Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/f2673b5f-d410-3596-88a9-d9d68248d97b.roa
File:                     f2673b5f-d410-3596-88a9-d9d68248d97b.roa (raw, json)
Hash identifier:          jX6SjHnTwT4M8PjNRFC1JPgk0MYi/o6WSTU3YHFGFHw=
Subject key identifier:   FF:3C:0C:E7:15:89:34:9A:24:60:7D:E4:64:91:E2:0F:5D:12:44:48
Certificate issuer:       /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
Certificate serial:       010D0C9F4328584B7A3A9A108F0FAD040BA81680
Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/f2673b5f-d410-3596-88a9-d9d68248d97b.roa
Signing time:             Fri 10 Oct 2025 17:14:24 +0000
ROA not before:           Fri 10 Oct 2025 17:14:24 +0000
ROA not after:            Thu 08 Jan 2026 18:14:24 +0000
asID:                     64267
IP address blocks:        172.84.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:3a:9a:10:8f:0f:ad:04:0b:a8:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
        Validity
            Not Before: Oct 10 17:14:24 2025 GMT
            Not After : Jan  8 18:14:24 2026 GMT
        Subject: CN=aecc69ee-ce69-4d01-a844-13886e0eb117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:5e:aa:7e:68:4d:21:85:88:cf:b1:4b:dc:b9:
                    21:05:0f:08:4e:88:ea:71:e0:ce:60:51:ae:ee:70:
                    10:4b:d1:34:be:3d:f9:4e:78:bd:bf:96:a0:92:33:
                    45:90:50:a9:0b:67:e7:3f:08:ae:91:db:b7:82:8f:
                    09:32:0f:55:ab:d4:ff:d4:7a:a1:44:86:f4:da:d7:
                    90:5f:04:86:7a:e1:e5:ec:65:7a:55:5f:d7:62:f5:
                    c8:1a:80:5f:7a:ac:65:31:7d:76:a9:ad:10:ff:e8:
                    ac:00:5d:a3:b9:f7:d8:d2:23:2d:29:69:35:aa:65:
                    09:85:18:2b:05:8c:74:8b:d2:e7:d2:d7:09:83:17:
                    1b:9b:2b:a2:7d:fb:3f:36:ec:0e:96:7f:fa:74:e4:
                    53:84:df:21:d0:ad:f0:92:9e:9b:ea:b6:da:96:09:
                    d3:97:65:c3:77:6e:fe:fe:38:57:f4:73:70:de:49:
                    1b:88:85:83:7c:22:d8:81:91:ca:42:5f:c2:46:f0:
                    b9:5f:f4:32:56:e6:78:7a:d7:e9:5d:bd:bf:72:17:
                    f4:18:07:97:d6:fc:75:f4:8f:8c:b5:84:0a:4b:c0:
                    4b:74:2a:be:69:b5:82:97:99:5d:33:97:8d:5a:2d:
                    fb:e6:b6:64:8c:7c:a9:a6:40:b9:96:20:38:c9:f4:
                    18:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:3C:0C:E7:15:89:34:9A:24:60:7D:E4:64:91:E2:0F:5D:12:44:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/f2673b5f-d410-3596-88a9-d9d68248d97b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl

            X509v3 Authority Key Identifier:
                keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:fe:c2:81:98:2d:31:e1:87:70:72:31:71:dc:bb:ff:8f:8a:
         cb:8f:12:8c:68:32:27:23:85:e2:cc:b6:3c:a4:19:98:2f:6f:
         18:f4:5d:7c:de:76:a9:a9:67:ac:a4:3c:83:49:18:9d:bd:e8:
         10:0f:a1:24:ea:01:26:4e:49:4c:1a:aa:64:48:a1:a4:26:3c:
         56:28:65:5f:c6:24:e8:fb:0a:24:ff:bc:b4:95:85:b6:df:ee:
         2e:08:fd:2a:63:81:b8:9c:d4:7d:a7:16:a9:0c:51:92:a9:4d:
         59:8c:4b:bc:e8:f3:65:a3:31:57:2a:6b:0b:ff:3b:0b:b5:c1:
         4b:89:9a:b2:7b:d1:aa:20:75:86:aa:02:8d:ca:93:08:21:81:
         45:0e:be:74:ac:fe:fc:84:13:43:53:b1:b9:5e:b2:1a:ba:95:
         96:0a:77:26:f4:fb:ad:07:e3:0b:c3:23:fc:e9:42:47:37:c5:
         96:e0:02:21:d9:a5:87:4f:04:d0:e6:51:ac:7c:a2:a3:bc:e0:
         b7:94:a3:a9:55:20:4f:e4:bc:3c:0d:e3:1c:09:82:4c:71:3b:
         e5:7f:e4:8b:59:7e:6b:72:d2:30:27:1b:24:65:d4:e0:e8:f5:
         ab:7d:4a:01:4d:a6:d6:63:b5:41:8e:1e:11:2e:9f:0d:9a:05:
         83:21:ff:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 21:17:46 2025 by rpki-client