Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/24587719-f7eb-3cb8-a957-e23dd29ef600.roa
File:                     24587719-f7eb-3cb8-a957-e23dd29ef600.roa (raw, json)
Hash identifier:          K6BRrqfTaK7RB/kDoo5bouNa3+5CaugEp3m2zNb4nD4=
Subject key identifier:   F1:72:16:05:66:0B:EB:0E:82:ED:BF:6E:0D:CC:6B:AF:8A:EC:F5:74
Certificate issuer:       /CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
Certificate serial:       010D0C9F4328584B2CF6E89B2D82B7CA5A02A880
Authority key identifier: AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/24587719-f7eb-3cb8-a957-e23dd29ef600.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     400104
IP address blocks:        157.185.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:e8:9b:2d:82:b7:ca:5a:02:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=ad1d3886-4337-4248-b8ef-cf28a3b3b06c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:de:15:0d:6d:46:cb:c1:c3:db:f8:e9:6f:ab:
                    9a:68:77:90:65:c5:54:93:dc:3f:51:63:79:0f:e6:
                    14:8e:d8:b9:80:d4:99:c3:2d:31:0f:7d:bd:d7:eb:
                    60:53:b5:07:bb:5f:8e:2b:23:ff:e8:7c:10:38:69:
                    1d:64:1c:4f:7c:9e:fe:23:d0:8d:fb:82:6c:b9:75:
                    0c:e6:8d:46:9f:6d:e6:60:6e:88:3e:f0:8b:38:1d:
                    95:49:d8:67:2a:4c:44:8a:e4:2d:25:20:56:cc:04:
                    d6:6b:74:df:98:83:83:b8:85:63:70:b3:6d:23:62:
                    6c:f4:36:45:42:12:8a:d7:3a:ca:82:66:7d:f0:f9:
                    d9:3c:d5:88:ec:a8:1b:5d:e2:65:19:7e:8e:38:fc:
                    3d:5d:8d:c7:98:c1:df:e8:ef:bd:ad:4f:f7:c0:e6:
                    7b:69:d8:2a:69:29:26:73:4a:34:98:c9:14:f8:26:
                    f0:4b:68:6c:19:35:67:74:82:2c:00:30:7e:e3:1d:
                    c9:a8:97:f2:81:a1:1f:7d:5e:70:df:c9:1c:b6:d7:
                    fa:77:78:98:c4:a9:74:6a:16:dd:96:04:7e:a0:7f:
                    6b:90:5a:06:d2:36:97:ea:fb:e1:fb:c1:30:49:3b:
                    1f:d0:7f:9b:b6:98:d4:f4:95:9c:44:79:bf:3d:e0:
                    7c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:72:16:05:66:0B:EB:0E:82:ED:BF:6E:0D:CC:6B:AF:8A:EC:F5:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/24587719-f7eb-3cb8-a957-e23dd29ef600.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.crl

            X509v3 Authority Key Identifier:
                keyid:AF:ED:8A:96:66:97:F4:9A:C5:8D:85:16:46:CA:6D:5E:9B:09:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/41dbc0d7-4ecf-4b9b-9c7b-9200af902d1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.185.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:5e:2b:6c:9c:94:ad:97:c5:83:4f:0e:25:21:19:16:9c:e0:
         0b:9d:7f:0a:52:94:95:d1:33:22:4c:e3:ca:4b:39:a7:57:1c:
         61:28:dc:1d:f3:9d:47:53:08:f9:ec:7a:da:4c:1b:64:cc:87:
         5d:6b:25:eb:d8:43:34:fa:9e:04:37:5a:c5:d2:c0:2e:4c:d6:
         90:78:5c:89:cb:e3:a6:75:22:2f:94:eb:63:75:07:9f:9f:4a:
         0a:68:e0:07:99:db:e2:a2:24:17:58:2d:69:54:93:19:07:69:
         df:d2:b7:65:6a:10:b5:ec:c1:2d:d5:ac:26:ef:91:9a:28:d2:
         ae:2d:33:b9:d2:a1:cb:fd:f3:ee:3e:55:b2:9e:67:15:2b:64:
         69:e4:62:f3:51:09:e7:73:88:86:01:1a:2b:57:3b:b7:0e:c3:
         bf:e6:48:ee:84:e6:35:bc:f7:0d:8a:55:2c:33:0b:6b:84:d0:
         87:02:5c:e1:61:8d:9f:57:07:29:8c:3e:54:ed:39:ed:d2:24:
         6e:c8:9e:49:3e:6d:38:8d:9c:61:c4:84:92:5e:4a:92:37:24:
         2e:fe:14:94:e0:0a:75:78:d1:1f:84:42:d7:cb:80:06:31:26:
         f2:04:6f:d6:2c:28:f2:a2:0e:0e:31:6e:e0:24:d2:23:9b:8e:
         d4:d4:37:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:17:34 2025 by rpki-client