Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/e2c50a35-50bf-3b4f-aa6d-fddffbb62ae4.roa
File:                     e2c50a35-50bf-3b4f-aa6d-fddffbb62ae4.roa (raw, json)
Hash identifier:          C8rhdxi0Gc/7fRlRzFOzw1m4wTc8Hpnse9cqVYVa4ls=
Subject key identifier:   DF:57:DB:85:8F:06:4E:2D:5F:52:A1:70:66:B0:E5:7A:5A:92:A9:B1
Certificate issuer:       /CN=7fe8e2c2-2a61-44d9-95b7-64eb181032e3
Certificate serial:       010D0C9F4328584B80B782921EEC7E2505316300
Authority key identifier: 77:DB:4F:76:3E:9F:44:8F:20:A3:2F:7B:8F:72:B7:F2:EC:20:0C:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/e2c50a35-50bf-3b4f-aa6d-fddffbb62ae4.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     11192
IP address blocks:        24.56.133.0/24 maxlen: 24
                          24.56.136.0/24 maxlen: 24
                          24.56.140.0/24 maxlen: 24
                          24.56.184.0/22 maxlen: 24
                          24.75.228.0/22 maxlen: 24
                          24.75.240.0/22 maxlen: 24
                          24.236.56.0/22 maxlen: 24
                          66.78.200.0/21 maxlen: 24
                          66.78.232.0/22 maxlen: 24
                          66.78.242.0/23 maxlen: 24
                          66.78.244.0/23 maxlen: 24
                          66.78.250.0/23 maxlen: 24
                          66.78.252.0/24 maxlen: 24
                          66.78.253.0/24 maxlen: 24
                          67.217.0.0/22 maxlen: 24
                          96.8.34.0/24 maxlen: 24
                          96.8.36.0/22 maxlen: 24
                          96.8.40.0/22 maxlen: 24
                          96.8.46.0/23 maxlen: 24
                          208.115.66.0/24 maxlen: 24
                          208.115.76.0/23 maxlen: 24
                          208.115.81.0/24 maxlen: 24
                          208.115.82.0/24 maxlen: 24
                          208.115.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:82:92:1e:ec:7e:25:05:31:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fe8e2c2-2a61-44d9-95b7-64eb181032e3
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=01f1b313-14d8-44ef-b7d5-285276a6642b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3e:4b:21:71:c4:8c:30:f8:b1:37:10:f5:60:
                    f5:ea:06:ed:b1:04:35:23:50:28:08:7e:8e:3c:8e:
                    86:d9:53:91:6a:38:0d:49:d2:6d:39:9c:2c:0f:68:
                    e3:c1:c0:ba:9d:d2:05:e8:d4:88:43:fb:51:75:f6:
                    9f:c7:e4:cf:9d:f4:53:09:dc:87:c0:f1:7b:3f:c9:
                    8d:f6:11:b0:7a:e5:c8:ed:04:82:f1:85:58:b1:a4:
                    bc:e4:ab:62:f3:6a:37:35:10:86:28:8f:10:16:c6:
                    ca:40:68:c5:5b:a6:b1:29:67:42:8f:55:6e:0c:f8:
                    d1:e1:e7:61:83:52:b6:fb:59:7a:84:4a:19:c7:17:
                    5e:e6:6e:ca:fc:d5:06:45:ee:77:02:02:2f:4f:e0:
                    61:4b:47:b3:b7:d1:aa:a2:ff:6f:cd:d5:1a:fb:84:
                    92:4b:82:21:b6:7d:0b:16:f7:53:25:6b:74:89:50:
                    2e:37:22:83:43:b3:5a:4b:a6:6a:24:cd:a9:51:e4:
                    2b:e5:98:05:8b:5a:0d:29:9b:de:f9:33:68:81:34:
                    f1:f2:d3:2d:a1:96:12:77:a0:a3:cb:e7:4d:a8:0d:
                    7c:80:f7:c4:e3:07:ed:b4:d4:a7:07:9a:09:73:e3:
                    03:3a:46:cd:4e:65:26:3b:b7:11:91:7f:d6:a0:f9:
                    d0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:57:DB:85:8F:06:4E:2D:5F:52:A1:70:66:B0:E5:7A:5A:92:A9:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/e2c50a35-50bf-3b4f-aa6d-fddffbb62ae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.crl

            X509v3 Authority Key Identifier:
                keyid:77:DB:4F:76:3E:9F:44:8F:20:A3:2F:7B:8F:72:B7:F2:EC:20:0C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7fe8e2c2-2a61-44d9-95b7-64eb181032e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.56.133.0/24
                  24.56.136.0/24
                  24.56.140.0/24
                  24.56.184.0/22
                  24.75.228.0/22
                  24.75.240.0/22
                  24.236.56.0/22
                  66.78.200.0/21
                  66.78.232.0/22
                  66.78.242.0-66.78.245.255
                  66.78.250.0-66.78.253.255
                  67.217.0.0/22
                  96.8.34.0/24
                  96.8.36.0-96.8.43.255
                  96.8.46.0/23
                  208.115.66.0/24
                  208.115.76.0/23
                  208.115.81.0-208.115.82.255
                  208.115.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:3e:46:66:e2:a3:c2:3e:68:0f:66:f9:d8:f2:f5:41:3d:84:
         18:41:64:73:e4:73:ec:3d:9c:ad:76:43:03:86:e8:f4:14:b4:
         27:b0:6b:de:6f:62:2e:dd:68:2b:b3:2d:09:06:7e:c4:a4:8c:
         aa:68:48:7b:29:49:f7:66:59:73:e8:a2:12:26:aa:a4:c0:61:
         39:c6:68:4f:77:7a:c1:41:3f:29:f2:ab:12:bd:ea:91:f8:65:
         25:31:25:e3:7c:1c:e4:ff:2a:f1:84:bc:f3:73:8e:9c:99:d3:
         64:d7:32:b0:90:8e:23:fd:c3:fe:a4:e6:a1:ff:5f:fd:51:13:
         38:bd:56:d6:2d:c7:12:89:05:18:e5:a3:9d:c4:4e:ba:7f:0b:
         af:20:04:36:22:6b:df:a7:46:61:65:20:fe:26:ba:08:3e:b4:
         3d:69:5f:6d:52:44:79:95:14:78:40:3e:16:64:e8:48:a0:4e:
         3a:64:da:fc:0e:27:5b:d2:1b:ab:c6:27:fd:bd:7f:8b:82:3d:
         e9:cc:72:70:c1:71:1d:f1:90:62:e7:25:2d:8c:25:e9:5e:23:
         29:29:08:14:b1:b5:68:23:f4:26:90:0c:6b:ac:3e:51:b4:6d:
         12:0c:6f:86:50:9e:68:e1:d3:f2:df:ae:85:b7:6d:25:d9:a5:
         20:54:1a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:38 2025 by rpki-client