Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/e5531aad-5bd9-39d8-9bca-5deaaa657ae0.roa
File:                     e5531aad-5bd9-39d8-9bca-5deaaa657ae0.roa (raw, json)
Hash identifier:          J+qWanycptA8j/UERndcX/c7qPPmdzKIpKp4CZCavnk=
Subject key identifier:   F5:D5:BF:E8:04:CB:BA:55:D0:FA:4D:F9:D5:5E:78:78:85:93:4C:67
Certificate issuer:       /CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
Certificate serial:       010D0C9F4328584B821CC29459CF77882C3E6680
Authority key identifier: 41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/e5531aad-5bd9-39d8-9bca-5deaaa657ae0.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     14618
IP address blocks:        72.13.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:c2:94:59:cf:77:88:2c:3e:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cbcff68-23bb-4d4e-a703-bab3115bf054
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=f4e22177-a63d-4ea1-a2c1-760f7f1a49c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c7:1b:55:f1:71:bb:6e:27:e5:bb:88:28:7a:
                    9a:a7:70:94:ed:34:55:0e:1d:84:0b:8f:6d:38:64:
                    90:40:30:eb:30:77:ba:c3:dd:d8:ff:10:10:3f:8e:
                    8a:25:ef:36:64:0b:f5:b0:ac:ed:2d:0a:96:03:b4:
                    ce:61:d0:ed:9c:26:8b:20:a3:d5:73:4b:c8:0b:9d:
                    47:f9:86:f9:8e:1a:9f:28:49:f8:52:01:54:f5:87:
                    69:f5:aa:72:ad:3a:65:fb:20:eb:6e:4a:bc:7f:c4:
                    db:9b:4a:63:80:45:28:f1:c9:3e:f3:74:05:a7:e3:
                    50:24:2f:7c:ac:93:97:7e:d0:e5:ac:e3:59:8a:3f:
                    68:01:8f:07:df:37:aa:84:3d:5a:78:05:e0:f0:6b:
                    f8:3d:a2:4d:e8:99:64:5a:c5:43:50:aa:9e:6d:87:
                    ca:4a:31:a3:37:4c:fb:d9:8b:fe:0e:e4:92:48:02:
                    e6:2b:5a:33:fb:c1:e6:3b:f6:61:c3:b7:2c:1a:6f:
                    53:02:71:a4:e1:21:36:b2:1e:e9:fd:90:72:e7:7e:
                    b2:d4:84:60:69:a9:21:23:24:05:27:d1:76:ef:73:
                    2c:c4:11:8a:fe:42:97:a0:65:84:67:2b:7b:f9:9b:
                    49:91:a3:f7:66:ae:3e:03:a4:b4:97:ec:af:6f:f2:
                    9b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D5:BF:E8:04:CB:BA:55:D0:FA:4D:F9:D5:5E:78:78:85:93:4C:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/e5531aad-5bd9-39d8-9bca-5deaaa657ae0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054/7cbcff68-23bb-4d4e-a703-bab3115bf054.crl

            X509v3 Authority Key Identifier:
                keyid:41:32:F0:8C:EB:B2:04:8C:08:D7:F7:DC:D4:25:54:D9:78:3D:18:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7cbcff68-23bb-4d4e-a703-bab3115bf054.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.13.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:c4:df:41:7e:6a:c3:86:e6:03:11:24:60:12:1b:eb:99:8a:
         6a:83:a8:d3:e0:58:69:46:a0:ac:43:35:f6:b2:b9:ec:2a:df:
         ee:f8:8a:fb:01:71:45:15:97:2c:c6:6c:af:17:48:fe:29:f0:
         76:4e:43:b1:41:37:ad:b8:5d:9a:1a:4f:90:18:29:78:33:89:
         73:2f:8e:7d:1b:ee:7e:c5:9d:50:10:5d:26:d0:90:c6:94:2f:
         66:23:13:67:0d:4c:03:3e:cd:90:ca:26:64:3d:68:41:a3:55:
         26:c1:34:2e:38:d8:4d:52:c9:ab:ae:1c:85:b8:05:8d:3a:ab:
         ae:b6:7e:42:0a:f3:b7:03:bb:c8:f5:4d:dd:1a:66:3e:25:c7:
         97:07:ed:55:7d:97:3c:7c:49:3f:3e:6a:c0:2d:7c:53:d6:2c:
         6a:7a:ab:07:93:39:8c:e2:f1:b6:ca:4f:6f:fc:4b:49:3b:0a:
         a1:41:9d:17:b1:d3:16:9a:77:eb:93:f6:a2:5d:89:0f:41:a7:
         d3:e9:ab:6d:55:a8:e4:94:f5:cb:5b:52:97:db:ba:52:1a:8e:
         fa:24:31:fa:ee:44:a4:51:09:1f:22:85:1e:e6:a4:e6:31:47:
         57:3e:bc:44:74:e8:61:00:10:58:39:0a:01:c1:d0:bd:95:6b:
         e4:37:f5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:34:28 2025 by rpki-client