Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/9b1c53d7-a055-3051-9111-c6f8e5def468.roa
File:                     9b1c53d7-a055-3051-9111-c6f8e5def468.roa (raw, json)
Hash identifier:          THadqUMwoDkATjj6Jhy34KLTq4e2jbCLkb21VM6DRTU=
Subject key identifier:   56:61:1A:A6:A3:D8:C4:61:84:5A:D4:C4:85:7F:4C:0F:B2:8C:C7:E6
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584B047C0D87B745A9B869800CC0
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/9b1c53d7-a055-3051-9111-c6f8e5def468.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     4922
IP address blocks:        24.149.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:0d:87:b7:45:a9:b8:69:80:0c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=04e03d93-c183-47ec-b23a-390afbc09a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:36:ee:1b:5b:8a:3e:b5:c4:e1:38:ba:82:82:
                    e5:0d:7a:09:41:b3:11:4f:ea:e1:c7:40:e6:c7:39:
                    ab:a0:30:b7:83:80:95:81:4f:46:37:9d:4c:57:54:
                    7e:a1:9e:63:7c:99:91:00:21:3a:1d:8a:c5:d2:54:
                    b7:01:5f:ef:20:5b:6a:3d:96:12:43:c0:dd:09:6c:
                    34:e3:18:d8:2f:ec:38:70:c2:1c:af:9a:cf:81:c5:
                    5e:d9:fa:d9:5b:60:90:ef:c7:a6:28:d1:1d:c4:11:
                    2d:b2:7f:57:21:3a:59:f2:ae:05:a6:d7:7b:37:ad:
                    69:cc:29:c8:d9:5a:95:30:89:4b:f4:1f:3f:5d:e5:
                    3c:c1:42:75:42:68:83:c2:66:ce:36:82:58:62:6c:
                    1d:1e:8f:b9:77:d0:61:f0:2f:98:d6:83:9a:c0:c4:
                    19:1a:8b:f8:13:bc:7f:cf:5c:6e:93:4d:e9:49:23:
                    ab:45:9b:31:cf:47:7f:b7:d0:31:23:40:03:a6:3a:
                    d0:dc:af:33:3b:40:38:c6:bf:52:7c:37:76:a8:68:
                    5d:51:f0:b5:91:c4:98:34:2c:54:21:1f:14:ab:35:
                    65:ad:bb:7e:80:9a:2f:ee:98:a7:bf:0b:3a:24:3e:
                    6a:20:d4:07:f0:7e:e1:4d:46:c6:42:0e:cc:fe:0b:
                    22:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:61:1A:A6:A3:D8:C4:61:84:5A:D4:C4:85:7F:4C:0F:B2:8C:C7:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/9b1c53d7-a055-3051-9111-c6f8e5def468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.149.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e9:8d:c8:6c:d1:5d:02:5e:80:4b:11:3e:16:b1:b6:c7:4d:
         c8:f2:4a:e3:05:c9:ad:24:d7:ac:73:44:39:0a:30:ba:a5:a5:
         a7:06:4f:7e:e8:a4:07:68:e7:e2:0e:d9:15:de:a1:58:ca:0e:
         81:67:9f:2e:c2:2b:5c:9f:ea:c8:37:45:78:aa:7d:45:f7:fd:
         dc:62:9b:ac:28:38:6c:50:9d:48:e5:63:13:b2:c8:15:4e:8d:
         b7:af:24:4d:9c:d7:49:32:39:87:cd:1a:71:23:ea:8c:c9:8a:
         5d:37:07:a5:bb:d1:d4:54:70:fb:25:c9:07:f1:a3:b8:7d:78:
         4a:ad:2d:f3:5a:5d:f2:22:50:da:fa:1d:34:ed:70:5c:fa:dd:
         2b:fb:78:eb:48:18:03:35:22:65:49:8d:8a:32:38:db:3d:2e:
         6e:a8:83:dd:85:11:12:e4:99:9f:14:d2:01:dd:1c:c5:2f:4a:
         0a:7a:1b:a5:56:ba:a5:cd:c4:aa:8c:0b:8d:65:c6:33:54:6c:
         8b:9e:11:fb:8d:f0:bf:1f:c6:fd:b5:bc:91:6d:78:58:e7:18:
         f5:bb:82:58:68:87:68:c2:27:8d:d2:37:e4:25:f6:0e:de:34:
         7a:50:ca:02:4b:8a:d0:bb:27:cd:3a:46:75:35:a6:c3:49:30:
         7d:bd:e7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:27:51 2025 by rpki-client