Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/15d68e3b-7087-3564-8640-8443284552a9.roa
File:                     15d68e3b-7087-3564-8640-8443284552a9.roa (raw, json)
Hash identifier:          9XOwLncXHnQw4HDhbQV8i8bI45+WbVO0PAzmokujQmE=
Subject key identifier:   3B:68:8F:6A:59:04:8A:06:0E:F8:5F:CD:03:80:6D:A2:09:EF:B2:4C
Certificate issuer:       /CN=8d499d1b-9023-4410-8b4a-909ca6a083df
Certificate serial:       010D0C9F4328584B2FC186EC89240DA8C92AFAC0
Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/15d68e3b-7087-3564-8640-8443284552a9.roa
Signing time:             Sun 14 Sep 2025 01:00:33 +0000
ROA not before:           Sun 14 Sep 2025 01:00:33 +0000
ROA not after:            Sat 13 Dec 2025 02:00:33 +0000
asID:                     397666
IP address blocks:        162.220.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2f:c1:86:ec:89:24:0d:a8:c9:2a:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df
        Validity
            Not Before: Sep 14 01:00:33 2025 GMT
            Not After : Dec 13 02:00:33 2025 GMT
        Subject: CN=b3cdd07e-e695-4017-b57a-e8253d68dd2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4f:0c:8d:0d:52:4b:74:c2:71:66:c1:c2:42:
                    a5:fe:35:00:4a:be:28:59:f6:22:fd:bb:7f:94:28:
                    f4:07:e3:53:e6:bd:9a:f9:fe:d8:37:62:9a:29:e9:
                    df:bd:dd:9c:1a:7e:af:d5:67:59:ea:39:34:23:6e:
                    0c:e2:29:80:70:0a:66:15:36:5b:1a:44:26:6e:09:
                    67:f9:2e:47:1e:2f:04:89:56:d6:d8:2c:54:48:2b:
                    6e:29:f2:62:dd:6f:dc:70:6a:cd:03:e4:f7:53:e3:
                    15:5c:93:9f:7d:d4:68:27:6f:86:c5:d6:14:2b:98:
                    6a:70:59:d7:05:11:30:60:40:00:0e:f2:82:59:bd:
                    88:0d:80:c3:9e:3c:ce:a0:33:2a:91:37:39:f1:ac:
                    e3:84:79:49:33:ad:72:cd:ed:0e:ad:98:45:8d:4a:
                    d5:1f:0f:22:23:e6:62:cf:5b:72:0c:fb:4b:16:ba:
                    7d:17:8d:4e:72:70:5f:49:ce:09:d0:30:9c:ca:1d:
                    c7:3b:d1:8a:2c:e3:40:6a:c4:1b:e9:c8:63:0d:50:
                    12:d9:25:75:8e:b7:41:a3:79:a7:ac:cb:af:2e:f3:
                    a9:34:f8:86:b0:29:6c:d3:f7:42:fd:53:56:e4:7f:
                    62:e3:71:1f:bc:ee:4d:a3:0a:1c:b9:2d:61:9a:e5:
                    a3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:68:8F:6A:59:04:8A:06:0E:F8:5F:CD:03:80:6D:A2:09:EF:B2:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/15d68e3b-7087-3564-8640-8443284552a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl

            X509v3 Authority Key Identifier:
                keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.220.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:91:e8:8c:16:7c:5a:5a:88:f3:28:22:b6:6b:b3:a5:31:bb:
         b1:64:ff:34:1a:90:06:d4:81:94:36:96:a8:d4:71:97:94:7d:
         f8:1f:79:33:31:75:ff:6e:f9:3b:5a:be:a4:d1:60:1c:3e:7f:
         06:2d:b7:b6:4c:23:a9:a4:10:4b:64:8c:5b:f0:58:55:eb:14:
         68:9f:11:85:91:a1:c1:87:e6:f7:e0:30:ab:5e:e0:e1:b7:0d:
         5a:cf:5a:fb:af:c2:a3:db:b8:95:aa:3e:d3:9e:1a:4c:21:3e:
         5b:56:d8:03:38:ca:37:f7:2e:1e:1e:a7:64:cf:03:e7:94:44:
         15:d9:03:de:c8:c2:c4:3d:a1:e1:ca:5e:71:32:d4:08:37:b6:
         74:c4:64:82:32:e9:a6:13:cd:45:59:02:53:b1:81:89:28:1b:
         fe:6f:6a:6c:30:53:69:46:cf:2f:b2:66:a7:5d:10:c0:8e:f8:
         cd:8e:ec:0c:b9:ba:45:8a:27:40:60:49:35:a1:2b:cf:90:94:
         28:a8:94:08:25:6e:d4:00:a5:a3:fc:f5:12:c3:4b:c2:a4:aa:
         6d:d3:b5:15:45:11:a3:8d:85:fa:18:54:84:03:9b:23:c0:3a:
         8a:0b:f3:e9:fb:e0:77:74:20:b7:9d:a0:69:6a:ea:cb:ea:ea:
         7f:43:0c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:40:40 2025 by rpki-client