Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a3fa8dd7-5f54-336b-b230-8914e3bdaf27.roa
File:                     a3fa8dd7-5f54-336b-b230-8914e3bdaf27.roa (raw, json)
Hash identifier:          C1ixT6h5DJmOUFZkGSBBjAm/Hws8FuCCL73ek6HNdBk=
Subject key identifier:   E4:97:AE:61:DE:9E:BA:69:E8:B9:F6:E9:16:9E:52:EE:B7:90:D7:C5
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B34C9D4C0A11BC88966856A00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a3fa8dd7-5f54-336b-b230-8914e3bdaf27.roa
Signing time:             Mon 15 Sep 2025 20:16:24 +0000
ROA not before:           Mon 15 Sep 2025 20:16:24 +0000
ROA not after:            Sun 14 Dec 2025 21:16:24 +0000
asID:                     23473
IP address blocks:        76.10.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:34:c9:d4:c0:a1:1b:c8:89:66:85:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 15 20:16:24 2025 GMT
            Not After : Dec 14 21:16:24 2025 GMT
        Subject: CN=d7738629-cce5-49dc-a9cb-de8a845e64c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:49:67:a5:42:86:00:c9:2b:96:53:ed:1e:a1:
                    d4:89:b4:85:1c:4a:09:60:3f:5c:ec:cc:45:8e:b6:
                    6b:a1:34:02:fb:58:bf:20:3c:09:fe:b9:cc:f1:de:
                    25:24:6a:6e:a9:0d:24:d8:58:6d:bb:ae:7d:35:d8:
                    c9:68:57:95:bf:9c:c4:63:a9:a8:59:bc:1d:99:c6:
                    b1:06:1a:43:91:a1:d7:8f:2a:73:84:bf:6d:3c:72:
                    a5:83:4b:97:dc:7a:38:58:fb:4a:1d:1f:20:d2:9b:
                    d9:dd:b9:06:7f:0d:05:ad:45:97:55:bb:05:82:00:
                    7b:24:e5:56:b2:8c:6d:5e:51:5e:a2:1e:8d:b3:e6:
                    49:c3:64:38:ee:27:af:76:b7:98:8b:0f:74:c2:c1:
                    c0:64:60:32:99:28:b9:77:99:73:91:0e:11:0a:93:
                    49:f9:e8:cf:6d:b9:0f:5d:99:e3:69:41:9c:3c:8b:
                    d9:2f:f3:97:91:04:e8:ab:69:7d:8f:0f:65:c6:9d:
                    f6:e5:21:95:8b:cd:c7:fe:70:b8:f1:54:94:b5:89:
                    70:36:a9:74:8d:ef:08:b4:20:1c:56:0e:5e:bd:ed:
                    17:66:f2:76:27:f5:fd:ce:2e:e1:0a:43:f0:c5:b6:
                    3a:54:1f:15:ee:bf:54:df:48:75:5f:bd:06:54:ce:
                    a8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:97:AE:61:DE:9E:BA:69:E8:B9:F6:E9:16:9E:52:EE:B7:90:D7:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a3fa8dd7-5f54-336b-b230-8914e3bdaf27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.10.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:f0:ff:35:c5:9a:15:8e:db:88:c7:db:3d:cb:a1:76:60:cf:
         fd:9c:c8:e1:0b:78:ef:9f:9c:d2:b9:58:b4:46:b4:84:84:63:
         50:c4:77:07:e8:e5:1d:a7:00:75:15:39:8c:59:1a:62:4f:3e:
         4c:12:3b:9d:95:aa:91:61:a4:4b:f6:72:7c:29:0f:ff:26:e7:
         b5:d3:40:7e:3a:87:f8:93:67:4c:b3:69:9d:51:93:b4:56:b2:
         02:62:83:8e:cb:44:b6:1b:ea:6f:cc:01:78:d7:d1:b5:9f:98:
         5b:25:70:31:a8:15:82:d3:06:e8:a0:37:38:00:92:ad:f5:2a:
         31:ed:ec:f7:1b:bd:df:5c:6d:2d:93:07:46:d5:e6:dc:33:22:
         8f:1e:c9:b0:fa:b1:c4:23:04:ec:76:e4:27:49:90:e8:02:d0:
         bc:0f:0d:17:09:a9:7e:e6:ab:1e:57:53:40:f8:6d:50:27:40:
         ee:3a:fb:fb:13:e0:e7:31:a5:63:61:e3:00:3b:e6:ef:08:38:
         25:f0:ea:9d:b0:19:21:4c:4d:d6:32:02:bb:14:ce:1d:aa:9e:
         a7:b1:55:04:9e:86:68:f6:14:5f:2e:ea:a8:a8:5e:14:41:08:
         a9:cc:d2:2f:4c:68:1a:10:19:ee:d6:5c:f4:b8:f9:5c:82:60:
         ee:3a:0a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:50:50 2025 by rpki-client