Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/567dbc19-d17b-3283-9dd7-e3cbbcbfa6f6.roa
File:                     567dbc19-d17b-3283-9dd7-e3cbbcbfa6f6.roa (raw, json)
Hash identifier:          Hm8MH8BGrI0R1ZXEhdPc1Tu3wp1RzbZgkORb9DV4Ra8=
Subject key identifier:   EB:B2:75:BD:38:81:CD:51:CB:83:BC:08:06:75:2E:BF:D6:5D:0C:DF
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584B21CC2375B5D5C62EB1765D80
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/567dbc19-d17b-3283-9dd7-e3cbbcbfa6f6.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     12083
IP address blocks:        24.214.224.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:23:75:b5:d5:c6:2e:b1:76:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=f9679903-e178-4750-9eb9-044935706b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f6:f9:5d:06:da:53:f5:b3:d4:f4:64:65:2e:
                    d1:49:75:c0:ac:03:4d:c6:ce:12:e4:b9:e4:65:ca:
                    3c:8f:dc:f4:e8:fd:56:ca:15:f5:24:39:17:55:8e:
                    7a:49:8e:96:3d:ac:57:bd:1a:c0:f7:d7:18:b6:60:
                    cd:a6:ac:fb:e7:34:01:da:5c:55:9c:bc:f9:d1:af:
                    39:cd:d7:f2:21:aa:a1:73:cd:b3:59:81:6e:cd:3d:
                    84:f0:0f:b1:b9:3b:89:ec:84:01:83:f9:39:83:a0:
                    18:49:10:7f:37:d5:7c:92:5a:0d:45:0f:38:18:6c:
                    2a:25:69:08:e7:19:d0:02:82:59:e5:21:be:89:19:
                    ec:24:74:31:77:26:91:bc:74:f3:03:ea:01:41:a4:
                    8b:e3:28:16:db:a4:7e:4d:dd:22:b8:a4:8a:98:2f:
                    26:27:6e:46:8a:76:6c:4e:e1:a4:5b:e5:7d:7f:3a:
                    8d:cc:41:fa:21:02:38:19:57:70:d9:bb:26:ab:90:
                    66:29:50:65:5e:02:49:4e:9b:75:b9:3c:3c:20:30:
                    c9:9c:38:85:da:f8:26:70:25:f0:a6:03:b4:a2:ab:
                    2e:97:6a:c7:07:7e:2c:a7:d0:87:99:6b:be:26:a7:
                    f4:57:4d:1f:ac:ec:4a:47:fb:fb:8e:9c:4f:ce:dc:
                    94:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B2:75:BD:38:81:CD:51:CB:83:BC:08:06:75:2E:BF:D6:5D:0C:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/567dbc19-d17b-3283-9dd7-e3cbbcbfa6f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.214.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:86:89:c4:d0:34:f7:c6:ac:1c:8e:31:cc:f5:20:90:7d:86:
         38:ae:70:4c:e1:e2:f0:17:b5:71:9e:af:36:b9:ec:7a:55:77:
         34:0f:b2:97:d6:3b:07:c4:ca:81:09:83:4d:5c:ff:0d:01:4d:
         e7:2b:63:20:1d:a3:15:51:5e:6e:ac:ac:5d:b3:74:6f:29:d3:
         57:d0:d2:50:c0:31:c5:6a:47:12:de:19:b8:0d:62:4c:dc:e2:
         82:76:73:03:2d:ce:88:05:fe:e7:02:65:4e:84:cd:ca:cc:8e:
         ac:8d:aa:c9:a4:88:11:18:25:18:a8:84:e3:84:df:c6:8f:29:
         e6:c4:da:97:32:f7:9f:5d:83:99:f1:02:3e:92:61:bd:ca:97:
         18:b1:ee:58:a9:14:85:d1:24:d7:49:45:ec:00:b7:d9:89:aa:
         64:d4:b4:89:3a:db:39:95:9e:ca:07:60:b0:a5:ed:c8:59:b5:
         be:95:3a:a0:75:e8:29:dd:ae:22:69:7e:b0:78:fa:a4:d4:aa:
         3e:42:10:07:ea:b8:35:15:7c:93:a8:b9:d2:30:27:9e:64:96:
         29:3e:71:f6:30:99:6b:51:0a:93:b5:38:e1:e6:c1:92:19:1f:
         09:da:4c:73:2e:f1:3b:db:e5:1b:3a:e7:a9:98:7d:15:27:31:
         72:8f:6d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 16:00:11 2025 by rpki-client