Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7d81a384-518d-3686-b2eb-d93d07a5d91b.roa
File:                     7d81a384-518d-3686-b2eb-d93d07a5d91b.roa (raw, json)
Hash identifier:          CS+MyRM0/OHrV1mbDHZWHL6py4A5CnykOTHHc+tR+Oo=
Subject key identifier:   DE:F1:B5:F8:78:6B:E5:22:CA:2C:A9:40:D9:35:C0:DE:A9:DE:00:D1
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B196C151E747E21CAEB99B200
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7d81a384-518d-3686-b2eb-d93d07a5d91b.roa
Signing time:             Sat 06 Sep 2025 01:00:33 +0000
ROA not before:           Sat 06 Sep 2025 01:00:33 +0000
ROA not after:            Fri 05 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        24.56.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:19:6c:15:1e:74:7e:21:ca:eb:99:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  6 01:00:33 2025 GMT
            Not After : Dec  5 02:00:33 2025 GMT
        Subject: CN=d598925c-6a20-4c67-8afc-ebc072491bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:af:a5:de:31:d9:cf:41:b7:a9:3f:21:d1:76:
                    c3:ff:93:c1:de:cd:5c:c5:c8:19:fc:b0:17:6e:ad:
                    ac:2e:08:d1:51:39:88:cb:ec:17:2d:ca:7e:a7:53:
                    be:1f:f6:80:c8:fa:dd:ea:cf:e3:8a:3a:a0:ae:ff:
                    9e:b2:0d:15:4e:f0:26:5f:d3:3d:8b:59:2e:b6:f8:
                    df:e1:ab:1c:37:35:bb:ad:db:64:04:e9:fb:e5:db:
                    29:a5:d6:70:6f:07:20:ad:e7:99:20:ef:d3:38:0d:
                    68:c8:ae:de:93:9a:4d:47:61:c1:a0:d1:bc:64:f2:
                    7c:17:31:d0:b5:49:fe:9a:a0:6e:94:11:06:88:b8:
                    48:9e:cc:95:9f:65:9b:39:b3:73:0b:76:fd:8e:84:
                    ff:be:c1:5c:2b:4f:7e:37:25:d8:a3:cb:ed:24:23:
                    b6:54:a6:b8:1f:e7:a9:a6:75:2c:dc:cb:ce:71:b7:
                    38:ec:44:77:8d:ee:a7:ec:3e:4b:ab:a4:01:78:79:
                    ce:6f:35:03:9b:92:f1:59:5d:32:18:2b:94:71:a7:
                    e2:bb:a1:ed:dc:9f:57:2b:4e:f6:a1:a8:a1:1c:8e:
                    2c:69:f3:79:73:22:af:2f:a9:54:c6:b6:68:2b:01:
                    9b:8d:45:93:55:f6:19:25:93:be:b1:dd:8c:23:5b:
                    b8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F1:B5:F8:78:6B:E5:22:CA:2C:A9:40:D9:35:C0:DE:A9:DE:00:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7d81a384-518d-3686-b2eb-d93d07a5d91b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.56.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:6e:25:13:9b:6e:af:34:64:8e:86:b7:e3:96:24:6c:8b:6d:
         74:0d:cd:b4:4a:8c:15:25:ca:6c:c8:6b:d5:b7:cf:57:2c:56:
         86:93:d3:9c:94:81:90:f3:9d:30:14:0c:09:bc:86:29:d6:d3:
         89:d9:65:1d:5b:3a:60:dc:80:83:17:13:c9:d6:d8:2d:09:0e:
         3e:f1:58:90:c0:2c:cd:e3:47:1d:e6:b9:97:b0:31:23:2d:0b:
         c9:fc:c1:20:3b:21:3a:ee:7e:3f:dd:89:9d:35:bc:bf:80:04:
         40:86:ec:d9:a7:cb:7b:61:84:d1:43:38:65:24:86:9c:88:75:
         9e:cd:66:cc:d9:3d:18:65:0c:83:7f:d7:9f:7a:e6:fc:4a:0b:
         af:0d:c5:2d:ce:20:87:04:c7:57:f5:d5:99:9a:4a:1f:be:9f:
         58:12:2b:69:6c:07:d9:de:95:8e:16:8f:2e:15:76:fe:b6:71:
         a5:38:b4:8c:16:81:a3:9a:7b:48:9d:40:e9:22:b8:b0:54:99:
         a5:37:1e:cc:3f:02:d9:f7:3a:70:1d:4e:2b:5a:81:0d:10:13:
         24:78:b2:51:f8:52:93:6b:90:a3:45:91:17:b1:0b:07:51:76:
         e7:b2:15:cc:d1:c3:ec:af:af:10:bf:44:7f:b4:77:4f:b6:8d:
         f0:3c:68:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:23:46 2025 by rpki-client