Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/12e7bd35-126d-30c1-bd74-909e56a08057.roa
File:                     12e7bd35-126d-30c1-bd74-909e56a08057.roa (raw, json)
Hash identifier:          IBig/XoF4bmqB24jCSk17uIY7Aib/akv3a7M9NZQCqA=
Subject key identifier:   D0:E3:7D:C5:7C:76:9A:3B:75:1E:64:6F:F1:E8:41:AE:91:DE:DA:04
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F4328584B5B07428C217C25EE733EFA00
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/12e7bd35-126d-30c1-bd74-909e56a08057.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     394437
IP address blocks:        72.20.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:42:8c:21:7c:25:ee:73:3e:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=e675439f-6cc3-4837-8366-28a4009eca3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a3:ee:c9:09:1b:9d:77:9b:8d:6a:06:8d:b6:
                    ec:a3:a2:b5:fc:b1:b1:f6:29:3c:90:b4:c8:c5:e9:
                    8e:55:13:52:a1:23:96:f0:34:b1:34:5c:d0:97:34:
                    14:06:47:95:0a:73:5d:a5:c6:d0:62:d6:63:2d:ec:
                    e0:ca:56:8e:29:07:b8:c4:00:43:67:e8:f5:5a:28:
                    ea:32:0f:6f:3d:7a:54:b6:b4:c2:55:12:43:b5:7d:
                    36:9a:fb:09:6f:c0:94:12:22:89:14:a8:d4:94:01:
                    1e:47:6c:98:db:62:1d:c8:f2:5a:fe:5c:1c:2a:7c:
                    f0:03:2b:05:69:11:a5:f6:55:b5:90:11:f0:fa:d6:
                    40:2f:4a:e1:37:4a:2a:ff:a2:56:ba:fa:36:db:35:
                    18:ad:11:8a:03:b0:0b:8e:65:f8:3a:53:8e:e3:48:
                    07:3a:43:d6:0c:79:75:ea:6a:8a:40:0d:61:1a:bb:
                    80:d8:4f:79:aa:78:1b:96:1b:d0:f5:b7:37:d3:b3:
                    91:86:a9:10:98:56:1f:a2:f6:d3:bd:49:20:b7:1e:
                    e7:9d:34:2c:e2:72:23:22:d6:b7:d0:59:45:ab:cc:
                    e3:97:53:9f:10:69:c0:f8:6c:7a:5a:0b:e4:9a:3d:
                    68:fd:71:78:1a:af:c6:ee:29:6c:53:19:6d:38:77:
                    cc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E3:7D:C5:7C:76:9A:3B:75:1E:64:6F:F1:E8:41:AE:91:DE:DA:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/12e7bd35-126d-30c1-bd74-909e56a08057.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:e8:dc:b3:21:34:4c:ef:40:4b:ce:76:3b:12:52:45:2a:f7:
         3d:cc:bf:91:30:dd:d4:0b:0f:97:45:ed:55:cd:85:f6:ff:f4:
         74:de:e7:d6:36:b6:e9:7f:32:26:fb:a7:ea:25:2c:a1:c4:58:
         2a:86:e4:99:d9:31:65:71:15:87:61:87:82:61:ee:d2:52:5c:
         09:c6:4b:64:de:bb:58:fc:eb:79:45:2c:eb:8d:40:66:d9:26:
         0d:8d:ae:8f:2c:18:b0:37:40:b2:3e:92:ba:ea:6f:65:f8:1b:
         a8:96:32:b7:6c:38:92:df:4c:96:f1:b8:94:e7:2c:a9:aa:6b:
         03:64:9b:cc:bc:aa:c7:b2:4b:b6:28:5c:0e:8d:bf:8d:a8:94:
         4e:93:a4:f0:11:eb:ff:4e:e8:37:33:2b:d5:9e:4c:75:8b:ea:
         2c:ee:b6:98:79:33:7e:aa:a3:30:46:18:cb:35:d4:d8:98:40:
         d7:c8:16:e7:0b:be:91:65:23:07:31:c6:ba:2f:07:ca:58:a0:
         c5:24:f1:6f:05:1a:92:fa:bb:5c:69:a5:68:dd:d9:cb:8a:9a:
         1b:1d:a3:9c:6d:88:77:4f:27:2d:c9:1b:3e:e7:13:be:3f:ba:
         37:44:8e:18:1a:2b:75:68:1c:09:fc:81:cd:c2:fd:ba:b3:ab:
         30:74:2d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 05:13:08 2025 by rpki-client