Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/72035800-3e75-3949-9085-d1960203a8c1.roa
File:                     72035800-3e75-3949-9085-d1960203a8c1.roa (raw, json)
Hash identifier:          O/7ayNqmoCFjR4lvFPSwzA8LjmNrf6VI70+AezzWjPs=
Subject key identifier:   79:7B:F3:7E:A0:DC:29:A7:FF:7E:2D:91:B5:36:3B:67:01:30:EF:FB
Certificate issuer:       /CN=e553e5ec-0211-480d-9476-86db3dbe2182
Certificate serial:       010D0C9F4328584B477C6C2FBBEE3E8FC46BE620
Authority key identifier: 74:13:B4:04:67:64:F5:A0:B0:72:10:1B:35:BF:97:BD:B2:25:4C:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/72035800-3e75-3949-9085-d1960203a8c1.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     31898
IP address blocks:        192.159.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/e553e5ec-0211-480d-9476-86db3dbe2182.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/e553e5ec-0211-480d-9476-86db3dbe2182.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:6c:2f:bb:ee:3e:8f:c4:6b:e6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e553e5ec-0211-480d-9476-86db3dbe2182
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=3cb494c0-917e-4e1b-943b-ff227d5940f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:19:f0:c9:ae:7b:22:a0:d5:33:21:82:ae:69:
                    ed:62:78:e8:e0:42:e3:08:1c:b3:8f:e9:48:01:5b:
                    04:37:63:f2:0f:d8:0a:49:01:d4:5e:5d:4e:a6:75:
                    c9:ed:14:cb:65:d7:1a:00:c7:9b:70:27:6b:dc:6d:
                    4c:a1:d3:32:51:be:55:9b:81:ca:80:2f:e4:9d:0c:
                    75:25:57:e0:3a:2c:4e:e8:8b:79:ea:4a:88:c1:49:
                    40:da:02:20:a9:8f:7b:50:89:51:5c:5d:c4:6a:aa:
                    4b:a4:21:b9:2a:c7:27:d7:f2:40:5a:d7:94:26:ab:
                    3f:ae:6e:14:f0:9f:16:ac:c2:61:48:59:ac:67:eb:
                    1a:8b:a1:a2:c2:71:25:be:95:54:76:54:99:32:d7:
                    1b:f7:95:8b:c5:b6:43:0f:51:44:d7:26:85:e3:ad:
                    94:bd:99:99:a5:6e:65:63:92:19:b3:d8:7d:f3:51:
                    1f:97:94:8c:c5:2f:98:fe:01:e6:59:30:60:3e:4c:
                    95:6d:d3:9c:97:a1:50:b6:e6:b8:a2:38:bc:f7:1a:
                    5f:4a:5b:18:1a:e9:89:7b:24:c5:13:36:89:ad:bb:
                    a7:1d:79:32:15:76:76:0b:60:d4:39:ce:d1:9a:f2:
                    50:d4:3c:80:9f:4f:8a:d4:2a:ec:42:8e:71:ba:33:
                    3b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7B:F3:7E:A0:DC:29:A7:FF:7E:2D:91:B5:36:3B:67:01:30:EF:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/72035800-3e75-3949-9085-d1960203a8c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182/e553e5ec-0211-480d-9476-86db3dbe2182.crl

            X509v3 Authority Key Identifier:
                keyid:74:13:B4:04:67:64:F5:A0:B0:72:10:1B:35:BF:97:BD:B2:25:4C:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e553e5ec-0211-480d-9476-86db3dbe2182.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.159.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:0f:7a:67:b8:41:92:0a:92:50:30:a3:3a:ef:c2:43:c3:ef:
         bf:ee:bd:26:6e:5f:71:15:7d:8d:d0:10:39:b7:4d:64:d7:40:
         b7:35:f1:9d:90:16:98:93:35:d5:d4:8f:84:19:24:cd:e9:93:
         01:19:65:b0:93:85:ba:6c:c6:d4:b1:d5:aa:72:64:1e:99:09:
         f7:f3:55:51:d8:d2:5b:68:b4:8c:2e:90:61:68:e2:51:7a:7b:
         85:11:68:b2:13:eb:49:55:f5:e3:59:b9:b6:d7:e0:4f:1c:12:
         4e:ab:bc:a5:84:90:e0:37:38:f4:2b:23:f2:f3:17:f5:ac:c4:
         cd:8c:96:6a:5f:49:38:a4:39:96:fd:82:1e:f2:95:d8:9a:e3:
         a8:3d:c2:32:28:19:19:ae:73:43:1e:7e:f5:0a:34:21:0f:30:
         21:4b:25:18:ad:20:bb:85:10:c1:86:a4:60:0a:b0:8a:ec:34:
         04:21:55:29:fa:64:49:ff:2b:bd:5f:6c:08:14:14:23:ce:94:
         e9:02:4c:ff:0a:3f:fb:33:de:1b:c6:b7:fb:c1:59:7f:9c:09:
         a9:f4:8b:87:02:04:c2:02:00:a7:45:14:c1:ee:f2:02:20:6d:
         54:b8:4a:83:66:b5:c6:17:ec:e2:bc:e2:3c:85:d3:24:c1:fd:
         0b:a6:1c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:24:07 2025 by rpki-client