Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7a8272ff-ce53-350c-ba43-dc92e803e1c4.roa
File:                     7a8272ff-ce53-350c-ba43-dc92e803e1c4.roa (raw, json)
Hash identifier:          hhuRGg24dP0aLiOGPidALwO9C1dYEa5brKJz1w3BAEs=
Subject key identifier:   B4:63:FC:01:90:42:8D:03:CE:95:47:7B:19:D2:C0:3A:EC:EB:69:E9
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584B328C2FFDA278E0F5DAD8C780
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7a8272ff-ce53-350c-ba43-dc92e803e1c4.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     836
IP address blocks:        24.38.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:2f:fd:a2:78:e0:f5:da:d8:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=e99a0689-f350-4111-aee7-1fecb75afb01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:9f:6d:0b:5d:19:2d:fe:67:68:7d:00:e3:af:
                    ae:b9:5f:6d:38:f2:90:30:e4:96:6f:ca:3f:92:68:
                    47:b5:d7:36:8a:2d:77:ac:35:78:51:59:5f:79:27:
                    1a:50:ff:cb:cb:a6:b4:f7:4b:7f:af:95:a8:58:e6:
                    66:0f:40:7c:00:3b:dc:91:63:ca:0b:df:1c:7b:96:
                    94:80:96:be:07:9d:cb:6f:2c:7c:a9:05:8c:a0:47:
                    0c:a7:28:1e:88:6a:6d:76:2d:97:da:2f:fa:7b:1e:
                    d0:be:c2:c7:e1:cd:97:f6:60:bf:b8:de:69:42:c4:
                    3b:5a:39:29:2c:9e:e7:07:bb:15:44:ad:28:9d:cb:
                    e6:8f:81:a9:fa:9f:a7:9f:78:84:66:a7:0f:6b:a6:
                    87:ff:be:74:2a:cf:bd:03:f3:ec:51:4f:f6:7c:82:
                    17:18:3e:6c:49:d5:82:bc:0e:77:0b:06:89:8a:e1:
                    59:16:e0:4d:3d:c1:33:9a:5b:aa:c1:00:6d:c0:93:
                    62:6c:69:98:ea:f2:4c:ef:77:fe:f7:eb:9a:84:0f:
                    26:64:a2:e5:6f:b1:a7:20:35:4a:5c:77:df:bb:e2:
                    4c:b9:e7:b3:5c:b4:b2:3b:25:18:32:66:4b:55:85:
                    06:56:7a:38:6f:24:04:25:35:80:b6:0d:02:4e:b5:
                    dc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:63:FC:01:90:42:8D:03:CE:95:47:7B:19:D2:C0:3A:EC:EB:69:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/7a8272ff-ce53-350c-ba43-dc92e803e1c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.38.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:50:00:30:89:16:3d:be:b6:55:6a:b9:c6:15:70:93:cc:83:
         ac:b1:55:a8:63:47:b4:2e:e1:13:c2:60:ba:be:d0:47:96:45:
         d6:29:8b:b6:70:69:ea:33:fd:69:50:2b:7d:92:db:b7:b7:ce:
         94:35:bc:11:cc:4f:fd:7f:0c:30:df:55:fc:eb:b2:17:57:a8:
         f5:5a:bf:aa:4e:9b:85:ad:2c:a3:d2:79:e0:97:ae:62:c7:32:
         e9:75:d9:f0:76:ec:c7:5c:19:42:fa:5b:08:00:39:c4:a3:0f:
         d1:f4:0a:0d:11:d6:cd:d0:9d:60:01:f9:f4:06:c9:ad:94:1b:
         62:1c:c5:c9:69:57:31:e1:33:08:a8:ab:fa:5f:3f:22:75:30:
         5f:02:8e:80:dd:da:1b:2c:95:81:c1:20:ad:80:4f:5e:0d:97:
         75:22:cd:0b:6e:5b:5d:f4:a7:4e:c8:d6:3a:0b:df:43:80:72:
         f9:78:51:f9:f3:4b:b8:4d:55:87:99:d7:29:88:34:87:ba:05:
         6c:7a:79:1e:22:54:fd:28:3e:96:e9:85:30:38:7e:b5:57:ca:
         a6:cd:a9:71:31:24:49:e6:23:0f:2b:c3:1f:fb:26:31:bc:bf:
         3c:5d:2d:63:3b:2c:13:91:fe:3a:92:c7:3c:5b:4a:0c:3a:a0:
         6c:12:51:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:36:56 2025 by rpki-client