Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/72e8c9b3-8829-39d0-be01-d850fdfe7dcb.roa
File:                     72e8c9b3-8829-39d0-be01-d850fdfe7dcb.roa (raw, json)
Hash identifier:          y/BjjR4qPtziRaW8mtL1yyAK76i1E5cA9EFUQXaSO4c=
Subject key identifier:   A6:2A:CA:38:36:83:21:F3:90:91:B5:E0:A3:5D:BE:8F:A9:05:80:2D
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584B68FC9B68AB90B53B3FB28500
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/72e8c9b3-8829-39d0-be01-d850fdfe7dcb.roa
Signing time:             Sat 04 Oct 2025 13:00:40 +0000
ROA not before:           Sat 04 Oct 2025 13:00:40 +0000
ROA not after:            Fri 02 Jan 2026 14:00:40 +0000
asID:                     31898
IP address blocks:        199.36.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:68:fc:9b:68:ab:90:b5:3b:3f:b2:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Oct  4 13:00:40 2025 GMT
            Not After : Jan  2 14:00:40 2026 GMT
        Subject: CN=d502d076-148c-45f0-9abb-f18a26e2e7fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:69:b9:72:c9:67:3e:fd:f5:f5:d9:0f:93:39:
                    98:26:5c:f7:45:db:1c:c3:39:2e:24:dc:7c:71:45:
                    e0:b3:e4:60:75:94:15:50:cf:99:2b:aa:b1:6f:2e:
                    33:d0:7e:03:25:35:32:9a:fe:4e:dc:58:c9:d0:07:
                    53:28:3e:22:99:b4:24:7a:cf:d3:87:46:32:65:6f:
                    c6:8b:15:c4:40:b8:74:de:34:03:60:1f:f9:97:18:
                    0b:cb:0b:6d:bb:c4:d0:ca:f2:84:c2:b3:af:4a:de:
                    90:c0:59:1f:28:87:ee:45:ff:3c:56:09:7d:c8:22:
                    f3:ac:6d:f6:89:13:a9:d4:11:66:3a:40:9e:aa:72:
                    fc:fa:e9:85:e2:c4:99:29:a7:38:ef:b8:f3:53:5b:
                    0a:5c:09:b7:96:da:8d:c1:89:a1:95:95:aa:a1:ee:
                    0d:71:2a:b9:24:ed:06:6c:a7:a8:1b:56:e3:3f:f0:
                    5a:e3:0e:32:61:87:7e:4e:95:bc:20:c1:66:e5:91:
                    c4:be:b8:c3:a4:ee:91:f5:3b:38:65:ef:f5:31:fb:
                    6a:86:27:ae:b3:36:31:71:e8:f5:99:fb:54:0a:5d:
                    66:d0:e7:e2:19:81:0a:33:3e:3c:f9:1d:da:65:57:
                    bd:0b:b1:32:9e:31:51:9f:12:88:0e:e9:6b:3b:72:
                    0e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2A:CA:38:36:83:21:F3:90:91:B5:E0:A3:5D:BE:8F:A9:05:80:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/72e8c9b3-8829-39d0-be01-d850fdfe7dcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:9d:ba:7a:2d:53:2d:6d:62:ce:0f:00:c4:49:20:ef:74:d9:
         b2:e5:90:10:44:4c:3a:50:ce:24:0e:46:03:df:ed:bc:35:51:
         cd:d9:1d:cb:cf:c9:1d:96:7b:82:b4:65:a6:74:28:5a:a6:bc:
         e6:31:d1:a0:15:25:13:85:2b:d5:a5:54:03:2e:20:b8:33:3c:
         62:0c:10:3e:a2:83:49:f3:d8:ca:57:85:fa:a1:38:d8:7d:d3:
         2f:5e:60:03:31:0c:ef:26:e1:62:4c:89:56:0a:71:92:01:bf:
         54:93:6c:f8:0c:7f:6e:4c:99:af:ab:ff:cc:ec:ff:41:74:bb:
         60:2e:64:71:09:31:2b:dc:b1:06:4d:f7:d8:ee:f6:64:fc:08:
         45:4e:bc:ee:56:95:7b:d3:cb:47:09:10:7a:9b:ae:45:24:98:
         aa:c6:db:0b:a5:71:e7:0f:d0:28:eb:0b:e5:e1:7c:e4:df:b2:
         d3:df:0e:1b:a2:42:b1:4e:5f:1b:1d:af:0e:3b:d6:20:24:0a:
         23:1a:94:c5:fc:93:fa:ab:bd:69:06:db:dc:53:41:7c:38:c9:
         82:96:4e:13:bb:72:c7:4f:da:c8:51:85:16:56:dd:a0:57:a9:
         79:43:10:eb:e0:01:b2:b2:b7:78:99:e9:a9:8d:3f:22:bc:0b:
         17:8e:22:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:05:33 2025 by rpki-client