Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/1a24eb8c-763e-3fe5-9854-4c755677df1e.roa
File:                     1a24eb8c-763e-3fe5-9854-4c755677df1e.roa (raw, json)
Hash identifier:          RJeDOgE7j+lzfFskePoLTj+Ee0tR5NVjWD0ZKwG1OFE=
Subject key identifier:   03:8C:13:22:41:BA:59:41:17:26:4D:64:88:94:73:76:92:3D:21:24
Certificate issuer:       /CN=943895ce-649a-4937-9d38-a57b20ee748f
Certificate serial:       010D0C9F4328584B0A116C22D5C059B290733480
Authority key identifier: E9:24:0C:E1:14:2F:1C:1D:17:77:FB:10:8C:A4:CA:1B:32:4D:89:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/1a24eb8c-763e-3fe5-9854-4c755677df1e.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     16824
IP address blocks:        149.20.232.0/24 maxlen: 24
                          149.20.233.0/24 maxlen: 24
                          149.20.234.0/24 maxlen: 24
                          149.20.235.0/24 maxlen: 24
                          149.20.236.0/24 maxlen: 24
                          149.20.237.0/24 maxlen: 24
                          149.20.238.0/24 maxlen: 24
                          149.20.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:6c:22:d5:c0:59:b2:90:73:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=943895ce-649a-4937-9d38-a57b20ee748f
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=226740d5-ded7-4222-82c6-ed21366b2991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4a:f6:43:f1:cc:93:65:39:26:e7:9f:b2:5a:
                    96:47:6d:6d:a2:ba:35:f6:af:aa:74:f8:18:8a:e1:
                    69:f4:c1:19:4e:8a:94:be:dd:f7:dd:ab:80:8f:70:
                    54:d9:df:e8:cf:00:05:1d:45:66:43:ce:aa:49:7e:
                    b0:4b:79:f3:3e:49:d7:af:02:92:8d:af:c3:6c:3b:
                    82:cb:83:bc:39:80:0d:9e:6e:79:c7:d0:00:40:a9:
                    1b:a9:f0:c5:01:6e:fb:f4:8a:59:5f:60:a0:d7:2c:
                    ab:34:f3:89:42:90:7e:e2:5b:61:1a:0f:b7:3f:ad:
                    1e:91:a4:ad:44:da:d1:29:d3:f9:c2:51:0c:34:7c:
                    e2:a7:64:4f:d0:8b:be:4c:8d:83:dc:fb:7f:fe:f4:
                    51:3a:3d:76:62:d4:41:f5:c4:6b:b1:9b:8d:ba:ae:
                    53:24:a3:40:c1:67:5f:68:0a:7a:fd:77:63:5f:1b:
                    37:ee:dd:ac:71:49:3c:7b:df:17:7a:49:89:df:8d:
                    5c:ff:e2:72:a2:4b:63:0e:4a:7f:9b:79:5d:51:ce:
                    a7:ea:9b:d2:d0:47:3a:45:9f:70:04:dc:68:69:79:
                    95:97:69:a8:cd:68:25:81:fa:10:f1:10:b2:3b:40:
                    21:b2:4c:53:66:4a:69:e0:48:9d:f1:29:04:aa:47:
                    59:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8C:13:22:41:BA:59:41:17:26:4D:64:88:94:73:76:92:3D:21:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/1a24eb8c-763e-3fe5-9854-4c755677df1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f/943895ce-649a-4937-9d38-a57b20ee748f.crl

            X509v3 Authority Key Identifier:
                keyid:E9:24:0C:E1:14:2F:1C:1D:17:77:FB:10:8C:A4:CA:1B:32:4D:89:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/943895ce-649a-4937-9d38-a57b20ee748f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.20.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:50:2d:d4:19:dd:3c:f2:c3:23:c4:ed:32:69:db:20:45:fb:
         b8:02:ff:a2:4d:53:37:31:8e:18:ab:86:20:09:a8:31:a4:c9:
         97:ef:34:4a:82:a1:cd:e5:9c:37:94:7e:9d:39:75:1f:40:55:
         af:b3:52:95:f9:29:c5:9b:bf:b7:5a:c6:44:ee:ef:13:5e:fe:
         c1:cc:00:9b:ca:3a:d1:61:f3:c7:60:15:17:eb:dc:3b:0d:70:
         40:cd:d3:da:d5:42:62:fc:c1:ab:d0:17:b0:44:77:f0:da:c1:
         0e:cc:79:9e:55:79:76:d4:ca:d4:2e:e0:93:57:ff:d9:bd:3d:
         85:3c:e7:7c:cd:ab:43:3c:2a:04:b8:ba:b7:17:d9:68:fd:f0:
         c1:5c:fa:96:1b:f7:ce:71:f4:aa:1f:89:07:a1:6f:59:5a:78:
         35:c4:f5:95:6d:3a:cc:09:bc:c1:8d:2c:35:85:6c:a7:80:ee:
         48:70:c6:2d:54:df:58:7c:91:cf:fb:40:a7:17:3a:d7:6d:37:
         08:dc:25:b9:42:53:03:f6:f5:71:57:c8:a8:57:81:0d:c1:21:
         96:10:e0:5c:7d:07:49:5e:6c:84:ff:4e:e0:29:13:1d:44:39:
         61:cf:48:e9:0b:a6:f0:de:cf:6a:af:fc:79:76:1a:ca:c0:8e:
         48:70:15:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:42:28 2025 by rpki-client