Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/72581066-de11-3015-9c34-40a61ea60fa7.roa
File:                     72581066-de11-3015-9c34-40a61ea60fa7.roa (raw, json)
Hash identifier:          sqnyy5pNxpIhrMTRniJ9/yPhRweDA5PMpeCDq0HEQlE=
Subject key identifier:   DB:30:75:E5:B6:28:11:1C:45:38:CF:41:42:CA:D1:B6:16:C3:89:4D
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584B62021198F26DD04A7D173880
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/72581066-de11-3015-9c34-40a61ea60fa7.roa
Signing time:             Thu 02 Oct 2025 01:00:31 +0000
ROA not before:           Thu 02 Oct 2025 01:00:31 +0000
ROA not after:            Wed 31 Dec 2025 02:00:31 +0000
asID:                     6079
IP address blocks:        24.35.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:62:02:11:98:f2:6d:d0:4a:7d:17:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Oct  2 01:00:31 2025 GMT
            Not After : Dec 31 02:00:31 2025 GMT
        Subject: CN=0beb36b9-fc17-4e74-9b53-571dddba9087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8e:a4:be:9d:21:0a:50:e4:56:37:51:28:bc:
                    10:ac:ba:36:16:d6:69:0f:63:49:e2:ea:07:b0:ab:
                    f9:36:b9:d4:05:be:a7:98:cd:78:20:18:1d:92:e8:
                    ed:9b:48:5e:85:c1:12:4c:19:4e:6f:a8:2a:f1:19:
                    02:00:2a:f7:55:18:f6:e4:13:49:3c:d8:b9:84:51:
                    f2:ad:ef:5f:61:33:98:30:3c:bd:51:9c:64:db:06:
                    61:cb:47:98:aa:3c:b1:c4:12:4d:67:5d:2a:ff:0d:
                    98:25:5c:68:03:b7:ec:03:c5:6a:3a:de:4d:8d:9f:
                    e6:ea:d2:66:64:d9:d2:ec:b2:d3:fb:5f:2d:78:e5:
                    86:1c:b1:7d:14:53:a1:40:cc:61:5d:3d:7c:71:3a:
                    4b:9e:fc:9c:d6:a9:11:ce:94:d0:d6:ab:84:8a:b2:
                    87:72:70:b5:c2:28:cf:e2:0f:39:b1:18:20:4e:b5:
                    ef:06:d6:a1:0c:75:f8:16:9d:8c:af:56:46:7e:7d:
                    da:8a:6c:b9:fe:07:9b:46:33:bc:35:34:92:eb:69:
                    ae:0b:21:9c:ba:e6:fc:5c:58:7e:c5:17:34:63:e5:
                    5f:83:c8:90:34:0d:84:f4:d7:64:54:21:f4:cf:fd:
                    70:71:aa:1e:6c:9a:10:88:97:f4:3d:ce:6c:36:c1:
                    b7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:30:75:E5:B6:28:11:1C:45:38:CF:41:42:CA:D1:B6:16:C3:89:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/72581066-de11-3015-9c34-40a61ea60fa7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.35.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:ab:97:6f:8d:0b:39:07:78:81:3c:84:00:57:08:f6:6c:c5:
         d6:33:9d:d8:8f:b0:57:40:d4:14:3e:71:57:b2:6b:38:5d:ec:
         0b:c3:2e:dd:5d:51:62:55:ac:e9:bf:d4:ea:75:54:0c:18:7a:
         3a:58:46:43:58:cd:28:45:6c:31:1b:91:3f:1f:a4:bb:43:14:
         34:0c:07:6e:01:09:3c:f0:b9:ea:55:8c:d0:3b:4e:6c:5d:c1:
         c4:1d:89:db:d2:26:ef:43:f8:54:66:fd:da:50:71:50:d8:58:
         de:82:c2:b7:30:35:84:61:0c:d7:e1:cd:5b:f6:3c:2c:33:8f:
         86:3b:15:78:a1:08:a6:58:05:ee:56:73:b8:ab:bc:ad:12:e2:
         3b:66:41:e0:4d:59:62:f1:40:32:78:88:e0:1b:39:a3:89:06:
         bf:a0:43:f9:53:83:02:80:9b:64:52:f2:7a:ba:81:a0:90:c5:
         e7:dd:d9:f0:25:21:99:b3:1c:ad:b3:33:5f:f7:3e:8b:28:78:
         64:29:cd:d7:f5:29:bd:54:9d:fe:7d:e5:7b:fa:30:94:d7:f5:
         4c:06:48:74:dd:6c:32:41:eb:93:a1:75:b1:f0:d6:09:7f:b5:
         50:4b:02:93:b6:5f:4b:fa:98:aa:ba:4c:27:3f:15:b1:dc:48:
         e7:e1:8f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:16:23 2025 by rpki-client