Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/0ed87b3a-d8bb-3100-98de-5db97a1a810b.roa
File:                     0ed87b3a-d8bb-3100-98de-5db97a1a810b.roa (raw, json)
Hash identifier:          86iBr3KtRR2PU7Kv2zhww8Dhcl+GSHVQgnxX1ZQc93o=
Subject key identifier:   16:F1:63:3F:45:97:5F:79:54:F6:0C:35:11:6F:16:13:1A:1E:63:56
Certificate issuer:       /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial:       010D0C9F4328584B1806E6CB48B3D38CC1D2FA68
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/0ed87b3a-d8bb-3100-98de-5db97a1a810b.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     11232
IP address blocks:        24.49.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:e6:cb:48:b3:d3:8c:c1:d2:fa:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=091c8873-12bc-4173-bb6b-b857d8eeae8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b8:47:99:24:ff:d3:d8:04:cd:13:73:8d:3c:
                    a8:6c:8d:ba:2e:c0:9c:88:ab:cf:f3:12:69:b3:7a:
                    d1:a2:e4:a8:25:20:47:59:91:3d:78:77:27:7e:e3:
                    d8:a0:df:b9:e0:96:55:dc:4b:03:c9:d2:14:65:24:
                    fe:63:30:73:1f:27:2b:f8:17:a3:e4:4c:8b:37:ee:
                    6f:55:5a:dd:c4:e6:70:46:ab:9a:a5:bf:ce:3d:5d:
                    12:25:c6:d7:b9:84:53:b6:f9:ef:65:aa:3f:24:b0:
                    0b:20:2e:5c:40:99:63:14:95:fa:0d:d5:1b:8f:53:
                    9c:31:22:18:ae:83:74:5d:5b:6c:b3:d8:8e:d8:aa:
                    97:8c:23:55:a7:9d:a9:e3:29:10:07:ae:09:4f:09:
                    18:c5:76:a4:88:3f:3e:d1:89:ea:0f:9f:43:48:fe:
                    87:36:d0:7f:38:f0:29:fc:41:5b:d5:d5:c9:ec:fa:
                    9a:82:15:37:ea:53:cc:74:9c:82:5b:07:e4:ee:03:
                    91:bd:27:4a:f0:96:90:b2:22:f7:a8:99:0a:6c:75:
                    c0:46:38:d7:93:28:f2:8b:e5:c3:35:ce:13:83:da:
                    35:20:9d:ca:50:c6:a3:e8:4c:c1:16:59:ac:54:d8:
                    fd:b6:78:f7:63:b6:c7:69:62:56:6f:b5:9c:8d:99:
                    7f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F1:63:3F:45:97:5F:79:54:F6:0C:35:11:6F:16:13:1A:1E:63:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/0ed87b3a-d8bb-3100-98de-5db97a1a810b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl

            X509v3 Authority Key Identifier:
                keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.49.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:c9:23:77:55:1d:b6:78:d3:1c:3a:bc:3d:ce:ca:0c:94:a4:
         25:55:e0:88:b7:a9:73:94:ba:f4:6b:ef:81:b7:b1:f3:d2:e1:
         83:15:ea:0f:cb:2f:29:ea:0e:eb:ed:dc:31:e4:49:9b:c4:02:
         90:4b:03:19:81:d5:6e:5a:ba:3f:98:75:3c:b9:44:10:0f:c9:
         9c:99:25:81:44:96:72:fb:23:21:d6:f0:7a:db:f4:43:ff:13:
         a9:9a:5b:0f:eb:63:cd:d1:89:89:3d:12:0c:3e:ac:2f:2f:b2:
         dd:10:c0:c2:d6:c2:98:47:fe:39:c2:29:a8:8f:91:9d:e9:c7:
         e0:0f:50:0e:ee:cf:c5:2a:a5:68:75:2d:a6:ba:6d:c9:62:9a:
         be:5d:92:c9:cc:2c:df:57:77:c8:16:9c:c1:7d:f7:fd:20:b5:
         23:16:b8:2b:85:1c:4e:2f:ec:3b:31:28:b6:02:6a:ce:57:6c:
         8f:60:d9:36:eb:94:ae:91:91:b4:1b:ba:65:e9:be:44:19:68:
         48:41:a1:2b:69:fd:cc:93:80:77:07:9a:65:84:bb:21:4b:ad:
         b8:51:b4:8f:1b:04:d9:f9:70:dc:a5:d9:a9:ee:9a:93:7f:60:
         2f:2e:19:a4:14:fe:e1:48:a7:49:fa:b9:48:81:51:3a:e1:1b:
         69:6f:ce:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 02:28:20 2025 by rpki-client