Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/57c97c76-fc77-3aa6-97b6-88e31482b451.roa
File:                     57c97c76-fc77-3aa6-97b6-88e31482b451.roa (raw, json)
Hash identifier:          EJwA6ac4rUmzdgvLqHLdmjL6seGLIgRLnvfqHXDeKNg=
Subject key identifier:   E6:D6:6E:8D:CD:FF:91:4E:6C:2A:D0:2F:21:CD:CD:B9:F7:55:FB:21
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584BB108CAA5FF2C79E4389B5780
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/57c97c76-fc77-3aa6-97b6-88e31482b451.roa
Signing time:             Thu 30 Oct 2025 08:23:29 +0000
ROA not before:           Thu 30 Oct 2025 08:23:29 +0000
ROA not after:            Wed 28 Jan 2026 09:23:29 +0000
asID:                     205886
IP address blocks:        72.244.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 02 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b1:08:ca:a5:ff:2c:79:e4:38:9b:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 30 08:23:29 2025 GMT
            Not After : Jan 28 09:23:29 2026 GMT
        Subject: CN=b4797fec-636a-4d4f-82b9-01e14a83cf4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:45:01:b2:e0:77:1f:8f:aa:a3:3c:77:89:8e:
                    e2:65:f8:41:1a:bc:44:c8:1e:ec:cd:a5:5c:72:7a:
                    3e:fa:4d:62:06:bb:56:dc:77:6e:ba:18:1e:67:0a:
                    5f:61:90:55:40:c2:a4:c3:9c:9d:b3:64:bb:1d:74:
                    df:ae:78:8a:85:b8:ef:fe:38:0f:3c:26:92:78:78:
                    24:3e:8e:35:c2:cd:65:ec:5b:d6:da:75:1f:93:3e:
                    8d:f5:89:f3:be:a7:15:57:7b:f9:45:26:a2:8e:3e:
                    3e:81:0e:b3:0a:6b:12:f4:4d:d5:a6:ea:81:dc:91:
                    4e:04:f1:8c:ef:30:c0:d8:cf:ca:4b:6e:13:25:cb:
                    95:97:6c:52:c2:dd:16:63:30:79:79:02:8e:a8:fc:
                    88:1a:8e:02:1a:70:6e:c7:24:b8:64:99:8a:a9:a0:
                    92:4b:43:68:f3:0c:21:02:c8:1d:fe:da:0c:bd:d0:
                    a5:a1:47:af:4e:83:54:78:57:d4:9b:ca:54:fe:3e:
                    dc:24:4e:88:74:f6:77:34:de:25:2e:02:20:48:aa:
                    fd:58:00:0e:df:3a:4c:b3:2c:17:c3:74:61:86:a6:
                    92:09:9f:ba:c1:c7:1c:95:0b:2f:c7:38:8e:64:c1:
                    a4:2e:b7:0a:4d:64:13:6d:45:76:a8:39:65:fb:d4:
                    d9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:D6:6E:8D:CD:FF:91:4E:6C:2A:D0:2F:21:CD:CD:B9:F7:55:FB:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/57c97c76-fc77-3aa6-97b6-88e31482b451.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.244.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:6d:e3:8c:c7:78:80:97:bb:9b:34:58:0c:e0:98:f9:e0:4c:
         22:77:6f:3c:de:bb:8c:a8:de:cf:ee:0c:69:6d:3b:70:ec:ea:
         25:b8:c6:7c:07:4b:65:a1:44:e3:42:51:74:03:cb:98:c1:60:
         17:de:27:8a:15:d5:dd:94:8c:f2:35:3b:fb:c1:94:c9:1f:13:
         22:71:91:f6:4e:03:c0:c3:ca:c9:83:8e:79:f1:0c:a3:cc:9c:
         06:c9:0b:89:3e:98:ff:ee:ca:28:1f:fe:56:41:0a:b2:55:9c:
         50:95:69:72:56:f9:59:59:e2:ff:36:b8:23:3a:b9:8b:01:50:
         b9:a5:72:0a:e9:70:8e:a2:99:27:37:3a:46:5f:6e:b4:de:da:
         39:e3:da:f0:4b:5b:e8:a9:6e:9d:cf:fb:d9:91:41:df:23:d5:
         94:13:5c:cf:d5:a9:c8:b3:b2:10:94:12:36:dc:23:8a:d0:ce:
         fb:15:53:ad:f9:8e:66:af:d6:11:12:7b:c5:8a:f1:e0:7b:bb:
         de:1c:96:87:58:34:fa:c0:2f:c3:91:5f:9c:dd:d0:0e:b6:dd:
         0c:4c:01:52:1e:62:60:34:95:0f:8d:e0:5b:b1:0c:c4:ef:0a:
         8a:eb:57:a2:b3:a9:69:1a:ff:60:8b:b4:af:12:d0:ae:b9:41:
         b2:95:4c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 08:30:51 2025 by rpki-client