Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/89e723ca-7d41-3a9c-bc68-7ea02fd5ca74.roa
File:                     89e723ca-7d41-3a9c-bc68-7ea02fd5ca74.roa (raw, json)
Hash identifier:          JD6DloGfrchynaJzl5YkI/qh5Vg3J4YfEU9gdyWMDfA=
Subject key identifier:   C2:8F:CD:A8:29:7C:D9:61:E3:08:B4:72:2A:F2:4E:43:67:2F:49:6F
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F4328584B8EACEC4EAE15A09221B13F80
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/89e723ca-7d41-3a9c-bc68-7ea02fd5ca74.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     237
IP address blocks:        35.24.0.0/17 maxlen: 17
                          35.24.128.0/18 maxlen: 18
                          35.24.192.0/19 maxlen: 19
                          35.24.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:ec:4e:ae:15:a0:92:21:b1:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=d2e3e833-3dd9-4806-8ccf-8e8da8c17c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c7:23:30:0e:30:f5:d9:e2:20:55:4d:2d:19:
                    02:2c:b2:4b:1a:eb:b4:01:02:83:87:70:ba:8a:23:
                    92:8d:a1:a2:6e:32:4a:4a:b3:e8:26:4c:f4:13:c9:
                    78:d7:e8:24:91:08:71:5e:76:bc:20:b5:ef:07:51:
                    ae:0b:5f:e8:aa:51:19:e2:f1:02:dd:ab:ba:c6:9b:
                    8d:85:cc:05:91:d0:44:e9:5d:a8:79:63:67:36:f9:
                    0d:f5:90:68:e5:db:20:26:e8:09:cb:08:11:d3:77:
                    ef:b5:e4:12:95:ba:3f:ed:8b:0d:46:fb:41:31:ba:
                    35:74:d4:52:7c:7c:83:f5:ae:9e:ce:38:00:62:97:
                    4a:54:59:38:22:ec:ea:39:b9:f4:bd:46:b7:de:f8:
                    a9:4d:1a:3b:e3:4c:81:6a:77:c6:b1:e4:e9:ec:88:
                    d1:e6:fe:02:c6:6c:9f:d9:e3:e5:28:62:d5:01:c4:
                    60:50:94:e2:a9:af:7f:d6:a1:1b:a1:26:3f:37:40:
                    62:81:d3:42:0c:a9:07:f9:84:56:19:15:61:c4:3d:
                    96:0c:9f:21:02:7d:43:23:c8:af:a5:e0:81:8d:20:
                    a5:13:30:ad:07:59:fb:a2:1a:77:75:b6:05:35:17:
                    8b:74:c1:0f:d4:87:f7:99:92:04:8b:64:80:32:10:
                    14:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8F:CD:A8:29:7C:D9:61:E3:08:B4:72:2A:F2:4E:43:67:2F:49:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/89e723ca-7d41-3a9c-bc68-7ea02fd5ca74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.24.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:24:89:e1:59:d2:2c:fd:d4:cf:6d:18:37:56:26:4b:a1:41:
         e9:44:95:43:36:28:c6:f4:99:62:38:bf:cc:0f:6d:95:0b:55:
         ef:66:4a:75:96:8a:f7:ea:86:10:47:5c:e1:f5:e0:9e:07:5a:
         b3:db:1d:31:cc:a3:a4:36:35:cb:c4:f9:42:cc:db:ef:b0:af:
         07:f6:8d:3e:f1:3d:14:74:42:0e:7d:c9:1d:2c:8c:3c:a4:ae:
         0a:ab:32:09:ef:f2:25:36:d2:51:17:aa:b8:a8:9b:bb:57:62:
         a3:70:d4:89:19:2f:00:d8:78:01:5d:01:d6:f9:7b:f8:78:62:
         ea:f7:58:0a:d4:b2:c9:4a:9d:66:e7:53:4a:a5:5f:d5:d5:27:
         1f:61:e1:b6:6e:e8:b1:21:18:62:ab:78:bd:75:03:14:d6:97:
         13:5f:02:93:0e:49:29:67:3c:67:6c:4d:a2:66:60:02:4e:ec:
         06:64:03:38:f4:91:fd:f1:7c:2c:b3:be:a3:a3:b7:63:85:47:
         6d:91:96:10:52:95:1e:64:f7:80:90:4a:b6:21:26:b9:0a:6a:
         ef:c2:3a:73:ba:c0:fa:65:fc:c2:be:6e:5d:77:48:ea:47:99:
         ad:a4:16:37:9d:66:29:6b:f4:b4:be:c3:28:3a:28:82:49:39:
         37:dd:87:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:11:43 2025 by rpki-client