Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/72b08e34-6b25-320b-9e68-f2d20789a74a.roa
File:                     72b08e34-6b25-320b-9e68-f2d20789a74a.roa (raw, json)
Hash identifier:          LjbZmeLXOx/gtb5jJfKUDMhoSELSyNNsEgHS7QqiCG0=
Subject key identifier:   F9:A1:DA:6A:2B:82:5C:B8:54:CA:56:6F:C3:27:58:E0:50:3E:19:8C
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584B8A24FA72D96D9B1DA90D9540
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/72b08e34-6b25-320b-9e68-f2d20789a74a.roa
Signing time:             Thu 16 Oct 2025 10:03:46 +0000
ROA not before:           Thu 16 Oct 2025 10:03:46 +0000
ROA not after:            Wed 14 Jan 2026 11:03:46 +0000
asID:                     14555
IP address blocks:        198.23.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:24:fa:72:d9:6d:9b:1d:a9:0d:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Oct 16 10:03:46 2025 GMT
            Not After : Jan 14 11:03:46 2026 GMT
        Subject: CN=1c36d4c9-d0c7-40c6-9e60-d54db167faf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7e:3f:ab:b7:cc:48:fe:ee:7f:a9:58:6f:f5:
                    3b:67:cf:ab:7d:5f:72:ad:2f:23:c9:d4:6d:d4:0f:
                    08:2b:2b:22:06:8a:b8:08:e1:ce:f7:81:24:53:85:
                    68:d1:7f:73:d0:5d:0e:10:5a:91:04:a7:ed:dc:f7:
                    42:f7:db:f1:e6:d5:66:51:a1:df:e9:f8:0e:65:6e:
                    9d:97:d7:1f:1d:f3:d4:ca:4c:85:ac:f4:5c:8a:37:
                    a9:6c:f6:0c:92:db:0a:a9:75:b3:e1:ec:cf:a8:d8:
                    ea:59:75:f9:00:84:ba:ea:cd:cb:36:f0:42:11:80:
                    31:c5:e4:f7:ac:45:70:8a:ea:d0:6e:0d:65:10:57:
                    83:72:97:ea:20:87:80:aa:3a:2d:68:49:6c:f3:c2:
                    f6:59:2e:f6:04:a8:e0:66:8b:d0:dc:ae:e9:99:28:
                    9c:bb:3a:e8:40:3a:a2:ea:32:2f:32:d9:5e:7a:63:
                    b8:f1:25:c0:c1:53:5e:e0:e8:37:cf:c6:53:0a:25:
                    ff:f6:51:a8:30:06:2b:7f:a2:10:e7:f4:af:f5:4c:
                    5a:e0:fe:70:68:57:34:d9:e2:c1:89:48:d8:f6:46:
                    43:f4:35:e0:c3:a7:bf:08:dc:da:92:78:74:6e:ac:
                    2c:b8:b7:7f:31:63:43:5c:17:86:44:52:71:9c:8d:
                    f1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A1:DA:6A:2B:82:5C:B8:54:CA:56:6F:C3:27:58:E0:50:3E:19:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/72b08e34-6b25-320b-9e68-f2d20789a74a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.23.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:0c:10:7d:57:bc:0e:61:1e:aa:fb:d1:59:5d:1d:e2:cb:d3:
         79:03:33:76:3c:ed:6e:ad:4b:6c:f7:ca:a3:20:6b:b6:01:43:
         e1:6b:04:52:de:74:39:50:b9:ef:ea:1d:3d:29:41:34:57:f6:
         5e:2d:87:60:c1:1b:74:cf:5e:5d:fc:9d:3b:5d:ac:48:c8:1b:
         20:ad:1e:80:f3:0e:fa:2f:6a:d4:3a:4b:c4:77:1e:ca:b6:94:
         81:88:17:1c:e4:a7:ea:63:41:96:65:89:9a:65:09:5e:ae:f4:
         89:7a:f5:cc:38:6b:0d:f8:cd:2b:97:f1:53:94:98:38:ff:f0:
         e5:57:9b:7b:57:24:75:49:82:ef:bf:24:ca:2a:46:d8:d8:7c:
         0f:71:46:6a:72:8e:0d:87:25:03:6f:6e:8d:26:59:b3:45:3f:
         b2:1b:bc:8b:46:97:6f:eb:5e:66:6e:c0:a5:59:37:32:7b:e1:
         dc:95:c0:26:66:29:d1:02:fc:6e:3d:71:f9:67:e4:5e:91:47:
         0c:c9:1e:ee:a5:52:09:b3:a2:fe:57:60:2e:47:6a:8d:3a:4c:
         38:8f:14:46:b4:78:a8:9b:79:2c:b6:72:40:79:37:9e:b8:bb:
         88:1d:e0:1d:d4:42:db:19:43:d2:d8:c7:a2:41:8d:1c:39:e7:
         d0:cd:8d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:23:33 2025 by rpki-client