Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/87145267-5a8e-3c36-845f-011769715183.roa
File:                     87145267-5a8e-3c36-845f-011769715183.roa (raw, json)
Hash identifier:          GUdrrS/w0KprC9qsbl9HHw/hqe4ljDB9EeVlkK7SwtY=
Subject key identifier:   89:79:43:7E:A0:99:FB:BB:08:AF:C5:78:D2:8C:8B:BF:46:B5:E5:AF
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584A374AD7CCEC594F13D6DD1180
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/87145267-5a8e-3c36-845f-011769715183.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     7992
IP address blocks:        24.57.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:d7:cc:ec:59:4f:13:d6:dd:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=8133fd2e-3e4c-4be7-8aaf-6a4fe54c3b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:33:52:8a:11:ad:e7:b0:7d:11:7e:54:59:4a:
                    d8:43:af:20:41:d1:ff:21:81:e5:63:d7:3e:00:e2:
                    e8:0e:15:b5:93:bd:94:e8:74:1a:1b:5a:a9:ec:e1:
                    1f:5f:1b:df:bf:a1:a5:5b:8c:8e:fa:bd:ca:3e:bf:
                    94:6a:10:9a:59:e9:30:db:9f:9d:70:e5:b1:a6:7a:
                    e3:80:cb:14:e2:61:3d:af:c4:09:71:90:68:64:ee:
                    10:44:80:c6:c7:db:d8:a9:1c:66:bf:58:e6:36:49:
                    c9:92:f4:cf:d9:ad:4a:eb:31:7c:fc:bf:e5:1c:b5:
                    a8:61:58:76:00:b2:19:18:4c:90:0d:c2:c8:aa:7d:
                    bc:2d:95:37:2e:2e:ed:c3:83:70:79:6b:69:60:11:
                    8e:b2:cc:cf:dc:29:df:a4:63:77:5d:24:7d:17:93:
                    e0:6d:e6:7e:66:a7:77:21:0d:fe:d2:b4:1b:40:5b:
                    82:2c:c0:52:bb:93:b0:ab:4b:63:23:bb:19:d3:20:
                    33:44:d6:a2:48:5e:5d:bd:77:62:1e:56:87:32:30:
                    c0:16:43:f1:f5:64:56:35:cc:cc:90:78:38:27:e9:
                    57:c7:1c:89:bb:50:74:f9:c4:95:0b:c3:0e:a8:c9:
                    bc:ad:5d:ac:44:9e:b4:c9:4c:c7:b5:c0:33:6f:6c:
                    64:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:79:43:7E:A0:99:FB:BB:08:AF:C5:78:D2:8C:8B:BF:46:B5:E5:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/87145267-5a8e-3c36-845f-011769715183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.57.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:17:25:b2:3a:a3:e0:96:31:97:30:df:5b:91:43:ce:70:44:
         9b:a9:7e:1d:ff:9f:bc:b9:09:2c:7d:6f:14:70:40:44:3b:37:
         6a:04:45:4b:8f:16:26:70:f6:41:eb:4c:fd:45:ba:82:9b:a9:
         9e:5d:56:4b:4b:c8:17:a5:79:02:de:30:fb:3f:29:c1:14:28:
         f2:fb:80:f1:ee:d3:85:99:2c:35:e7:a7:84:de:61:7d:6a:01:
         69:08:cf:23:77:5d:cc:7e:89:22:cf:8b:fb:28:03:83:34:8f:
         bc:ed:6e:ff:6a:fe:c2:4e:62:7d:46:61:5d:2e:9c:16:38:ae:
         88:99:c7:98:ac:e4:b5:20:8e:12:c5:91:9f:c7:6d:20:4a:35:
         f2:12:af:61:02:94:32:a8:1d:54:38:8a:c4:f7:38:30:27:40:
         60:65:ba:83:4a:fc:be:05:0b:db:73:05:55:dd:e7:60:20:59:
         b4:bb:1a:90:2e:70:6b:35:7e:4f:c2:21:7f:0e:81:3e:ae:16:
         87:1f:9a:9e:36:bb:36:19:55:4a:45:41:71:f8:26:7a:b9:ca:
         2e:16:42:c5:d8:ee:5f:f0:0a:56:20:43:53:8b:52:72:92:a8:
         ed:be:66:7e:e4:15:bb:58:86:ba:0e:1c:66:63:82:2d:a4:d9:
         90:e1:5f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 02:45:19 2025 by rpki-client