Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/da18fc62-4f84-3557-bb3d-b3791cd1ee79.roa
File:                     da18fc62-4f84-3557-bb3d-b3791cd1ee79.roa (raw, json)
Hash identifier:          CKjU++0x1xDPfnHQxWSpXv9s7lkrcqxxguEyZRaIJys=
Subject key identifier:   A1:2C:7E:CB:0A:42:11:3F:04:BE:1E:F9:30:EB:63:A4:71:C3:A8:85
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584B21CC2DD828C0E4712FA5FC80
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/da18fc62-4f84-3557-bb3d-b3791cd1ee79.roa
Signing time:             Tue 09 Sep 2025 01:00:33 +0000
ROA not before:           Tue 09 Sep 2025 01:00:33 +0000
ROA not after:            Mon 08 Dec 2025 02:00:33 +0000
asID:                     12083
IP address blocks:        24.35.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:21:cc:2d:d8:28:c0:e4:71:2f:a5:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Sep  9 01:00:33 2025 GMT
            Not After : Dec  8 02:00:33 2025 GMT
        Subject: CN=bb3d1fba-9889-4e1f-93d8-b56e9f704642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:37:98:dd:00:ca:8e:5f:ae:e0:b6:f3:c9:9b:
                    a6:51:44:8e:71:62:5f:d8:3e:ae:52:af:d3:92:76:
                    ab:66:3f:86:0d:5d:06:8d:de:e6:db:11:c0:f3:f4:
                    fc:9d:ae:16:98:b2:2e:9d:3d:f1:36:f1:e5:f5:22:
                    0c:b5:de:79:e4:c9:e8:58:7e:7b:00:dd:9c:ab:6d:
                    9d:0e:37:b1:50:5c:28:14:99:65:12:94:95:a3:a5:
                    b9:b8:e6:85:58:de:dc:3b:fc:20:d1:39:68:28:af:
                    de:38:b2:84:be:72:b6:19:11:9d:de:c2:44:67:81:
                    38:25:44:c8:de:ab:5c:51:a4:31:15:d8:71:dd:5c:
                    a9:29:36:61:82:12:07:e3:8f:41:c3:6a:b0:74:82:
                    5a:58:56:11:42:7c:f1:e5:82:ea:3f:d5:23:69:19:
                    b6:64:07:67:76:61:5b:c5:f7:f0:ab:2f:24:50:af:
                    7c:d9:de:35:f5:3a:14:e9:71:d2:13:74:a5:f5:9a:
                    22:c6:83:61:32:49:b0:0f:06:72:14:3b:a9:25:0b:
                    21:8e:25:ed:19:0f:00:40:a2:fc:2d:69:2c:22:d8:
                    c1:ba:17:36:13:dc:20:8a:10:8a:2c:d9:d1:ad:79:
                    d7:92:d4:63:f0:55:58:be:0f:cd:36:22:ce:e8:11:
                    81:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2C:7E:CB:0A:42:11:3F:04:BE:1E:F9:30:EB:63:A4:71:C3:A8:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/da18fc62-4f84-3557-bb3d-b3791cd1ee79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.35.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:41:91:d2:1e:d2:f2:61:4c:61:75:70:0f:32:45:c2:90:f5:
         c0:d5:12:45:35:6e:eb:7a:bb:0c:c0:14:78:b2:81:85:2e:12:
         3a:f8:9b:59:94:39:17:bd:b2:1a:f7:46:c5:cd:56:ac:c8:3a:
         c9:f9:68:e9:00:b7:8a:a5:44:c0:4d:41:f8:a4:db:2d:b4:d9:
         ee:71:31:53:b7:b9:84:a3:ee:a5:ac:f3:97:db:a1:f5:ec:1d:
         33:f4:60:6d:3e:e3:7c:7e:6d:b3:36:79:4f:99:6f:bb:f0:06:
         1f:b8:bb:67:86:16:56:25:51:e6:82:09:f4:de:ca:2c:40:e8:
         ba:6a:32:c7:32:54:53:cd:85:4b:f4:4d:06:bf:f7:30:4f:59:
         c8:fb:5f:40:57:ac:59:15:c3:55:83:39:de:e7:17:b0:46:8e:
         e5:c5:aa:25:dc:7c:bc:89:c2:1a:6a:c3:78:d9:72:83:1f:85:
         5c:0e:32:a6:da:91:93:4b:2c:7e:23:6f:2c:fd:71:fe:27:a7:
         05:04:4a:db:36:9b:44:13:88:18:7c:c1:f6:36:4b:9a:d0:c5:
         9f:15:cd:0b:00:aa:55:f1:d3:ee:84:f6:7f:c6:23:ff:2d:38:
         55:d7:2c:62:40:7f:34:e5:cc:d1:21:07:9f:01:65:cb:99:b9:
         05:f7:a4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 15:57:06 2025 by rpki-client