Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb344849-76d8-36a8-801c-c856e304a3a6.roa
File:                     bb344849-76d8-36a8-801c-c856e304a3a6.roa (raw, json)
Hash identifier:          7TlEiVxxJWu86cx/SxKrz7I2T5c2ijwgQy+Ts2yM3F0=
Subject key identifier:   4A:3C:67:7B:C1:9D:CE:11:3C:CB:FA:AB:6D:D5:B4:B5:76:4E:56:53
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584A9D30E5CBA7FF2B82E3C17D80
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb344849-76d8-36a8-801c-c856e304a3a6.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     33141
IP address blocks:        24.38.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:e5:cb:a7:ff:2b:82:e3:c1:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=2f55768d-0030-4a9d-a401-eb2511da187a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b4:14:d3:90:29:06:9e:c6:19:27:a5:ac:97:
                    a9:1d:bf:a0:80:38:b6:aa:70:98:cb:82:ab:65:a1:
                    3b:d9:31:3d:38:c6:c8:db:97:c5:4a:b1:d8:bc:82:
                    ad:e8:c5:d6:29:74:80:85:5c:44:5a:2d:04:a3:c8:
                    15:2b:8e:a2:0a:b1:01:cc:07:c9:fc:a6:5d:74:cb:
                    e9:ef:4f:40:a6:33:9c:f8:84:17:42:00:59:d4:3f:
                    09:5f:a0:2a:7e:3b:02:98:21:93:c5:26:67:f7:77:
                    b7:eb:c8:d7:a0:a8:79:4b:93:14:d5:93:a0:fa:65:
                    24:ed:96:3a:93:72:da:93:45:1a:2a:82:f1:76:a3:
                    42:e4:48:0b:4e:f4:44:8c:80:52:c8:27:fd:12:3b:
                    72:b1:05:3c:fa:2a:80:0e:fd:11:6b:7a:a0:d2:1a:
                    55:b8:d8:9d:e1:6b:5e:84:70:0e:f6:12:1d:f4:f7:
                    15:3a:2d:dc:3b:de:e8:e5:dc:47:f4:a9:42:00:5f:
                    d0:6e:fc:d6:bf:59:7f:f4:db:ed:bd:59:d9:c2:3c:
                    76:bb:d1:03:99:56:63:6a:fc:a2:64:da:92:ad:e9:
                    f6:3c:d0:d5:1a:cd:6a:96:e3:54:29:99:ba:c5:b0:
                    19:85:4a:a3:26:86:fe:47:e7:f1:f7:a9:69:35:0b:
                    d6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3C:67:7B:C1:9D:CE:11:3C:CB:FA:AB:6D:D5:B4:B5:76:4E:56:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/bb344849-76d8-36a8-801c-c856e304a3a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.38.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:ce:0c:91:81:ef:12:8b:4f:02:82:d7:80:07:7d:b7:2f:50:
         c7:23:a4:23:2d:55:68:da:31:c1:c5:6f:7f:da:4e:c4:f3:78:
         85:d0:a5:ad:ed:86:50:42:f5:37:ec:27:63:ee:30:18:79:1f:
         9a:a0:24:c8:23:2f:86:21:6f:59:ec:fb:f7:77:10:46:49:49:
         c9:50:27:64:12:77:57:07:fc:d2:4c:1e:82:dd:66:f9:72:ab:
         2d:7f:3e:57:78:80:27:ac:0b:79:6e:ad:df:0c:eb:84:7a:0c:
         d1:10:c7:51:b4:e6:74:e5:f9:e7:4a:f3:48:a8:01:f4:bc:af:
         3c:fb:dd:30:cb:3c:f2:52:6a:c8:65:e3:64:12:38:2e:a5:11:
         26:af:56:b1:5c:30:fb:d4:91:2d:0d:eb:d4:18:04:ae:9c:db:
         c7:75:44:7b:35:04:fc:c8:d7:5a:f1:54:eb:78:30:7f:33:49:
         59:74:45:8c:89:dc:e7:ce:77:0d:61:ed:6d:db:9f:fa:7d:ba:
         c5:ea:ed:d3:a5:1b:5a:7f:2f:6f:5e:93:52:60:c6:37:54:41:
         e0:99:d3:45:22:be:b0:37:91:8a:7d:ce:ce:a3:c3:1f:06:0e:
         bd:d0:1a:08:35:e4:ba:1c:fa:50:7e:b6:23:c5:84:aa:0f:18:
         46:98:89:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:06:00 2025 by rpki-client