Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/65743670-00eb-3d49-bc50-633e73b6f7d1.roa
File:                     65743670-00eb-3d49-bc50-633e73b6f7d1.roa (raw, json)
Hash identifier:          z2ZhF4YaOyLqFOx5K8ZDsBT3ORuiqHFdXqN00+uPzew=
Subject key identifier:   6C:A2:09:CC:BD:80:F0:05:72:ED:07:A1:E4:27:A2:82:61:56:04:BE
Certificate issuer:       /CN=02ad5a58-3adf-41cb-9598-b3260591398c
Certificate serial:       010D0C9F4328584AB220BC9DC6D61DD7E831E080
Authority key identifier: 28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/65743670-00eb-3d49-bc50-633e73b6f7d1.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     12097
IP address blocks:        24.140.24.0/21 maxlen: 21
                          24.140.32.0/21 maxlen: 21
                          24.140.40.0/21 maxlen: 21
                          24.140.48.0/20 maxlen: 20
                          24.140.64.0/21 maxlen: 21
                          24.140.72.0/21 maxlen: 21
                          24.140.80.0/21 maxlen: 21
                          24.140.88.0/21 maxlen: 21
                          24.140.96.0/21 maxlen: 21
                          24.140.104.0/21 maxlen: 21
                          24.140.112.0/21 maxlen: 21
                          24.140.120.0/21 maxlen: 21
                          24.140.128.0/21 maxlen: 21
                          24.140.144.0/21 maxlen: 21
                          24.140.152.0/21 maxlen: 21
                          24.140.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:bc:9d:c6:d6:1d:d7:e8:31:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ad5a58-3adf-41cb-9598-b3260591398c
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=781e6a16-eed1-425a-b078-a5224511c53b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ad:9a:55:68:79:d9:ec:73:5a:32:0b:2e:fe:
                    96:5d:fe:0a:b1:26:06:ae:f9:d3:34:cb:c9:75:c0:
                    4a:10:64:04:df:9e:73:04:73:9a:2d:4b:6c:aa:e3:
                    4e:0c:d5:88:f3:d2:0d:c8:58:c1:67:99:6a:18:05:
                    46:ca:a5:7e:b2:fa:bb:98:c1:ce:c8:e0:f7:2b:76:
                    29:4d:30:ae:de:b8:a0:b5:06:f4:22:aa:ed:29:d9:
                    9d:98:52:60:b4:83:4a:2e:ab:c6:c7:e5:a4:ef:ec:
                    28:c2:55:89:be:54:83:e2:bb:1c:c2:dc:2e:f0:2b:
                    cc:52:c1:11:5f:9c:9c:de:d3:dd:91:ef:df:2c:9d:
                    d5:51:cb:46:0d:1f:35:97:c9:79:3e:2e:b3:b3:67:
                    b6:ab:49:34:44:33:11:d4:8f:4d:1e:46:6d:39:9a:
                    01:2b:d5:b9:c1:42:48:bb:30:b5:85:9b:40:a2:d5:
                    9a:95:35:f9:c8:5b:ed:a8:73:7e:f9:8e:d3:a4:fb:
                    e0:fe:4f:3f:00:af:0d:92:5f:57:44:d1:76:46:ae:
                    77:b8:ef:95:c8:4c:24:17:a8:92:6b:ed:53:83:34:
                    7d:d2:38:6c:8c:61:44:e8:01:7b:e9:e7:db:74:5b:
                    7d:7d:ee:dc:f8:a4:ea:84:86:1a:f0:30:65:15:8d:
                    d3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:A2:09:CC:BD:80:F0:05:72:ED:07:A1:E4:27:A2:82:61:56:04:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/65743670-00eb-3d49-bc50-633e73b6f7d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c/02ad5a58-3adf-41cb-9598-b3260591398c.crl

            X509v3 Authority Key Identifier:
                keyid:28:D5:F6:E6:7B:EE:87:BE:AD:EE:45:FF:5D:19:56:7C:5A:31:45:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/02ad5a58-3adf-41cb-9598-b3260591398c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.140.24.0-24.140.135.255
                  24.140.144.0/20
                  24.140.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:00:f4:98:8e:de:8d:d7:15:0f:92:55:65:86:c9:eb:c2:6b:
         8c:5e:1e:96:47:7b:dd:45:da:79:0f:a0:fe:a0:c9:03:38:77:
         21:05:3f:6e:64:e4:74:90:12:57:94:3b:6f:ce:11:21:8e:8a:
         75:a1:70:dd:5b:21:67:9a:31:c2:30:9a:08:84:9d:ea:e5:6a:
         8d:de:1c:c0:ef:1e:18:d5:c4:9b:c8:23:b6:81:93:66:48:9c:
         83:c1:4b:8c:fc:f0:c1:db:f6:1c:d3:7d:2d:18:c9:16:5d:10:
         fe:15:1b:81:d3:22:48:e4:a0:c0:02:d5:ec:af:f5:2d:5b:6b:
         31:44:1d:27:29:07:92:cf:3a:67:58:5b:89:33:58:83:12:f7:
         bd:5b:19:74:c7:bb:85:37:5f:ee:61:d3:7d:e2:3b:09:9c:e2:
         1b:c3:ae:59:38:41:04:0c:05:75:0e:a2:9f:83:b5:9d:91:90:
         de:be:b8:61:76:a7:43:9a:a6:ad:a3:cf:54:75:b7:22:fb:54:
         60:3b:a2:29:13:35:8b:73:59:cf:6d:b4:31:62:03:ca:d6:78:
         dd:23:24:ca:44:24:bf:b1:f2:bc:75:80:a9:5e:17:d8:4f:6b:
         fe:ca:a4:e2:03:bc:de:5a:71:34:9a:e7:9b:be:ed:31:e1:67:
         dd:90:37:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:07:10 2025 by rpki-client