Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/f701dec5-4fb7-3f04-8bd6-d3a33d2c090b.roa
File:                     f701dec5-4fb7-3f04-8bd6-d3a33d2c090b.roa (raw, json)
Hash identifier:          PlNY0DjPdR8ZWWgJCZj13Ah/vrXMMYuFbROS2szcuM4=
Subject key identifier:   CA:CA:91:FB:5D:90:61:78:F3:A1:53:F9:3A:33:26:7F:80:6F:0C:C0
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584B394A610524490A883EAA51A0
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/f701dec5-4fb7-3f04-8bd6-d3a33d2c090b.roa
Signing time:             Wed 17 Sep 2025 10:58:38 +0000
ROA not before:           Wed 17 Sep 2025 10:58:38 +0000
ROA not after:            Tue 16 Dec 2025 11:58:38 +0000
asID:                     56694
IP address blocks:        209.142.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:4a:61:05:24:49:0a:88:3e:aa:51:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Sep 17 10:58:38 2025 GMT
            Not After : Dec 16 11:58:38 2025 GMT
        Subject: CN=6a061e50-413f-4a45-b29e-efc023fd40d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:25:d5:45:65:37:3c:37:9f:b2:44:fa:a3:64:
                    41:59:b4:b1:9c:ff:07:eb:db:7a:74:a0:d3:33:26:
                    fc:21:f0:77:06:c0:64:bf:4e:9b:66:d0:57:5f:a2:
                    11:4e:22:c2:ad:2f:5f:ce:fb:0b:d5:44:06:b6:76:
                    af:25:ee:ee:65:5c:10:2e:2b:40:75:08:8f:db:d8:
                    4a:8e:9f:07:5e:24:30:f5:4d:13:61:cf:3b:2c:c8:
                    11:bd:cb:56:f5:b6:2f:42:34:8f:08:88:8d:39:4d:
                    4f:e6:bb:0a:9c:90:e9:60:f3:d7:df:96:d4:a4:02:
                    6f:23:80:f7:60:c2:6c:46:fe:a3:0b:af:d2:eb:57:
                    0a:63:8d:ed:e7:28:f5:f1:fb:15:c4:98:09:11:41:
                    dc:01:54:7b:84:49:c0:54:dd:cb:9c:32:bb:60:ac:
                    78:ec:de:a4:9e:f0:7e:0b:bd:18:12:ba:48:11:79:
                    c5:b5:a7:ec:8e:b2:bd:9b:fb:d5:30:d2:70:07:72:
                    4b:60:4f:77:c4:cb:b7:b8:a5:72:dc:10:31:fb:ce:
                    79:66:a1:fe:27:2b:33:6f:58:fd:43:a9:e2:5d:9d:
                    7f:11:1c:ad:0d:3c:20:55:c2:76:18:cd:f2:29:ed:
                    f4:5b:66:1f:25:25:58:42:fd:ec:f0:f0:09:e1:79:
                    6b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CA:91:FB:5D:90:61:78:F3:A1:53:F9:3A:33:26:7F:80:6F:0C:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/f701dec5-4fb7-3f04-8bd6-d3a33d2c090b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.142.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:00:10:5e:67:ca:c7:f5:c9:a6:66:ad:b6:a1:b4:56:87:39:
         b6:a0:c2:4b:24:e9:ee:69:59:79:f6:22:bb:59:15:5c:5b:00:
         09:2a:9f:a7:73:95:96:c3:6f:50:90:0b:76:66:45:a2:48:33:
         53:fe:99:cb:6f:2b:10:e9:91:65:91:30:d5:31:c9:0d:a9:f3:
         b9:96:c9:1d:8d:fc:82:f2:c9:56:3b:51:db:c5:af:c4:bc:34:
         c1:5d:ff:0a:55:25:34:01:40:92:12:a9:ec:c7:2f:01:32:67:
         3d:02:74:21:0c:13:4b:7a:3a:70:49:11:04:c9:23:29:23:bf:
         d4:2c:66:be:84:30:c6:61:0f:eb:51:77:73:3c:79:7f:5b:58:
         70:07:8e:a4:e2:08:1f:31:e1:ca:be:2a:51:ee:72:40:83:20:
         41:c9:71:6d:c6:1f:52:68:0e:f2:54:3b:88:d6:25:e2:ae:10:
         0b:6d:93:63:ae:5c:e9:a2:2e:3d:69:1e:8f:0e:ab:a8:69:c7:
         6f:69:95:77:45:fb:a5:ae:10:e6:69:5b:4b:23:05:16:bf:df:
         c8:f9:6e:53:72:7e:9d:8c:ab:ed:05:90:32:8a:82:94:78:16:
         8d:22:37:65:ed:a7:e5:de:4d:ee:7a:d1:d1:ba:02:d3:91:0f:
         2f:fe:01:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:12:52 2025 by rpki-client