Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ae3340b6-cbcc-303e-9541-8e0411b269e1.roa
File:                     ae3340b6-cbcc-303e-9541-8e0411b269e1.roa (raw, json)
Hash identifier:          T5YSuKI4jXiSBRUU0sGUMV3Lc9kX5Dom4NsgkJN6/pA=
Subject key identifier:   91:FA:83:DA:15:64:E6:3B:02:32:89:ED:99:7E:CD:F4:E3:2C:5A:F1
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584B047BFC80B24F8E983D29EE80
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ae3340b6-cbcc-303e-9541-8e0411b269e1.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     13807
IP address blocks:        24.51.56.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7b:fc:80:b2:4f:8e:98:3d:29:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=1cf7362c-0414-400c-8fe3-627444a287e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1c:14:37:44:e2:04:8e:63:1c:23:39:29:3d:
                    c4:fe:6a:0d:86:9e:76:dc:78:13:7c:59:f6:d0:f4:
                    77:4f:c6:88:a0:1e:ca:da:15:3b:37:7f:86:c0:25:
                    cf:46:03:dc:c1:2f:96:29:52:0b:0b:17:54:19:6b:
                    53:d4:c9:6e:7f:8c:d9:73:43:31:15:93:bd:9b:15:
                    2d:ff:97:2c:4f:4d:04:04:87:cd:25:d2:f8:82:67:
                    3a:e5:44:78:41:1f:7b:ee:dc:f8:0c:a1:39:dd:58:
                    9b:3c:fc:5c:7e:60:38:42:29:cb:e9:e1:ec:c1:ad:
                    da:e3:48:35:f5:c4:ef:48:22:2f:78:56:f8:53:7e:
                    1a:72:be:f1:46:26:71:ec:6a:c3:80:f1:27:f0:e9:
                    fd:6e:18:db:b0:6f:4c:32:12:23:2e:76:6c:34:8e:
                    8f:a3:6f:a3:46:a7:a1:0a:c3:21:86:62:26:fb:84:
                    db:10:5d:7f:06:2b:3d:36:82:2b:80:fe:e6:cc:8d:
                    ed:06:17:82:3e:3c:fa:4b:6f:09:19:f5:ee:64:4d:
                    25:99:39:3f:4a:8e:df:40:57:ec:ec:0d:ca:8b:c8:
                    2b:f3:9d:af:95:83:bc:a0:04:aa:2f:2b:79:11:17:
                    af:f9:96:46:30:48:92:65:3d:33:69:60:13:40:95:
                    c9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:FA:83:DA:15:64:E6:3B:02:32:89:ED:99:7E:CD:F4:E3:2C:5A:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/ae3340b6-cbcc-303e-9541-8e0411b269e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.51.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:46:92:af:d2:ed:23:e6:0e:d0:40:9a:b5:aa:9d:1e:a8:a5:
         c5:e4:53:1b:44:ac:15:4a:23:61:11:30:7e:eb:15:8e:9d:c9:
         78:03:d0:20:36:0d:a9:30:25:d9:7b:e0:38:76:93:82:e6:da:
         3e:77:8d:a3:d8:6d:13:84:11:ac:58:89:30:ae:84:3d:db:e1:
         5e:e7:a3:d6:f3:2d:89:35:30:08:d6:e5:ee:b1:50:21:36:48:
         4b:90:95:24:ca:f4:9f:e2:d8:a0:6c:83:b5:d4:fb:3f:ba:6c:
         9b:c2:f8:e5:80:61:87:75:39:ac:f1:cd:94:bf:c5:3e:8e:7e:
         7d:9c:38:76:6d:68:b7:ed:ad:f4:a0:14:02:f3:23:9a:79:55:
         51:bd:2d:11:a8:d2:6f:6a:e8:c4:f1:9b:cb:4e:91:9f:c0:05:
         f1:ae:d8:c6:08:09:33:12:f0:a3:33:cc:9d:7d:5a:34:77:bf:
         d1:d2:07:cb:af:75:34:6d:5c:e2:56:aa:ee:c1:d5:80:22:3e:
         51:bf:e8:0e:db:8c:32:f2:c4:6a:6a:ee:81:29:71:e9:37:84:
         77:a8:8b:28:19:50:0c:b4:ea:51:f0:72:b6:ae:90:11:bd:f7:
         4c:ad:27:98:82:ff:4e:f0:09:f3:3e:db:8f:b8:e3:b5:39:1b:
         26:27:3e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 13:49:50 2025 by rpki-client