Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4ea91928-cdb4-3b83-aefe-7adad22882fd.roa
File:                     4ea91928-cdb4-3b83-aefe-7adad22882fd.roa (raw, json)
Hash identifier:          hOqWDyZdxDmwS2QkmLDs2PjiHYqZTyL5cR2IAQSrt08=
Subject key identifier:   76:C8:AD:75:66:AC:3C:AF:57:41:18:19:4E:20:97:A1:EC:88:0D:3D
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584B21CC23E4504735F6A56F2880
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4ea91928-cdb4-3b83-aefe-7adad22882fd.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     12083
IP address blocks:        24.214.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:23:e4:50:47:35:f6:a5:6f:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=bba0088c-1864-4e38-8812-b4388794b5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:97:8b:2a:dd:c5:8e:f7:dc:c7:3e:d0:e9:2f:
                    3a:de:2a:31:24:18:02:28:9a:b0:d7:4b:d5:39:b7:
                    bc:6d:19:14:6f:e4:9b:45:00:16:e7:f0:c5:1d:42:
                    84:5c:65:e4:df:7c:d5:c8:ce:30:60:4a:70:2d:4e:
                    eb:de:65:00:4d:02:32:3a:1b:bb:b9:c5:47:14:2f:
                    d5:ca:61:b5:b0:9b:c9:d8:56:5d:d2:59:5a:0a:d8:
                    95:f0:9e:7b:61:e2:15:52:33:09:7a:18:8c:cb:81:
                    3b:d2:c6:b0:4b:ae:20:d0:e6:70:07:3b:d9:e8:03:
                    d3:ae:0a:65:3e:b3:ca:b1:42:58:7f:30:b1:f4:d0:
                    2c:86:1d:36:71:c5:66:88:6a:9e:81:46:c9:9c:e6:
                    2a:b7:48:dc:77:c3:8a:92:e0:53:0a:76:cf:24:57:
                    f9:d0:c3:64:6a:be:66:5f:91:84:33:eb:06:ac:a0:
                    0b:b1:74:cd:3e:a8:93:47:ac:c2:da:e4:da:63:23:
                    b3:ae:4a:fc:97:7f:df:bc:dc:73:a8:df:f4:de:83:
                    dd:81:24:63:5a:0c:fd:bc:11:43:76:8d:39:6b:7f:
                    9a:b5:ba:69:49:9b:c0:f3:99:c2:bb:8e:4b:f7:36:
                    7d:e5:47:d9:6c:04:a9:57:8c:93:59:f7:7d:b6:0d:
                    40:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C8:AD:75:66:AC:3C:AF:57:41:18:19:4E:20:97:A1:EC:88:0D:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/4ea91928-cdb4-3b83-aefe-7adad22882fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.214.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:44:38:a4:c7:10:cd:62:81:64:f1:17:2d:cc:20:82:2d:f0:
         16:f1:a7:a9:76:f1:27:cb:82:b7:14:d0:54:aa:53:b0:6d:e4:
         96:d7:c8:71:bd:d1:c9:64:4b:9d:3c:41:e3:ca:ed:1c:92:98:
         a0:25:ff:34:5a:03:04:a2:ee:13:6f:ca:6e:e0:02:7c:80:03:
         e3:4b:95:21:6e:ff:c9:74:24:09:48:f7:2b:bd:1b:e9:9c:3f:
         89:1e:18:26:62:bb:51:bc:21:0d:b7:90:19:33:a9:ac:a4:6c:
         02:dc:ca:70:08:11:d4:ab:03:67:65:20:35:32:99:ba:4a:01:
         51:35:91:cb:fa:62:64:26:c3:34:9b:e7:1b:97:50:68:23:89:
         97:03:f4:bd:0f:cf:fc:b8:63:87:7c:c8:10:5d:a8:f7:28:12:
         6a:ad:b4:59:3c:ff:30:7d:d9:20:c2:5b:45:7b:cf:74:0d:74:
         5d:71:59:df:e1:a4:80:53:d9:b5:61:58:4d:e0:7c:b0:48:cf:
         2b:38:6d:11:1b:5f:da:7f:cd:50:37:75:6d:aa:bd:e2:95:67:
         94:0f:5f:34:75:e6:31:68:51:89:3a:0b:ff:0d:47:af:44:11:
         3b:85:12:63:79:b2:81:69:ed:ac:62:c9:db:a8:aa:e0:ae:1f:
         fa:99:95:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 15:50:56 2025 by rpki-client