Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/01931882-d387-3ec6-a3c6-4763b99968a5.roa
File:                     01931882-d387-3ec6-a3c6-4763b99968a5.roa (raw, json)
Hash identifier:          exAVmoh8cabOci2/kCZ3PJRQD2yM+dXlxjbEIDi00CE=
Subject key identifier:   B0:CA:1A:67:47:F2:1C:86:B9:25:F6:B5:50:30:B4:32:B3:AA:3F:D8
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584B1F0168018FBA2A6BD8AD8380
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/01931882-d387-3ec6-a3c6-4763b99968a5.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     398463
IP address blocks:        24.38.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:68:01:8f:ba:2a:6b:d8:ad:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=8ab54607-4887-4834-8371-cef5b08c3a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f9:95:f5:f7:f8:a4:48:e0:df:d2:7b:52:1b:
                    54:5e:2d:13:7c:8a:ce:43:4f:e8:9d:74:6c:06:58:
                    f9:69:f7:b0:df:78:35:d8:69:16:99:94:b5:4a:b1:
                    a4:10:df:bd:9b:33:df:d8:c2:88:aa:9a:4c:1e:bc:
                    2c:b2:77:16:00:0a:47:cb:a1:a6:c3:ef:86:9e:79:
                    7b:8f:a3:7b:2e:27:82:c8:31:4c:e1:16:32:34:7d:
                    fc:ee:c3:92:ee:76:4e:15:66:37:c2:64:0e:3d:0a:
                    2a:bf:68:85:3b:79:98:ce:dc:fd:33:ce:58:bc:8a:
                    51:2a:cf:5e:42:ef:4a:f7:bb:97:5a:35:0c:2e:df:
                    94:0b:79:d1:4b:a8:b0:10:4b:b0:87:0d:ce:5c:83:
                    8c:31:b1:78:12:47:1e:7b:30:c3:2c:a6:bc:0c:51:
                    89:c6:ec:f6:08:28:b4:9d:01:13:58:f3:4f:1a:7c:
                    0e:20:21:5f:08:68:9c:83:69:27:07:67:7d:f9:61:
                    32:9a:17:cc:89:33:9d:48:e2:cf:a8:05:98:b8:cb:
                    41:56:34:38:55:ef:68:a3:5a:d7:49:b6:2c:98:e1:
                    f6:4c:d7:59:11:9d:eb:31:96:56:8c:56:ea:6b:19:
                    d7:45:a5:7e:67:eb:2a:6c:71:d8:3e:f1:94:20:d5:
                    1b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:CA:1A:67:47:F2:1C:86:B9:25:F6:B5:50:30:B4:32:B3:AA:3F:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/01931882-d387-3ec6-a3c6-4763b99968a5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.38.39.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:4e:f3:f0:4d:d7:aa:8f:26:d0:8b:e9:cf:87:8f:34:72:0f:
         e0:6d:cd:be:1b:fa:bb:8e:1a:05:c7:5f:e4:74:91:ff:62:5e:
         f8:27:07:7d:d7:69:29:8e:57:d0:55:f4:dc:09:de:2a:17:c3:
         05:ff:3a:8b:a9:fa:7a:88:83:84:18:8a:b1:8c:bb:af:fe:6e:
         40:fd:8f:c3:09:62:55:fb:0a:9e:81:b2:ba:ee:21:fb:a1:3c:
         0b:da:f1:0b:43:99:ec:5b:4e:52:d8:b2:32:f6:e7:16:b9:04:
         c9:8b:15:ca:c3:f4:a7:80:e0:8b:15:b6:c1:9f:cc:01:9f:16:
         d4:5d:1f:e1:b5:da:35:88:ab:ed:53:fb:7f:11:5b:6a:2b:1f:
         61:35:df:bf:d8:81:51:c6:62:06:f2:b9:7d:01:74:a6:f4:67:
         e5:fa:87:b2:26:9b:e3:be:5a:e4:2e:3c:e3:2c:4a:1f:aa:9a:
         14:23:b6:13:62:af:51:56:d8:c4:86:32:f3:11:72:a3:c4:cd:
         d8:39:4e:92:86:8d:e0:3a:b3:fa:8f:16:47:6a:62:70:9c:76:
         9b:2b:d8:a6:23:a5:f3:88:62:f6:3c:b7:3d:d0:b3:08:4a:78:
         5e:7f:2b:e5:d3:4f:64:2c:e8:2c:f2:dc:ef:62:fe:6b:58:48:
         23:e4:8c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:34:45 2025 by rpki-client