Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/a69b229e-9f26-3b8c-a52d-99a6562a92c4.roa
File:                     a69b229e-9f26-3b8c-a52d-99a6562a92c4.roa (raw, json)
Hash identifier:          RTD8wL1jl91lVrtkABZYoGKIg4g9MoXYAKTZ2S1E/Bs=
Subject key identifier:   76:0B:4B:0C:0E:5E:07:C4:63:F2:B3:23:E5:0B:39:C5:77:66:EC:4C
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584B047C02B252D6C7A950092900
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/a69b229e-9f26-3b8c-a52d-99a6562a92c4.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     13807
IP address blocks:        24.51.32.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:02:b2:52:d6:c7:a9:50:09:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=0a7314a0-399c-45a6-838b-0c1f24a85846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6c:bd:f1:66:34:3f:93:8c:00:32:11:80:d5:
                    07:b3:0f:d0:b7:0f:a9:ba:73:e1:31:a0:b8:83:e1:
                    81:f5:55:89:94:7d:b1:66:c7:73:03:6a:41:f3:71:
                    9d:56:1f:21:39:8e:0e:9a:1a:c8:1a:13:76:d1:f1:
                    be:cd:98:94:be:3b:f7:82:e9:99:1c:a8:a3:65:66:
                    75:ad:a5:ca:fc:2d:30:53:ea:4b:19:ac:92:32:13:
                    87:df:be:8e:c6:48:2f:ca:7b:4c:4b:dc:89:a0:99:
                    43:42:3f:9d:a0:cf:e0:00:69:0e:9b:59:00:e6:15:
                    3c:df:f2:c1:45:c0:2c:02:f1:46:d5:c1:02:a4:1b:
                    5f:23:1c:75:c9:1b:3c:58:3c:35:dd:2c:34:a5:df:
                    fe:0e:ae:81:27:5d:eb:58:55:d1:09:d0:2b:52:04:
                    c7:87:9f:92:5b:22:f0:7e:72:58:b5:e0:d3:06:02:
                    b5:da:de:b1:8e:85:5b:60:7c:8d:d4:12:a1:e6:fd:
                    37:b3:30:87:9d:f0:ec:b5:81:80:ba:7e:d4:87:c4:
                    d2:2a:00:7a:74:bb:7b:74:2f:8b:0f:fa:6b:a8:bd:
                    52:36:f7:f0:88:1f:0f:79:97:f6:19:7a:95:96:3d:
                    67:50:ad:69:1b:a2:4f:ec:41:6e:6c:46:8b:94:22:
                    85:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0B:4B:0C:0E:5E:07:C4:63:F2:B3:23:E5:0B:39:C5:77:66:EC:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/a69b229e-9f26-3b8c-a52d-99a6562a92c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.51.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:87:87:1e:ca:08:32:9c:dd:96:df:12:ab:9c:a1:ec:55:09:
         8a:b4:c3:93:39:e6:ec:5e:88:46:34:35:1a:ee:46:56:cf:9a:
         52:c4:b3:fe:e1:e9:77:9c:c7:32:78:e7:bb:c8:b4:6e:77:3a:
         bb:48:39:04:74:69:df:72:9d:56:92:2d:d2:c3:94:1c:a9:c6:
         23:74:11:58:9d:80:17:94:ed:80:d2:7e:55:24:72:59:1e:cf:
         41:58:d3:30:6e:61:0a:0e:09:53:87:dd:ad:f2:74:50:d0:5f:
         4a:51:cf:63:59:15:9e:43:5b:6f:db:c0:87:57:37:3d:0d:06:
         34:42:c1:c0:01:c3:8c:9f:4a:27:78:2a:06:39:6b:7e:0e:a7:
         ec:f7:1e:b9:75:00:9f:0e:81:a1:0f:3d:55:a5:bb:4c:55:76:
         0c:f9:80:31:73:13:63:26:b1:b1:70:cd:62:27:43:d6:31:4c:
         ea:2c:95:a9:69:f4:20:b5:2c:57:a1:00:ec:1d:8d:0e:4b:d0:
         ca:a1:90:8b:8f:b7:bc:cd:a0:a3:07:05:c7:ea:9d:e1:00:01:
         50:5d:b9:4f:0f:d4:4a:ae:8a:29:23:f9:3f:d9:88:b0:29:ea:
         8f:9f:de:13:fe:0b:54:3e:d8:f1:04:14:e4:b8:c8:c2:2c:94:
         f8:76:c7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 13:54:51 2025 by rpki-client