Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/77edcd41-83c3-3d54-9d91-d3c211050376.roa
File:                     77edcd41-83c3-3d54-9d91-d3c211050376.roa (raw, json)
Hash identifier:          SG5aAeq8Oe3LxoWrfG80KC2v23i64XvV+u0G+2Ijs5M=
Subject key identifier:   87:18:2D:6A:05:BC:CF:CE:D7:C1:9C:EE:2B:06:74:BF:BC:72:82:80
Certificate issuer:       /CN=a53ac0b1-83a3-47f2-b28e-b2b1977dc375
Certificate serial:       010D0C9F4328584B76F229DF6BA068F3DE0A1D80
Authority key identifier: AC:C4:2B:19:FD:7B:64:94:F1:BE:8D:6F:0C:E8:8A:B4:D4:7C:F2:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/77edcd41-83c3-3d54-9d91-d3c211050376.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     18503
IP address blocks:        199.34.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:29:df:6b:a0:68:f3:de:0a:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53ac0b1-83a3-47f2-b28e-b2b1977dc375
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=2ffd572b-afab-4571-9fda-392593ae8dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2d:de:a2:92:ee:9d:6a:8c:41:1f:0b:11:35:
                    62:e1:12:12:dc:61:89:7c:b7:4d:fb:c8:2f:b6:cd:
                    b6:ab:54:14:e4:0f:25:f7:be:7f:77:22:82:8e:77:
                    56:ed:49:72:67:9a:b0:49:0c:86:35:36:af:d6:59:
                    cb:77:fc:57:d2:7e:1d:ca:1f:51:d6:f6:1d:e8:54:
                    60:1e:53:58:c0:5a:96:12:2b:57:d5:d8:8f:f6:bc:
                    ab:fc:59:32:a5:25:7a:ad:3e:2c:45:d4:4d:ac:48:
                    09:72:29:ef:0c:63:e6:72:70:23:27:e4:97:8f:32:
                    85:25:24:33:25:d1:b2:18:c4:61:f0:2d:0c:6e:72:
                    c2:ee:b1:d8:14:28:2c:9d:c3:97:e6:c8:f8:5a:0e:
                    f9:48:ab:c9:c1:2b:45:0b:bb:9b:33:54:b2:c4:a6:
                    2a:06:24:b4:ee:7c:24:54:bc:46:fb:10:04:b1:1c:
                    81:2a:ae:63:6b:58:fb:89:2d:1a:26:8d:01:ca:0d:
                    c7:c3:9c:17:29:12:1b:51:37:df:2d:13:ee:ad:cf:
                    be:e5:64:73:2f:ad:f1:50:5b:1e:0f:c0:b8:2d:56:
                    1e:f6:40:a7:09:5c:d6:7d:6d:57:dd:9e:b6:14:03:
                    dd:f1:4f:04:ce:c3:97:35:5f:b8:39:9f:b3:fb:bb:
                    ab:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:18:2D:6A:05:BC:CF:CE:D7:C1:9C:EE:2B:06:74:BF:BC:72:82:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/77edcd41-83c3-3d54-9d91-d3c211050376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.crl

            X509v3 Authority Key Identifier:
                keyid:AC:C4:2B:19:FD:7B:64:94:F1:BE:8D:6F:0C:E8:8A:B4:D4:7C:F2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a53ac0b1-83a3-47f2-b28e-b2b1977dc375.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.34.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:10:bf:49:9d:29:d9:73:ed:8a:be:8e:9c:29:fe:77:c7:20:
         df:9d:40:1e:b9:6b:3e:dd:18:3b:37:7c:96:87:9b:f9:53:6a:
         7d:bd:94:6c:6e:19:c7:01:02:a2:36:33:0a:9f:82:06:b3:77:
         20:12:ba:b3:48:84:f5:40:ee:37:d9:4e:69:d3:64:40:31:b6:
         48:b7:d3:9d:03:59:13:5d:2a:1e:70:5f:46:63:21:6d:39:1b:
         ae:5a:6a:2c:38:98:4a:ef:63:0f:86:14:68:a0:9c:98:4d:73:
         9e:2b:71:e4:8a:ea:61:43:32:3e:93:07:ac:ef:72:f8:51:cf:
         ed:1a:a7:48:00:8b:f7:b4:ac:8a:d7:be:44:9d:23:f4:44:b6:
         db:4e:eb:78:0c:43:43:36:e6:21:30:d9:a9:d1:5b:54:b0:f3:
         50:34:6a:41:a7:3a:de:c3:1f:d5:81:4e:ae:40:a0:55:92:a2:
         5e:2b:97:6c:de:78:1a:69:a0:7d:32:83:d2:53:3d:af:1f:1f:
         2a:32:0d:32:dd:6b:7f:5b:da:2b:a9:06:7e:12:26:8d:55:30:
         bc:9a:f6:50:69:c3:93:a9:07:e7:70:1e:99:e5:64:97:3f:6c:
         fe:e1:ac:2c:da:9e:3d:76:c0:7f:95:5a:e2:0d:11:42:7e:a5:
         57:e3:98:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:41:49 2025 by rpki-client