Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/d2413ea8-5608-3bef-bafb-47a6a76bf35b.roa
File:                     d2413ea8-5608-3bef-bafb-47a6a76bf35b.roa (raw, json)
Hash identifier:          itKkmhsv4iABcOV44UXU4tyew1lJKMAXc/LBHansD/w=
Subject key identifier:   DA:C3:BC:71:09:E9:72:65:52:37:AE:ED:13:98:43:9B:B9:A7:00:C3
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584B4DEA12215891F154B5333C00
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/d2413ea8-5608-3bef-bafb-47a6a76bf35b.roa
Signing time:             Wed 24 Sep 2025 20:16:34 +0000
ROA not before:           Wed 24 Sep 2025 20:16:34 +0000
ROA not after:            Tue 23 Dec 2025 21:16:34 +0000
asID:                     834
IP address blocks:        72.9.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:ea:12:21:58:91:f1:54:b5:33:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Sep 24 20:16:34 2025 GMT
            Not After : Dec 23 21:16:34 2025 GMT
        Subject: CN=e16c5c59-11d4-4209-92b7-aef2627b5429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0d:6a:50:39:0a:7b:7f:e5:d9:ca:3c:77:97:
                    e7:e3:2d:36:68:0d:e3:e5:6a:b6:82:7b:d9:3f:01:
                    66:bc:e1:48:b7:11:74:fc:76:a6:fc:31:41:f8:e7:
                    be:67:65:68:e5:79:94:67:41:95:ee:49:49:22:46:
                    4e:44:a5:4f:2b:ab:7d:a4:82:1d:c6:e8:0e:ee:a6:
                    a5:4f:29:02:9e:78:15:b2:87:83:47:42:68:6c:e0:
                    e7:a0:81:31:39:13:e4:00:f1:e4:a5:ae:86:bf:da:
                    cd:24:82:8f:0f:51:d8:4f:ca:7f:5f:be:a5:72:b0:
                    9a:54:d0:29:e8:34:8a:af:14:57:c0:4f:f0:c6:32:
                    30:67:59:c3:17:e8:60:85:c1:a5:e6:dc:7c:42:a9:
                    2d:1d:16:9d:c4:77:cb:5c:ef:83:6d:0f:22:cb:78:
                    da:98:2d:93:ae:39:22:1e:33:1d:17:de:6e:d5:29:
                    49:9b:4a:65:b9:8e:27:82:ef:4e:ba:17:41:1c:cf:
                    96:29:3d:9e:b1:99:df:1a:0f:b8:50:a2:50:9f:a5:
                    57:4d:58:1f:f7:95:0d:2d:ab:9c:98:23:9d:43:97:
                    d2:a4:e5:b2:90:34:ce:2e:5e:05:67:17:85:b6:92:
                    12:bc:32:cb:c2:11:1e:c2:40:b9:f0:0a:03:ac:52:
                    13:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:C3:BC:71:09:E9:72:65:52:37:AE:ED:13:98:43:9B:B9:A7:00:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/d2413ea8-5608-3bef-bafb-47a6a76bf35b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.9.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:6a:cd:8b:ee:8c:fe:68:ec:98:23:b6:d0:85:48:d0:92:3e:
         af:66:15:ca:67:93:66:96:4a:0d:27:75:da:7d:76:0f:8d:be:
         4c:04:ae:88:a1:bb:7c:4e:e7:71:3c:9c:bb:9b:4a:d8:4d:28:
         f7:1f:34:0e:de:0b:13:b2:fa:05:18:73:45:fe:f2:f7:c4:96:
         3e:57:2d:9a:9b:0c:0f:ab:e6:b4:30:0e:5d:e2:98:3e:ab:9f:
         9f:51:8c:ec:0f:d2:83:e5:b2:c9:32:95:49:0e:5e:ff:60:1e:
         5f:a2:b6:21:bd:9e:50:72:0e:45:b0:f1:ca:ae:83:c1:65:11:
         ca:f0:a7:37:5e:67:4c:a1:ef:2a:e8:63:8b:28:bf:83:e2:b2:
         2e:d9:1b:df:32:e3:d7:3c:a5:2b:b2:e7:e1:84:3b:69:c5:92:
         50:09:e7:7b:07:57:f3:83:22:4c:1d:07:65:6f:63:f8:fd:7a:
         ac:d1:54:dd:5c:9e:b2:5a:dd:db:d0:4a:b1:fc:03:d0:f2:8e:
         2d:c5:b7:02:21:00:f9:f1:95:17:3c:9a:99:aa:ea:88:66:86:
         8c:44:8e:d4:5f:ab:d5:1d:2e:c3:5d:c0:71:a9:2b:07:4d:09:
         0b:a4:84:b7:c3:33:3e:2d:69:11:e4:60:37:bb:08:10:ef:c0:
         f2:ee:95:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 14:55:05 2025 by rpki-client