Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/24d84c66-fcc3-3ede-b576-e49b2474e984.roa
File:                     24d84c66-fcc3-3ede-b576-e49b2474e984.roa (raw, json)
Hash identifier:          C+kx5nl9dNj0f09Ln3WsO9TVcb6MiSVinKrqZYO65TA=
Subject key identifier:   78:A1:73:7B:10:89:9A:8C:3B:15:09:E0:FC:8E:37:DD:A9:1F:B5:BB
Certificate issuer:       /CN=7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101
Certificate serial:       010D0C9F4328584B004BEFB5C18F7DB5F3079420
Authority key identifier: 72:40:90:B4:BD:E4:75:37:6E:E6:CE:EC:1D:3F:B9:54:C1:56:E7:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/24d84c66-fcc3-3ede-b576-e49b2474e984.roa
Signing time:             Thu 28 Aug 2025 01:00:33 +0000
ROA not before:           Thu 28 Aug 2025 01:00:33 +0000
ROA not after:            Wed 26 Nov 2025 02:00:33 +0000
asID:                     22237
IP address blocks:        199.83.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:00:4b:ef:b5:c1:8f:7d:b5:f3:07:94:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101
        Validity
            Not Before: Aug 28 01:00:33 2025 GMT
            Not After : Nov 26 02:00:33 2025 GMT
        Subject: CN=841ee216-dff0-43fd-b716-144365b02379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ce:d4:66:b4:7a:64:bb:bc:e1:9e:17:25:08:
                    8a:7f:a6:09:77:a3:59:88:97:52:b3:72:d9:95:ef:
                    d2:b1:e5:83:77:31:15:61:81:51:70:5b:ca:cf:27:
                    db:e8:21:32:61:ce:da:eb:82:ee:20:a1:4c:a4:9e:
                    54:2a:14:ad:f5:31:fa:06:ec:93:37:96:a5:ce:09:
                    6b:2d:34:7b:91:eb:32:20:d4:52:a9:56:3b:b5:d6:
                    b1:62:53:82:76:f9:b4:fc:0d:9c:3b:06:58:31:a6:
                    42:61:a6:74:c4:9d:72:ca:65:c6:a1:44:c8:ce:a1:
                    94:69:72:66:70:26:b7:96:60:76:06:c6:9b:3f:e4:
                    15:ee:a0:5c:2a:70:c4:55:54:5d:c0:ee:57:3a:21:
                    ae:d5:10:ca:f5:9e:80:de:de:02:2e:d5:ec:4f:ea:
                    06:e9:7f:65:80:de:a7:fc:a2:61:57:66:44:7d:8b:
                    2c:18:5a:96:d8:43:20:c9:db:df:c3:90:83:ca:41:
                    bc:ed:14:b6:4c:4c:07:22:56:8a:29:99:a2:29:39:
                    ce:9e:2d:35:31:60:1e:33:2b:6d:96:ac:b6:8c:a6:
                    16:e0:cb:44:6a:a2:d8:12:2f:f5:85:04:26:0f:77:
                    e2:c6:60:e2:e0:5e:86:bc:7b:b4:4d:38:18:0c:ca:
                    59:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A1:73:7B:10:89:9A:8C:3B:15:09:E0:FC:8E:37:DD:A9:1F:B5:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/24d84c66-fcc3-3ede-b576-e49b2474e984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.crl

            X509v3 Authority Key Identifier:
                keyid:72:40:90:B4:BD:E4:75:37:6E:E6:CE:EC:1D:3F:B9:54:C1:56:E7:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7ea55eb3-4cd0-4f2e-8cb7-8e594c8ac101.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:27:be:43:cc:a9:bf:56:5b:99:2e:bb:82:35:f5:39:2a:69:
         d3:bc:33:26:f3:1c:f1:75:88:6d:43:ab:a5:f5:b8:63:e5:ee:
         b5:d3:a6:94:e6:97:da:e5:1f:c9:20:8c:2a:ea:25:ec:6e:7e:
         0a:e2:0a:bd:c9:88:5d:82:bf:48:cf:17:be:fb:a5:fe:d8:b5:
         ac:4a:92:86:a1:5f:41:c9:72:22:74:7e:41:36:81:04:4c:02:
         e8:3b:bd:c6:82:95:7e:9e:8d:68:21:0d:27:7d:31:7e:f3:94:
         9c:f2:a9:6a:8a:20:15:7e:ad:d3:a9:21:a9:bc:7c:bb:ff:2c:
         53:f3:08:5e:de:09:5f:89:07:c4:50:64:97:3b:9c:09:28:db:
         0e:99:4f:8a:ee:7b:60:2c:da:be:fc:ed:9e:96:a2:ac:2d:8f:
         36:2b:66:74:e8:6d:ef:03:17:5d:4a:f5:4c:b8:92:15:51:68:
         8f:58:6a:4f:49:a0:4f:d1:fc:e1:db:d3:9e:5c:50:ee:6d:8f:
         1a:cd:3d:e6:9c:4b:c5:e8:ef:d6:75:f4:6b:a0:9d:e6:63:b0:
         84:5e:93:ba:ad:31:89:30:40:57:62:f8:14:b4:36:42:92:1d:
         4f:e3:b8:36:36:f0:d8:72:70:52:7d:76:0b:07:b7:02:a3:99:
         5f:b4:cf:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:32:50 2025 by rpki-client