Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e9b8f5b3-a51f-4b99-b9cc-068ed2754144/4f070872-37b9-38e7-8772-cd0a7a6329dc.roa
File:                     4f070872-37b9-38e7-8772-cd0a7a6329dc.roa (raw, json)
Hash identifier:          z+yy4amis2ELuKe7YVQuYtyX6i8/7fRhjId2QaakyKs=
Subject key identifier:   B9:27:3D:39:CA:B2:37:30:F0:DF:F3:EC:06:6C:73:63:C5:3B:26:62
Certificate issuer:       /CN=e9b8f5b3-a51f-4b99-b9cc-068ed2754144
Certificate serial:       010D0C9F4328584AF9F50F0252D0706EB3B4F480
Authority key identifier: 71:94:B2:16:95:32:4B:2C:97:DE:3E:69:76:7E:8A:47:CA:93:AC:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e9b8f5b3-a51f-4b99-b9cc-068ed2754144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e9b8f5b3-a51f-4b99-b9cc-068ed2754144/4f070872-37b9-38e7-8772-cd0a7a6329dc.roa
Signing time:             Mon 25 Aug 2025 18:30:48 +0000
ROA not before:           Mon 25 Aug 2025 18:30:48 +0000
ROA not after:            Sun 23 Nov 2025 19:30:48 +0000
asID:                     17124
IP address blocks:        192.112.24.0/24 maxlen: 24
                          205.159.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e9b8f5b3-a51f-4b99-b9cc-068ed2754144/e9b8f5b3-a51f-4b99-b9cc-068ed2754144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e9b8f5b3-a51f-4b99-b9cc-068ed2754144/e9b8f5b3-a51f-4b99-b9cc-068ed2754144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e9b8f5b3-a51f-4b99-b9cc-068ed2754144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:f5:0f:02:52:d0:70:6e:b3:b4:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9b8f5b3-a51f-4b99-b9cc-068ed2754144
        Validity
            Not Before: Aug 25 18:30:48 2025 GMT
            Not After : Nov 23 19:30:48 2025 GMT
        Subject: CN=7469feae-d2b1-4d1d-b469-b4ae158099e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:40:91:0b:e0:ba:76:62:26:a5:f1:d4:45:59:
                    e6:29:71:7b:7f:db:da:6e:17:2a:00:d5:eb:93:d0:
                    aa:77:06:51:9d:ac:b0:d2:fc:db:70:d9:3d:5d:4f:
                    44:33:48:af:51:3d:f5:df:5f:52:18:65:c5:ca:36:
                    1d:07:22:43:83:92:31:dc:92:c6:28:48:31:32:18:
                    2c:e6:96:0c:55:28:2e:71:6c:eb:db:02:04:ad:8e:
                    7a:60:e7:4b:fe:2f:d9:c2:58:9f:05:90:34:17:06:
                    3c:91:cf:50:8c:9c:48:52:5a:fb:8e:54:56:af:9c:
                    94:3f:c3:c2:96:75:f5:38:72:78:2a:b1:88:4c:c1:
                    40:ad:42:f6:16:cb:d0:69:ed:71:17:22:e9:8b:36:
                    8d:c8:e8:fb:ee:d4:a8:03:c8:ff:60:cc:6b:4f:35:
                    7d:12:5a:0c:43:7f:b4:f5:bb:83:06:12:37:71:16:
                    ad:7c:26:20:58:0a:df:84:9f:c9:23:fc:9c:51:d8:
                    f3:b4:e8:75:15:1b:ed:32:75:d3:7f:d3:b0:33:d8:
                    b8:85:f7:a0:51:92:4d:8e:76:c1:7f:9d:fc:61:67:
                    71:fb:f9:76:c0:9b:7a:4c:37:6c:fa:c5:b5:a8:1f:
                    70:84:d9:f9:8b:de:ac:fb:00:7a:9c:fb:a6:f3:4c:
                    3b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:27:3D:39:CA:B2:37:30:F0:DF:F3:EC:06:6C:73:63:C5:3B:26:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e9b8f5b3-a51f-4b99-b9cc-068ed2754144/4f070872-37b9-38e7-8772-cd0a7a6329dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e9b8f5b3-a51f-4b99-b9cc-068ed2754144/e9b8f5b3-a51f-4b99-b9cc-068ed2754144.crl

            X509v3 Authority Key Identifier:
                keyid:71:94:B2:16:95:32:4B:2C:97:DE:3E:69:76:7E:8A:47:CA:93:AC:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e9b8f5b3-a51f-4b99-b9cc-068ed2754144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.112.24.0/24
                  205.159.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:23:ab:f3:58:dd:43:ac:24:38:e6:48:7f:65:21:91:bf:d1:
         6d:17:c7:0e:7a:4e:6f:1f:f0:d0:91:9e:95:23:05:89:0e:75:
         d3:cc:b8:aa:22:c3:b0:e9:f8:25:a1:4d:0a:5a:44:99:b2:1a:
         09:ef:32:b3:8c:cc:bb:ce:ec:56:0e:9f:b7:3e:80:7d:4a:c2:
         b7:d8:1b:d6:cb:85:0a:46:1d:cb:c9:cc:90:34:0f:26:a7:db:
         de:5a:0b:a9:24:c3:08:72:c3:d3:e7:8d:cf:49:5c:28:6d:23:
         0a:3e:91:30:96:50:d5:5e:68:68:67:61:90:3e:fb:9b:f4:8f:
         1f:9a:cc:4f:cc:c8:e1:dc:fa:2a:45:cd:62:ea:90:e8:27:51:
         ce:88:4b:05:ac:02:f1:c4:74:69:c7:59:8f:b7:cc:50:1c:91:
         5c:45:ad:cf:8d:dd:fd:15:f0:7b:3d:a7:1d:82:36:b9:8d:84:
         85:8f:6b:51:e6:f5:6f:c5:b0:ee:ba:e9:fc:4c:a6:e5:1b:fb:
         9f:a1:a1:fc:d9:05:a8:01:21:d4:03:3e:59:36:39:1c:01:86:
         c7:84:04:97:0f:8f:2e:b6:7d:ba:b1:17:ba:28:40:29:f2:1f:
         0e:dc:14:ac:a6:b0:ac:cc:11:41:5e:00:78:e9:56:e1:bb:f0:
         69:0f:5e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 19:32:31 2025 by rpki-client