Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/44f994d4-9182-3c13-b44b-65aacfd521c3.roa
File:                     44f994d4-9182-3c13-b44b-65aacfd521c3.roa (raw, json)
Hash identifier:          6WI9S3BObph1lRjXmYo2LfI3X0EYg8UNcPv10Y34k3U=
Subject key identifier:   B0:5B:32:1F:DA:2E:2E:D8:B5:0E:D0:15:C1:CA:52:83:FE:F4:31:F2
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584AADF111E052702FC8F9C25A80
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/44f994d4-9182-3c13-b44b-65aacfd521c3.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     13639
IP address blocks:        24.157.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:11:e0:52:70:2f:c8:f9:c2:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=cd79c75b-df99-4a33-b08b-af6abc4490b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:81:0b:7b:62:d0:43:18:78:db:f5:cb:45:68:
                    15:3b:e1:c1:3d:e0:98:f7:c1:c2:e8:86:93:d6:18:
                    a0:4a:7b:12:0d:a3:cb:3e:10:30:a0:2e:2f:3c:2c:
                    c9:32:33:f0:ff:d0:41:da:5b:74:c9:bc:35:a3:ba:
                    e2:69:ee:ce:74:ba:4a:97:0d:1e:3b:85:f2:4a:7d:
                    c2:88:6a:66:f7:84:14:e4:b0:49:7c:0a:50:53:d5:
                    be:fd:2b:7f:9e:9d:44:a6:c1:fb:ea:b7:5d:de:6c:
                    b3:dc:fe:5e:d3:72:64:03:45:a2:39:99:9c:1d:ba:
                    fb:dc:5f:31:ea:f6:cc:31:5c:d9:00:f7:05:11:ab:
                    cb:17:fb:40:af:37:3c:07:3d:37:e0:73:d6:7b:17:
                    e6:88:18:99:6d:34:ca:4f:4e:be:5d:c9:b6:bf:a0:
                    7c:a8:2d:98:33:e7:57:0b:12:6b:84:01:0e:a1:22:
                    ad:32:78:46:e5:2f:e6:54:73:b7:06:e9:5c:d4:67:
                    7f:12:de:16:12:55:e0:27:22:cd:c9:31:02:01:cf:
                    23:0c:25:c1:dc:40:62:12:1a:dd:c0:d6:97:64:4e:
                    1e:3b:ba:e0:d7:19:e9:48:56:74:7b:17:6b:8b:c4:
                    7f:dd:e5:d7:0f:bc:b9:79:14:e3:10:3f:67:27:86:
                    23:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5B:32:1F:DA:2E:2E:D8:B5:0E:D0:15:C1:CA:52:83:FE:F4:31:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/44f994d4-9182-3c13-b44b-65aacfd521c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.157.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:b4:ef:19:63:03:2e:8f:a3:22:29:ec:36:4d:a0:b3:2c:5e:
         d6:2a:e4:e6:b9:6f:75:27:9e:31:7d:18:f8:9b:bc:ce:4e:68:
         a7:02:3d:2f:1c:c2:08:05:5e:e6:9b:57:22:92:26:74:0e:d5:
         08:b2:86:ad:c9:1a:7d:ab:05:6c:ee:99:15:c3:2c:87:c5:ad:
         14:2e:ff:14:e4:98:9b:7f:ab:65:36:b3:0c:44:29:42:e1:ba:
         65:1a:f1:bb:31:27:cf:23:51:43:c2:42:79:77:b2:61:26:49:
         e3:0d:69:26:d9:ee:13:1d:3b:3c:34:87:2c:af:65:d2:a8:b9:
         2a:95:6a:af:a8:a3:cd:4b:3c:a8:34:73:41:85:35:f1:f1:c5:
         55:d9:aa:33:d2:20:38:55:c5:fa:90:83:23:cf:51:82:4b:8b:
         c6:02:72:4b:df:71:38:60:e1:56:e0:d3:38:17:ce:ac:39:72:
         4c:36:28:c4:d1:1a:a5:34:76:6c:56:0b:0c:8a:4c:38:7b:6e:
         3f:25:a7:87:1f:dd:3b:83:6a:c8:69:50:f6:57:07:7a:e6:7e:
         dd:2f:7b:bf:78:16:a9:ea:a8:04:2a:52:3e:4c:5b:80:b5:d8:
         c1:bd:23:18:16:5c:be:9d:38:41:f1:39:57:95:9b:ab:2d:9a:
         87:8c:25:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:01:20 2025 by rpki-client