Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/835bfbd1-3f46-3ba6-85aa-220efeb03297.roa
File:                     835bfbd1-3f46-3ba6-85aa-220efeb03297.roa (raw, json)
Hash identifier:          Rs0QFTB5RFseSL8++gPtxNh1VfW8E1TgSFtmLmYPi3w=
Subject key identifier:   76:AB:49:50:41:13:52:F3:D9:CA:99:1E:A0:17:15:7C:BE:5A:4C:B0
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584B328C5D1A81AC3EE776EE1D20
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/835bfbd1-3f46-3ba6-85aa-220efeb03297.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     11260
IP address blocks:        24.142.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:5d:1a:81:ac:3e:e7:76:ee:1d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=5044193f-cf56-41d1-ba6c-d496a7bf130d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d7:d9:be:88:21:af:ea:4c:25:4d:00:d1:d7:
                    a5:ce:23:0d:ee:b4:8d:29:e1:36:df:2a:08:48:8f:
                    5e:c2:2c:fb:1a:bb:15:04:ad:2f:27:a2:c7:27:87:
                    56:ab:8d:aa:1e:9f:81:12:ee:fb:05:bc:28:81:29:
                    45:b4:fb:b3:e8:34:07:0e:54:0c:8c:d0:ae:1a:84:
                    b3:81:d5:ef:72:ae:09:c4:e9:bf:44:b4:b5:3b:27:
                    0a:1e:1d:aa:a8:a1:e2:d9:7f:86:46:d2:ed:66:ee:
                    10:aa:a4:9e:0e:c5:04:77:00:e6:58:59:a3:cc:96:
                    a6:79:84:69:bf:9e:0b:08:e9:be:f6:55:87:12:71:
                    51:b7:06:d6:4f:f4:02:a9:a5:a1:18:cb:da:77:88:
                    bd:9f:29:c2:eb:64:20:89:28:d6:56:68:19:95:9c:
                    0d:27:e7:25:47:79:95:dc:54:9d:a7:07:8a:73:88:
                    8d:a2:db:8a:b1:3d:d3:f5:d7:39:92:3f:ab:4d:ac:
                    7f:16:67:11:1d:74:ef:f2:95:d2:82:72:dd:c6:32:
                    1d:cf:86:22:cb:aa:0a:92:9a:69:41:74:1a:0a:f2:
                    7a:04:38:5a:d8:6e:b1:12:ca:f7:7d:ad:93:34:1a:
                    b8:2c:fa:a0:3d:8e:9a:f3:af:a7:c0:66:b2:57:fe:
                    96:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AB:49:50:41:13:52:F3:D9:CA:99:1E:A0:17:15:7C:BE:5A:4C:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/835bfbd1-3f46-3ba6-85aa-220efeb03297.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.142.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:77:f5:24:58:47:ff:b2:8c:04:22:12:55:5c:19:42:93:e6:
         6b:94:b3:1d:84:ba:15:d3:04:6b:62:f2:9c:d0:2d:5f:9a:d1:
         02:f4:30:94:23:d8:ee:da:08:8b:6b:37:83:9a:f3:52:20:a8:
         16:8b:8a:85:a5:0b:18:8d:76:5e:f8:80:d1:08:22:8f:d7:51:
         a3:f6:8c:4f:26:3c:48:2c:c2:13:1c:52:41:26:82:26:cb:7b:
         4c:6d:78:c2:ab:20:c8:e8:9b:d4:aa:2d:bb:97:1b:5d:7c:82:
         91:f2:b6:a2:f8:75:ad:87:e5:42:c1:2c:6f:8e:1d:37:db:7c:
         98:80:2f:6f:9f:c9:ef:e7:93:67:f3:64:80:34:85:8f:e9:14:
         e3:d9:55:6d:b3:7f:fb:84:48:9d:a7:4f:f0:5a:54:14:f6:fd:
         5e:02:6f:66:03:e8:d9:23:2b:93:97:25:e0:58:e0:86:74:1e:
         62:60:a4:27:ea:87:8c:02:90:17:64:7d:32:6d:3a:4a:cb:f1:
         2c:dc:0a:ce:77:cc:ef:f4:dc:de:26:d4:a1:63:9a:63:3f:7e:
         79:25:41:c8:a4:fb:13:45:09:09:88:df:cc:26:cf:40:1d:22:
         0d:e9:40:e6:30:e7:d5:20:f1:a1:8f:03:3e:fb:26:d3:60:27:
         e0:57:ce:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:34:34 2025 by rpki-client