Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/d25798ca-b93e-3359-a73a-84a0a9595cda.roa
File:                     d25798ca-b93e-3359-a73a-84a0a9595cda.roa (raw, json)
Hash identifier:          KUXPw+aWA2r85qH81izLv5fTZVrTeCbWRurdGA9JK4Y=
Subject key identifier:   49:A2:B0:27:7B:0D:3E:1A:91:78:11:88:9F:BA:9B:EA:69:EE:B1:AC
Certificate issuer:       /CN=18a2f7cf-2c91-44c2-a109-17138ef87fcc
Certificate serial:       010D0C9F4328584AC2E1060E20D16FBDCBCAEE00
Authority key identifier: 66:06:53:1B:FE:2C:EE:A0:B5:C1:45:EB:7A:10:2B:28:AE:13:84:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/d25798ca-b93e-3359-a73a-84a0a9595cda.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     13781
IP address blocks:        162.222.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/18a2f7cf-2c91-44c2-a109-17138ef87fcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/18a2f7cf-2c91-44c2-a109-17138ef87fcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:06:0e:20:d1:6f:bd:cb:ca:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18a2f7cf-2c91-44c2-a109-17138ef87fcc
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=e76229d2-7ebf-4056-9c12-a86a76fb895b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9d:9a:11:fa:3f:2c:b9:96:f5:b0:dd:b1:4e:
                    53:79:04:2c:dd:46:7c:27:26:59:31:b7:41:54:62:
                    f0:a8:62:5d:d3:78:0b:e8:d2:9f:cd:bf:b5:87:fa:
                    28:06:fe:57:c1:24:44:a8:72:29:a9:90:0e:5d:d9:
                    a7:f6:4e:6d:1a:88:6b:30:ed:36:b9:a8:f4:52:4b:
                    84:e6:b2:ce:c6:12:21:4e:12:2f:c2:b4:cb:bf:2a:
                    1c:96:0b:3b:4d:f4:94:e4:ea:e5:b2:39:03:86:8d:
                    22:39:be:74:62:cd:d9:2d:e3:90:ab:c7:9c:1b:8f:
                    59:c5:cc:3c:bd:1b:c4:4d:73:cc:49:8a:82:7a:70:
                    50:d0:a2:0d:8f:14:a3:2f:ff:4e:b9:03:5f:c4:01:
                    3e:fc:29:6e:95:c7:73:d0:4a:7b:03:52:5b:93:e4:
                    a8:bc:37:6a:4c:d5:4b:80:e6:6c:4b:3b:5d:cd:3c:
                    3a:7f:e9:70:a7:e5:7f:a2:41:48:25:a2:5c:05:bf:
                    0b:e2:56:6f:fb:07:0f:55:32:d3:2a:39:2a:60:32:
                    77:71:af:0b:cb:e2:11:e5:db:77:60:00:85:68:4c:
                    0a:1e:58:a4:69:2a:1f:37:9d:22:8e:15:9a:23:64:
                    d9:a2:72:28:1b:2b:66:c6:55:9b:06:ad:b7:3a:25:
                    17:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A2:B0:27:7B:0D:3E:1A:91:78:11:88:9F:BA:9B:EA:69:EE:B1:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/d25798ca-b93e-3359-a73a-84a0a9595cda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc/18a2f7cf-2c91-44c2-a109-17138ef87fcc.crl

            X509v3 Authority Key Identifier:
                keyid:66:06:53:1B:FE:2C:EE:A0:B5:C1:45:EB:7A:10:2B:28:AE:13:84:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/18a2f7cf-2c91-44c2-a109-17138ef87fcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:49:f7:52:3c:c1:6e:32:d0:15:2b:ca:56:8c:d8:b6:8a:b4:
         da:27:22:77:1f:92:69:30:6d:32:18:12:5e:3a:e7:db:ca:fd:
         4b:ef:6b:d0:9f:72:73:85:bc:b0:fd:ed:b2:84:c5:f0:ae:23:
         c0:aa:e7:bc:78:c5:63:22:c5:c9:20:04:21:4f:a8:67:63:a1:
         fd:14:02:18:fb:5b:b8:71:7a:06:1d:bb:cc:5d:c2:3d:10:0a:
         6e:f8:d1:44:93:c2:06:44:a3:86:20:3e:fe:ce:19:a0:39:70:
         f1:19:11:92:65:72:02:9a:37:2a:5e:dd:da:09:13:24:a9:d8:
         9a:8b:7a:49:f7:6d:9c:ce:04:e1:1b:f0:1b:84:ac:c5:1b:f9:
         67:0a:8d:47:48:b5:4a:c8:03:72:56:73:c2:bf:5f:03:14:99:
         60:3c:0c:b8:24:67:8d:51:e8:c5:77:6f:08:0e:68:88:aa:02:
         e5:bf:36:0e:6e:53:09:cc:8a:9e:df:c5:ed:9e:20:27:45:c5:
         cd:6f:5e:52:4f:90:8e:4b:7f:e2:e3:7d:c7:b5:64:04:8f:44:
         84:bd:9b:0e:1d:39:4a:73:2b:bf:03:98:51:05:86:2d:e0:9a:
         a6:bd:13:27:c4:1f:7e:96:20:7f:1d:ec:cd:2e:fb:4c:f9:e4:
         71:95:fa:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 12:58:37 2025 by rpki-client