Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ca47302c-9bfc-3fb0-98c2-2150f675f0e6.roa
File:                     ca47302c-9bfc-3fb0-98c2-2150f675f0e6.roa (raw, json)
Hash identifier:          31s5GMJK3rDrMIgwI0vgT9WFqSJ/nL0FAw2SLjUNFUQ=
Subject key identifier:   68:3F:19:75:F4:F8:E9:B5:12:F6:FA:56:65:78:3D:99:CA:9D:D0:AF
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584B28E3699058A7B96B79EFF980
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ca47302c-9bfc-3fb0-98c2-2150f675f0e6.roa
Signing time:             Thu 11 Sep 2025 13:58:14 +0000
ROA not before:           Thu 11 Sep 2025 13:58:14 +0000
ROA not after:            Wed 10 Dec 2025 14:58:14 +0000
asID:                     6079
IP address blocks:        141.140.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:28:e3:69:90:58:a7:b9:6b:79:ef:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Sep 11 13:58:14 2025 GMT
            Not After : Dec 10 14:58:14 2025 GMT
        Subject: CN=10949cb2-069d-4ccb-860b-f04d0bf122e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cf:ce:6e:35:40:36:f0:83:a2:0c:e1:f2:1c:
                    65:ba:d1:29:5a:74:76:90:1d:12:28:50:46:1e:34:
                    3c:80:ba:6c:7a:e5:20:2c:54:f6:70:27:00:ef:54:
                    42:65:ec:1c:fe:47:5f:ca:25:2c:40:32:ab:47:09:
                    0b:df:af:5f:09:db:20:38:1e:16:6b:a4:e7:74:86:
                    f6:6a:46:57:a5:94:d8:fa:26:6b:d8:02:5d:61:7a:
                    a5:78:b0:79:91:5e:ce:38:95:d8:f6:2d:44:15:19:
                    e3:aa:4e:18:78:28:86:5b:57:83:d7:61:4f:61:96:
                    94:3e:6b:1c:b4:42:2b:cc:3d:d9:4e:e1:bb:07:73:
                    29:09:58:a2:25:57:0d:d6:8d:ad:92:b3:6e:d5:ae:
                    20:d5:66:c7:ac:03:a5:15:55:74:4a:d8:b7:40:4f:
                    6a:67:27:7d:cc:22:87:fd:09:39:96:7b:15:5a:9e:
                    3c:db:6e:3e:e3:47:51:bd:81:77:b4:77:db:20:72:
                    a5:74:81:e5:d7:45:75:78:f8:03:14:fc:f8:55:ef:
                    23:e3:c7:71:1e:8e:fa:ba:02:c9:2a:13:1d:e1:13:
                    d2:f4:1b:ea:cb:79:c2:0b:d8:d2:08:fe:9d:b2:dd:
                    0a:da:31:6f:f2:f3:5c:f0:12:89:0b:0c:ea:6c:47:
                    a6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3F:19:75:F4:F8:E9:B5:12:F6:FA:56:65:78:3D:99:CA:9D:D0:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/ca47302c-9bfc-3fb0-98c2-2150f675f0e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:1f:20:13:f2:eb:c5:3c:2d:10:03:ca:35:9c:17:ac:f9:33:
         1b:69:18:00:2f:ce:14:45:68:63:63:da:c4:c0:07:0b:72:14:
         b0:10:19:a2:27:03:7d:99:75:9c:29:db:da:2d:9a:c4:9a:0d:
         c5:c9:6e:16:c0:29:7e:7c:78:8d:47:85:1d:0b:a3:db:7a:08:
         20:96:14:3b:c6:8d:9e:df:6e:db:c9:b6:42:d7:3c:e3:b7:3b:
         16:30:4b:59:52:e3:84:5b:13:6b:f8:d2:ad:d7:21:c0:5a:4a:
         b9:d4:73:5f:e4:30:39:85:b7:e6:c7:ab:22:d9:c7:12:70:84:
         65:16:77:2c:36:14:04:34:66:d4:3b:ea:a7:41:3f:0b:dd:00:
         7a:30:7c:e8:a4:03:8a:72:af:91:65:8e:b4:eb:fb:83:d2:8c:
         67:a7:86:ff:49:39:fd:b0:01:c8:fb:d6:29:c7:3c:ee:58:5b:
         04:be:51:4a:0b:b5:be:e2:5a:c3:4e:3e:d4:58:ee:ab:e5:ec:
         91:4d:c5:37:ca:7f:37:5b:cf:56:3e:55:0b:1d:93:9e:c9:3a:
         6a:93:95:52:bb:4b:3b:76:6c:47:35:10:fe:b5:8c:d4:59:ba:
         b1:b5:46:93:f3:e3:ff:2b:27:b2:a8:85:57:88:61:b9:5b:01:
         38:87:e3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 21:29:59 2025 by rpki-client