Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/d24e1119-5be2-3190-a36f-e8056d9c96aa.roa
File:                     d24e1119-5be2-3190-a36f-e8056d9c96aa.roa (raw, json)
Hash identifier:          btGndNmYR7Ve5PZfTuQPqk3p6qypayg37XqsF4iUU8c=
Subject key identifier:   B0:26:32:E1:38:65:AB:45:D1:6F:66:FE:6C:84:F6:35:59:C6:09:C1
Certificate issuer:       /CN=e8344a1b-565c-4cdf-b2ee-9556f276e3b6
Certificate serial:       010D0C9F4328584AF951435CF26E3FC8098C9D00
Authority key identifier: 26:7C:FE:57:A0:4A:CC:73:CA:2A:1C:0B:3E:7C:C5:1E:7F:AF:95:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/d24e1119-5be2-3190-a36f-e8056d9c96aa.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     16509
IP address blocks:        192.172.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:43:5c:f2:6e:3f:c8:09:8c:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8344a1b-565c-4cdf-b2ee-9556f276e3b6
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=9999bbe6-85e1-4f00-af75-631138313692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b8:c8:f0:86:42:0b:f5:39:ed:fd:92:bc:61:
                    58:9b:a1:65:c0:e5:a7:bc:5b:15:3a:6d:4d:65:35:
                    d7:03:05:dd:5f:82:d2:30:57:30:8e:f0:f1:eb:f4:
                    e5:45:c0:0c:e8:c5:33:6f:7f:85:a8:0e:9c:80:25:
                    8f:85:ef:fc:39:fb:39:22:60:cd:e4:8e:db:a3:fc:
                    65:dc:73:1a:fd:76:6f:31:33:37:d1:c0:b6:9a:99:
                    3b:66:85:07:aa:0c:03:c8:30:17:56:63:de:6f:6b:
                    c6:3c:0f:41:f7:21:f1:6b:47:6c:1a:5b:ca:98:ff:
                    6e:4c:ca:35:12:9f:5a:a8:d6:79:d3:1a:25:9d:48:
                    8c:23:64:31:e3:16:88:0c:94:e7:90:a3:c8:12:91:
                    07:5b:bc:59:22:bc:d1:f1:73:e3:7d:2b:8a:a1:82:
                    0e:db:e4:6e:cd:2b:73:04:18:90:3d:7d:bf:db:cf:
                    64:92:88:89:13:b1:63:c1:24:6f:ba:fe:17:65:6b:
                    d4:00:af:d1:3c:ae:b3:d5:d2:11:4d:ed:6d:10:2b:
                    82:48:9f:bc:c6:0e:f0:1f:58:87:2f:4d:f3:5e:89:
                    fd:ca:f6:9b:50:09:7f:02:f7:4d:e9:40:78:a6:b7:
                    b1:28:a3:e2:37:67:dc:24:99:f4:28:3c:4c:fe:e7:
                    b4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:26:32:E1:38:65:AB:45:D1:6F:66:FE:6C:84:F6:35:59:C6:09:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/d24e1119-5be2-3190-a36f-e8056d9c96aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.crl

            X509v3 Authority Key Identifier:
                keyid:26:7C:FE:57:A0:4A:CC:73:CA:2A:1C:0B:3E:7C:C5:1E:7F:AF:95:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e8344a1b-565c-4cdf-b2ee-9556f276e3b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.172.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:e6:bb:77:b0:0a:41:11:e9:60:26:fd:cb:53:d8:6d:dd:52:
         d7:91:36:06:21:e9:9a:ed:95:fb:67:21:65:b7:ea:dc:6c:bf:
         a8:ef:b2:67:d2:b8:f1:06:50:b5:75:4a:08:4b:25:87:58:54:
         2a:60:34:23:42:52:a5:0d:89:9d:66:63:f7:ea:26:7f:1b:19:
         b2:80:ef:f9:80:4b:6d:b2:49:06:84:6e:c8:31:dc:74:13:f5:
         01:d2:86:95:6b:04:e1:21:d2:a5:10:4f:66:0c:86:8d:79:e8:
         9b:63:ae:0b:0c:5f:6e:b3:83:0e:4c:ee:55:cc:50:aa:ae:e8:
         f3:bd:e9:dd:6e:a3:6d:c3:46:46:a8:9b:41:dd:ef:ce:aa:0b:
         48:18:fe:e6:c8:95:dc:c9:34:3e:8a:04:d6:7a:72:96:a5:7e:
         3c:ea:f7:78:cf:b5:76:ce:e9:2c:72:34:55:db:27:70:ca:a5:
         d8:df:91:b5:a9:3f:91:f6:d1:8e:88:d6:aa:df:15:5b:25:61:
         2c:49:37:70:fd:bc:19:e0:35:5e:76:4d:6b:71:4b:54:90:3c:
         32:13:95:3d:ba:ff:92:d7:48:08:c0:bf:d6:1e:71:b2:0c:d5:
         62:99:1c:24:d9:73:16:73:52:47:75:66:48:99:8c:d8:3e:7e:
         2a:7b:d6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:36:49 2025 by rpki-client