Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/14801496-2113-3ff3-8286-6329eebc5a7f.roa
File:                     14801496-2113-3ff3-8286-6329eebc5a7f.roa (raw, json)
Hash identifier:          hxsGvsQ9vQwujjyRZgFIwxKAz7RTdeZtHJrDaIPfaHE=
Subject key identifier:   AB:CF:ED:33:C6:16:DC:3F:65:84:C7:4D:F7:15:94:9D:DF:5C:7A:F4
Certificate issuer:       /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
Certificate serial:       010D0C9F4328584BA39D226336ACA7242B64EF40
Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/14801496-2113-3ff3-8286-6329eebc5a7f.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     16509
IP address blocks:        72.42.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9d:22:63:36:ac:a7:24:2b:64:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=2bba31aa-b7b1-48fe-a764-250aef6f5a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f1:f8:9f:51:f1:1a:3d:e9:7f:a9:6e:a7:2c:
                    16:d4:b7:d1:5a:1e:06:e5:e1:b6:32:67:52:a0:10:
                    b6:64:19:fc:6e:5b:72:0b:c4:3a:a2:b6:9c:83:76:
                    57:3e:57:67:d5:b3:9e:9b:e3:c5:3c:d5:42:eb:1c:
                    67:22:25:09:70:bf:b9:69:15:22:b1:76:9d:dc:e5:
                    de:98:b0:04:36:8b:a1:1a:c0:a0:e3:71:27:de:7b:
                    b7:27:0e:67:c3:e1:32:60:a1:c2:47:8e:a6:f0:74:
                    1b:01:a8:6a:d5:b2:86:ae:79:58:22:8e:59:73:47:
                    af:19:ab:f9:49:61:c1:74:7f:fd:f3:9a:85:47:59:
                    3f:d1:cf:87:d6:d7:0a:bd:8c:84:29:0f:31:a2:22:
                    4e:d2:ac:06:73:af:53:1f:cd:c5:ce:10:81:ec:ea:
                    a0:9c:27:2a:1e:5b:78:cc:6a:56:8f:49:bd:7f:05:
                    18:32:c1:34:bb:3b:ad:b9:bf:27:9f:5d:a4:02:ff:
                    27:f2:08:f2:d6:d8:aa:b6:13:b7:db:6c:28:13:00:
                    a0:55:97:0a:0b:2e:bc:3c:e9:f4:b2:ca:d4:36:0e:
                    e9:ee:ba:9c:ee:09:95:50:d1:7b:ee:81:b8:0c:dd:
                    db:b8:97:65:a5:2d:87:0c:10:d7:81:0d:10:85:3b:
                    d9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CF:ED:33:C6:16:DC:3F:65:84:C7:4D:F7:15:94:9D:DF:5C:7A:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/14801496-2113-3ff3-8286-6329eebc5a7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl

            X509v3 Authority Key Identifier:
                keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.42.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:dd:0b:21:1a:df:b1:17:04:bc:4d:90:19:ed:49:8c:9e:97:
         b8:a1:83:21:2a:78:ec:15:a8:7a:b3:43:65:80:01:ac:e5:d6:
         15:14:af:ba:f5:68:fd:41:a9:e0:4d:bc:0d:8b:bd:ce:59:9f:
         48:be:0f:0f:18:76:0a:e3:c9:aa:c0:a1:eb:78:74:cd:c9:b0:
         90:ec:d4:a3:d2:94:96:84:f5:02:bf:d2:31:38:1e:d4:f5:a5:
         f1:9d:4e:11:10:6e:68:38:c2:f3:92:95:0d:a5:c0:5b:df:01:
         50:51:96:1d:af:93:5e:3e:99:25:b2:c7:03:22:fb:08:fb:d7:
         30:79:86:00:80:5a:72:9e:3a:7c:2a:3a:9a:1a:ee:43:8c:31:
         ab:7f:62:f2:d1:69:f8:f2:99:f1:a4:f7:bb:59:30:22:94:c2:
         60:74:52:75:65:e6:ec:cb:fb:f0:57:75:be:07:9a:c7:7e:79:
         34:30:fd:c3:de:06:b3:fd:bc:1b:ac:41:2b:5a:1f:3e:ca:bb:
         b8:1b:7b:66:a0:c0:1d:0b:92:4e:a3:de:03:a3:15:d3:77:dc:
         05:88:2a:27:33:fd:76:18:8a:a9:0b:3a:ed:36:40:3f:78:77:
         3f:b2:f2:24:4e:8d:ca:15:61:bd:21:a9:41:c1:4e:49:37:2f:
         ba:0b:87:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:37 2025 by rpki-client