Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/50fc5e76-3e86-39a0-9cf8-a48e77395e86.roa
File:                     50fc5e76-3e86-39a0-9cf8-a48e77395e86.roa (raw, json)
Hash identifier:          SNk305wjvIJURYAclHcnbtFVF79QiBbp8cgJCpwUoAI=
Subject key identifier:   64:7C:E7:79:C8:F5:98:94:2B:B4:96:79:F5:BC:4E:F1:E4:2C:19:5E
Certificate issuer:       /CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
Certificate serial:       010D0C9F4328584B821CCA3EC33BAB31CA990E80
Authority key identifier: 41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/50fc5e76-3e86-39a0-9cf8-a48e77395e86.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     16509
IP address blocks:        72.13.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:ca:3e:c3:3b:ab:31:ca:99:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=a4340b52-cf56-4023-9694-09ddc31e7e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:07:03:7c:a3:62:e4:56:7d:c0:ee:2c:e0:f8:
                    78:ad:e1:d3:14:72:90:eb:99:02:a4:ff:39:75:5f:
                    41:46:69:d1:f5:91:aa:45:f7:77:28:9c:c4:12:6b:
                    d0:5a:53:70:28:d6:19:3d:f2:c2:59:45:38:7f:b6:
                    58:c9:22:8f:e3:84:5c:56:87:37:8f:af:d6:63:84:
                    12:28:25:3e:c7:3e:2a:8c:08:3c:76:0d:ca:ba:ab:
                    da:e0:0d:c4:e9:69:26:c5:67:e7:2d:b5:51:6d:fc:
                    e7:eb:9c:55:11:81:0c:8e:39:17:09:e0:26:7e:7d:
                    e7:b4:5e:7f:76:85:21:cc:1d:23:0d:9c:d2:70:c6:
                    ca:4c:6b:46:4f:8a:c2:f7:5d:8b:87:a0:e9:09:1b:
                    24:a8:ad:80:6f:ba:1f:f3:ff:ec:e4:07:55:9c:c9:
                    72:36:bc:d9:f6:f5:1c:de:5c:a5:39:f5:f9:10:84:
                    9e:0c:0a:f3:67:5f:52:f4:ba:f3:78:99:b7:0b:02:
                    f3:15:01:fd:9f:27:14:d1:ad:86:c8:c2:a4:4e:e1:
                    5c:e9:d9:7b:f0:eb:fb:a8:ef:c5:6b:c9:ae:c1:22:
                    15:7f:33:d4:9f:d0:7a:f3:da:78:a8:a2:b9:30:79:
                    84:44:a3:d4:b4:f6:03:e7:36:40:71:af:82:58:49:
                    34:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:7C:E7:79:C8:F5:98:94:2B:B4:96:79:F5:BC:4E:F1:E4:2C:19:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/50fc5e76-3e86-39a0-9cf8-a48e77395e86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl

            X509v3 Authority Key Identifier:
                keyid:41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:fe:b5:33:a5:06:71:e9:8e:a5:e4:ee:a2:d0:59:08:c7:30:
         33:27:f9:7f:3f:87:5b:9d:f1:ea:3f:b9:ea:9b:f9:64:16:81:
         c5:04:18:fb:f2:68:cc:b6:f2:8c:2c:de:02:cd:b0:48:9c:5d:
         f4:5e:9a:87:ab:35:46:1b:e5:71:99:02:eb:1b:91:f2:35:46:
         e5:1b:dd:bf:08:d2:21:44:77:54:32:95:99:8d:58:e0:0e:fd:
         65:a3:cb:b9:c4:ee:4f:8e:d1:f1:f7:3f:f4:c0:69:78:28:c3:
         54:47:45:5f:46:93:72:b5:a7:10:f3:9a:01:f1:3b:95:7d:ad:
         4a:b1:f6:da:3f:6e:3e:d1:87:ae:ca:2a:6d:03:45:ad:7c:1d:
         e9:b3:24:68:b2:92:f6:af:3b:d0:d1:5e:7d:f6:3e:82:c7:d7:
         70:ee:0c:96:10:1a:3b:1e:c3:e8:ca:62:a5:63:8c:fc:c4:c3:
         68:9f:0c:e3:22:90:3b:66:e6:5a:db:af:80:64:9a:e6:e7:59:
         0c:3f:fb:4b:d3:10:85:90:5c:ed:bd:8f:5f:3f:cd:d6:5f:27:
         5b:20:7d:2d:a6:20:83:5f:0d:7b:3b:c0:85:12:a1:39:52:09:
         5b:f5:1f:64:66:20:e0:f1:f2:ea:fb:93:0e:21:ab:a6:ae:74:
         44:97:de:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:46:33 2025 by rpki-client