Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/9198844d-d006-3e70-be28-eb806d092492.roa
File:                     9198844d-d006-3e70-be28-eb806d092492.roa (raw, json)
Hash identifier:          CMGTAVYpJJWtL/rgyXpXoWDVl30zbdPTog2+boMaYF0=
Subject key identifier:   F8:E2:61:E1:AC:94:B0:54:40:B5:F7:06:9C:D9:0A:13:83:15:5B:CE
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F4328584BA39CFACB889F6E56C634BF40
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/9198844d-d006-3e70-be28-eb806d092492.roa
Signing time:             Sat 25 Oct 2025 13:00:39 +0000
ROA not before:           Sat 25 Oct 2025 13:00:39 +0000
ROA not after:            Fri 23 Jan 2026 14:00:39 +0000
asID:                     11260
IP address blocks:        24.224.128.0/17 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a3:9c:fa:cb:88:9f:6e:56:c6:34:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: Oct 25 13:00:39 2025 GMT
            Not After : Jan 23 14:00:39 2026 GMT
        Subject: CN=9d0b3dd4-670a-447a-b5f3-f224398fdb0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c7:c6:6b:58:2d:dd:e0:4d:09:ef:04:80:79:
                    8a:ed:67:d9:7f:1f:77:2f:2c:8c:e9:ff:96:b7:cc:
                    1d:e7:06:d4:6f:68:34:44:4a:8d:a2:e8:c0:c1:69:
                    f3:6b:9f:9e:4f:6f:26:2b:a9:5e:75:78:29:fa:ae:
                    92:27:0d:95:ea:a0:4b:82:ac:d3:04:6d:80:be:a0:
                    94:e1:03:d9:c1:41:39:a0:e0:3f:6f:5d:3a:b0:e8:
                    11:58:1f:2c:06:c6:ef:d3:5a:dd:54:de:9d:8e:ce:
                    66:8a:80:2b:64:b6:d0:9a:60:62:95:28:b9:6b:5f:
                    e9:99:d2:3b:27:6f:63:19:e9:d4:b1:d3:b3:97:51:
                    93:a0:35:30:4e:71:f7:8f:b1:ad:e5:b6:bf:d1:7c:
                    06:0c:55:a5:47:f1:63:9c:7c:ee:bd:9b:4c:53:78:
                    a7:35:24:ff:ad:df:9c:1a:55:82:e2:7a:65:9b:e4:
                    7f:d8:6e:88:64:46:49:75:ff:df:dd:22:6a:bf:81:
                    4e:fe:d8:84:9c:64:2b:80:4d:6f:b8:56:5f:28:83:
                    20:cd:ed:1b:16:f1:db:2a:6f:14:52:0d:c3:a1:d7:
                    1a:ec:17:f5:7a:7e:29:4e:2d:cc:f5:34:07:31:bc:
                    7d:2d:f4:74:70:55:f7:26:b7:c4:75:42:64:29:a1:
                    db:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E2:61:E1:AC:94:B0:54:40:B5:F7:06:9C:D9:0A:13:83:15:5B:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/9198844d-d006-3e70-be28-eb806d092492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.224.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:7b:8a:9d:2e:04:76:2c:5d:a7:bc:17:b6:74:60:92:5b:92:
         bc:7e:20:d0:c0:75:48:d1:71:5c:dc:1c:09:3d:de:1c:50:5d:
         28:87:19:bc:07:18:05:be:43:ac:6d:fd:68:e7:28:45:98:b0:
         ae:79:0b:e8:ba:71:e2:20:87:89:f4:53:e3:7e:6e:69:f2:c0:
         30:cb:f4:ba:69:51:82:65:b3:9c:2e:d1:ac:0d:3b:e9:f6:5c:
         0d:2c:36:9e:18:2f:99:1e:b8:00:7d:03:b7:7f:c0:86:3d:7b:
         29:6e:d2:4f:33:5b:c5:34:7d:6e:20:aa:87:e8:56:9b:54:53:
         29:be:6b:2d:1e:36:8d:c5:ae:74:d6:a4:ab:ce:6a:5c:02:69:
         27:0d:d0:0e:16:6d:a7:43:95:c3:80:37:46:d1:f0:69:55:79:
         23:aa:12:d9:97:e4:9f:ad:ed:e9:f8:5c:fd:a6:f8:e0:b6:75:
         a3:1e:0f:d7:60:91:0c:d5:74:f7:9b:8d:66:ff:33:d0:ee:37:
         e8:f4:50:26:dc:1b:09:47:3a:23:7a:4e:ce:f0:24:6c:b1:a1:
         0f:fb:ba:42:06:1f:19:cb:47:49:8f:7c:d7:30:53:34:45:1f:
         40:63:95:cb:07:03:29:af:19:10:a5:b8:95:35:81:17:13:1f:
         c3:9c:59:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:42:32 2025 by rpki-client