Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/1469698d-5721-3dc4-a71b-77c9af5be168.roa
File:                     1469698d-5721-3dc4-a71b-77c9af5be168.roa (raw, json)
Hash identifier:          O2K1QEDT/2Mu1mtP0hHSmipnwGEb0P+pem5iLzgE/Dg=
Subject key identifier:   9F:03:75:64:B4:41:99:E9:FB:10:32:9B:09:5D:BB:78:0C:B4:1F:E1
Certificate issuer:       /CN=24d5eca0-84f1-42a9-aba6-46b37f07aa4e
Certificate serial:       010D0C9F4328584B3DB6FD91C0BD53B2D4845B80
Authority key identifier: 8E:2C:29:0C:FF:3F:AD:6A:E0:5B:7B:CA:A0:F9:95:16:CC:E9:9E:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/1469698d-5721-3dc4-a71b-77c9af5be168.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     49683
IP address blocks:        172.82.64.0/24 maxlen: 24
                          172.82.65.0/24 maxlen: 24
                          172.82.66.0/24 maxlen: 24
                          172.82.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b6:fd:91:c0:bd:53:b2:d4:84:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24d5eca0-84f1-42a9-aba6-46b37f07aa4e
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=0dfc88f0-27df-48d7-80fa-cc686ba31d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:da:27:67:fc:8e:2b:cc:10:9c:a4:d4:7c:
                    b9:09:f5:04:fd:fd:21:c7:19:6b:05:09:eb:0a:d5:
                    d8:04:10:8f:c0:71:8a:73:f3:21:8b:73:0e:3f:d6:
                    a8:d8:aa:26:17:6b:e0:aa:81:64:ef:a8:c5:ec:8e:
                    d4:74:90:e6:75:5f:00:92:f3:7a:a6:de:35:11:cb:
                    84:99:49:92:ce:49:65:4f:f0:41:c8:60:ef:dc:a6:
                    ce:75:ce:0a:a6:61:7b:ff:36:e5:fd:fd:9b:6b:6b:
                    d2:fa:8f:f1:62:22:d9:e6:3f:7b:31:3e:92:09:f7:
                    04:13:8d:a0:c9:13:09:7b:51:42:cf:3c:33:86:83:
                    5a:73:1b:2c:6e:1b:17:1b:20:dc:77:55:56:77:aa:
                    f9:b4:58:f1:cc:59:53:96:73:67:04:a4:f5:14:46:
                    e3:6b:b7:84:ae:f3:0f:b2:82:51:3a:45:2f:73:5f:
                    e6:ab:d1:de:47:f1:e9:d6:89:22:5c:01:27:56:4c:
                    e3:2a:8c:19:72:f5:0e:16:0b:fb:45:81:f6:a1:67:
                    40:aa:5c:e7:3f:06:77:24:12:39:3e:cd:65:0a:76:
                    cc:ec:18:19:b7:e1:27:3b:b2:03:fb:46:d3:11:ca:
                    55:b1:b2:69:2c:f7:cc:9b:c6:c7:d8:ad:2e:fe:6e:
                    3d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:03:75:64:B4:41:99:E9:FB:10:32:9B:09:5D:BB:78:0C:B4:1F:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/1469698d-5721-3dc4-a71b-77c9af5be168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.crl

            X509v3 Authority Key Identifier:
                keyid:8E:2C:29:0C:FF:3F:AD:6A:E0:5B:7B:CA:A0:F9:95:16:CC:E9:9E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/24d5eca0-84f1-42a9-aba6-46b37f07aa4e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:9e:17:b0:f8:64:db:4e:b5:8b:c4:67:c5:26:a3:81:da:1b:
         0c:c0:e1:5f:bb:61:ee:a9:82:b1:96:11:87:c8:fe:7e:45:42:
         e3:0e:41:03:0b:e2:cf:54:c8:e0:6a:b0:a4:cf:97:d0:de:19:
         17:6b:a7:e1:bf:81:ee:35:21:bc:0a:30:56:36:7e:ed:8a:a9:
         f9:0f:39:5f:a6:e6:d5:56:a5:ad:27:3a:6c:af:fb:29:76:85:
         52:60:b3:0b:e4:6b:0d:1f:1c:93:96:e6:ed:63:be:cc:2d:1d:
         50:76:4d:e8:5b:3b:8c:3e:5f:8a:ab:64:31:aa:dd:2f:54:0d:
         16:7b:df:3f:cd:f6:73:ec:98:0f:84:b7:3d:4f:b6:c5:73:00:
         ba:9b:e6:ab:67:58:32:52:d5:b9:7a:8d:55:c0:4c:dc:35:27:
         19:88:8c:82:5f:f9:de:bb:b0:84:fd:ac:0a:da:e6:80:d4:a5:
         25:d7:aa:aa:e8:4c:44:b1:fe:fd:6c:d8:ce:93:3b:2c:7e:af:
         cd:54:df:39:60:1c:79:3c:ec:fd:5e:61:d7:bd:22:da:71:86:
         0c:b6:19:a4:61:53:80:4b:32:e1:21:ff:d3:4f:81:10:19:2c:
         3c:5d:a5:ad:01:4d:47:86:ee:e3:53:4f:97:d3:d6:b7:76:1a:
         ce:83:d8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:20:28 2025 by rpki-client