Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/74adc97d-2cf4-3c77-8150-5a6a4d46cb86.roa
File:                     74adc97d-2cf4-3c77-8150-5a6a4d46cb86.roa (raw, json)
Hash identifier:          dTaLAwgI5ksQMiI/bcOvQwN1Vjubsrszqqbi+JgBWr8=
Subject key identifier:   B9:BD:AA:F3:6E:08:60:A3:97:1A:BA:D2:FB:7C:D7:C6:70:41:D1:43
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F4328584B891772111EDF358A1ECE1680
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/74adc97d-2cf4-3c77-8150-5a6a4d46cb86.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     54032
IP address blocks:        72.233.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:72:11:1e:df:35:8a:1e:ce:16:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=382cbe9f-e88a-4ab6-8012-1f84bfe016ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:02:fc:22:c2:f1:65:fc:5f:1b:d8:e5:e9:eb:
                    dc:d6:53:63:00:d3:a3:34:16:1b:d9:88:0e:65:1e:
                    db:2a:a9:9b:3a:d6:2e:48:71:80:3f:32:5f:30:da:
                    74:2b:00:ab:75:be:82:e9:a7:81:fc:b0:f0:d6:a6:
                    5a:71:3d:da:01:5a:96:0e:84:05:52:b4:f3:8e:35:
                    b9:92:d6:ae:5d:53:9c:8b:9a:e7:74:45:98:d5:25:
                    9f:00:d9:46:6e:39:b9:6c:06:c5:b2:54:16:22:e8:
                    37:fd:90:73:26:34:6a:e0:0a:1d:e0:2a:ad:f4:e5:
                    72:d3:8a:dc:5a:e2:fe:91:9e:aa:16:ae:41:78:92:
                    56:ca:6c:73:aa:42:eb:60:b2:7f:28:29:b7:d2:bd:
                    6f:ed:70:b2:41:35:ad:35:a5:26:74:27:88:0b:76:
                    36:96:69:4e:f1:69:a0:5b:cf:c9:af:c3:79:6b:03:
                    7d:5e:e7:47:7b:10:63:57:8b:8d:27:92:fa:fb:84:
                    25:58:d6:ce:8d:3a:75:e0:ff:6a:7d:e7:96:9f:7b:
                    67:3f:ba:13:46:a1:09:0c:71:3f:7e:33:f3:1b:7d:
                    ee:e3:d7:c7:77:d0:99:65:9c:bf:4c:09:da:14:72:
                    fc:49:34:01:47:b1:76:68:2f:ee:ae:80:12:9e:fe:
                    ad:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:BD:AA:F3:6E:08:60:A3:97:1A:BA:D2:FB:7C:D7:C6:70:41:D1:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/74adc97d-2cf4-3c77-8150-5a6a4d46cb86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.233.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:ed:2a:6a:c1:dc:a2:17:8f:0f:a6:16:07:b7:91:fe:e6:3d:
         2c:1a:22:2f:73:0b:1b:01:6a:ed:4e:4b:c9:03:25:49:d8:a8:
         fe:49:6c:d9:59:d3:fd:bc:a4:40:f5:6b:9f:58:e4:ee:5f:82:
         89:d7:66:20:31:07:8a:c9:4f:55:50:f8:b0:f4:73:5b:47:40:
         84:e6:d8:dd:58:c4:e3:dd:50:15:b5:3d:a8:10:9e:fa:12:ab:
         ed:da:71:42:fd:59:65:65:1b:7e:36:e6:b6:79:83:e3:a5:7f:
         30:32:a7:1e:92:ab:e9:44:ef:51:aa:eb:8f:e5:d6:af:dc:a3:
         da:77:6b:70:c9:b7:11:78:52:db:0e:71:b2:10:43:fe:47:e9:
         b4:fb:74:4f:81:5e:20:97:7e:8e:b7:14:97:04:9a:2d:7a:3c:
         bf:6c:78:d3:ac:ce:f8:a8:33:cf:77:6d:51:11:33:ec:89:ad:
         31:b2:14:cd:53:d1:7c:fc:1a:90:d1:6c:3f:57:a1:7f:0e:91:
         13:81:0e:f5:dc:87:2b:47:8c:21:a7:5c:ce:ad:7e:ad:f2:af:
         83:f8:30:52:83:00:b3:8d:f5:b7:1b:a9:1d:b7:29:4d:3e:db:
         91:93:53:66:6e:6e:d0:90:50:e6:53:81:1e:41:f0:2b:ab:97:
         15:be:02:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 08:21:12 2025 by rpki-client