Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/1c748749-7b5d-34a5-a272-9a4ce8021b45.roa
File:                     1c748749-7b5d-34a5-a272-9a4ce8021b45.roa (raw, json)
Hash identifier:          zjNGSKaACJoM7xm9ln8PXWC3aw1BgsWjgtNfHOfdeB4=
Subject key identifier:   C7:79:69:99:36:1D:2D:83:3F:77:4F:93:22:E4:BD:E7:0C:C7:61:1D
Certificate issuer:       /CN=41810617-fa0e-48cc-badf-1b017add1f3e
Certificate serial:       010D0C9F4328584B2B919911BD3B542A538AF280
Authority key identifier: 7A:26:81:C9:09:F1:CC:38:B7:DF:FE:A1:D0:20:6D:4D:0A:BC:F8:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/1c748749-7b5d-34a5-a272-9a4ce8021b45.roa
Signing time:             Fri 12 Sep 2025 13:00:42 +0000
ROA not before:           Fri 12 Sep 2025 13:00:42 +0000
ROA not after:            Thu 11 Dec 2025 14:00:42 +0000
asID:                     23471
IP address blocks:        67.219.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2b:91:99:11:bd:3b:54:2a:53:8a:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41810617-fa0e-48cc-badf-1b017add1f3e
        Validity
            Not Before: Sep 12 13:00:42 2025 GMT
            Not After : Dec 11 14:00:42 2025 GMT
        Subject: CN=cf87dfc9-818e-439e-98a1-cc02265b5fd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c0:46:32:76:20:ab:7d:3c:9e:bd:8b:6e:e9:
                    e1:21:84:c0:a2:75:1e:f9:01:32:1e:95:2d:31:88:
                    2f:ad:0d:a8:4d:aa:6e:01:29:d2:9e:59:30:ee:96:
                    e9:8f:18:38:57:22:eb:9c:3e:b0:5f:62:e7:35:79:
                    29:14:46:75:d3:8b:27:b1:30:36:b4:6f:30:d1:e7:
                    83:7a:4e:ee:3e:a2:63:e0:bb:dd:b9:37:0e:91:17:
                    75:6f:d1:9f:f1:92:9b:54:06:5e:16:0b:00:1f:ea:
                    90:db:78:e4:3d:00:3c:39:68:e8:e1:d7:48:07:71:
                    dd:06:93:2d:40:64:eb:a6:88:93:44:d7:8b:26:3c:
                    b4:9a:9b:1e:27:06:eb:e7:4d:f4:2e:41:e0:fd:7b:
                    64:de:7b:bb:a9:9a:22:37:ce:cf:5f:97:ce:54:f1:
                    7b:38:aa:1e:83:6a:b9:3c:4f:69:89:42:e1:d0:ff:
                    35:9a:e4:95:63:05:d7:10:4f:5d:9a:7f:6a:81:cb:
                    ea:27:3e:ae:d4:89:b6:96:a8:03:d8:6b:cf:9b:53:
                    27:06:73:81:c8:19:d2:f6:6e:9c:21:65:df:9c:48:
                    7e:e4:c3:9d:42:08:0a:88:53:5d:93:69:07:25:a9:
                    62:48:ac:c5:16:f7:f3:e7:d2:a1:af:21:de:71:7e:
                    60:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:79:69:99:36:1D:2D:83:3F:77:4F:93:22:E4:BD:E7:0C:C7:61:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/1c748749-7b5d-34a5-a272-9a4ce8021b45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.crl

            X509v3 Authority Key Identifier:
                keyid:7A:26:81:C9:09:F1:CC:38:B7:DF:FE:A1:D0:20:6D:4D:0A:BC:F8:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:46:3e:55:4b:37:53:0c:81:1a:e1:24:2a:8e:57:cf:73:ac:
         7d:fd:9f:0c:72:b9:5e:c4:67:3d:83:b9:3c:21:b6:f5:6d:43:
         82:dc:b1:40:0b:a2:6e:08:95:9a:64:94:7e:45:d3:44:d7:a9:
         a6:03:ff:bd:58:3b:a2:66:22:6d:ba:7c:27:2b:94:27:e8:dc:
         22:00:57:9e:8a:1a:9c:be:e0:ca:be:c4:91:a1:50:fd:07:02:
         1e:2a:42:76:cf:c2:bb:d1:9c:ec:41:5a:78:0e:c8:98:ed:65:
         da:fa:c0:b4:86:8b:e3:4c:2a:82:f5:30:89:c9:36:0b:9a:e1:
         88:6a:36:ad:99:79:10:82:58:50:7f:ee:29:d9:2a:78:1d:eb:
         57:9b:e8:e2:59:7b:a3:d6:b9:a7:ce:02:ca:d5:dd:50:0b:2e:
         12:0f:f3:b4:d4:00:eb:af:5a:81:f9:a2:b5:3a:8e:3d:56:b4:
         34:1f:15:4d:ef:ca:98:69:4d:35:b9:50:1d:1f:1d:2c:cd:f1:
         fb:26:47:18:68:6e:00:36:93:2e:37:34:26:0b:d6:1d:b0:80:
         9c:6f:2c:24:1f:c0:e9:e3:00:18:c6:a3:1d:76:4c:4a:ef:b4:
         3d:6e:18:f3:a4:63:29:ea:70:c3:3b:98:76:29:92:e3:5b:84:
         2d:f0:8c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:54:53 2025 by rpki-client