e6:3b:7b:94:01:cc:3d:d5:7d:32:19:88:
         c6:99:06:b7:52:9d:81:ce:dd:7a:0f:fd:9d:fc:f1:1d:4c:65:
         2a:47:75:82:2f:fc:06:f8:91:c8:6a:e6:41:f8:ec:ff:5e:12:
         48:98:01:91:55:de:56:b5:62:85:70:12:20:d5:e5:7e:e9:93:
         51:16:1d:68:27:96:d3:08:84:01:bd:45:d9:d8:5c:9f:29:ba:
         65:a4:75:9c:3d:cf:ac:a0:f8:08:4b:83:e0:ea:b0:7f:fa:1a:
         2d:e5:21:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:06:48 2025 by rpki-client