Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/6ad53a49-6abe-3d44-806f-3164436f3834.roa
File:                     6ad53a49-6abe-3d44-806f-3164436f3834.roa (raw, json)
Hash identifier:          xU3LfGqCOCGWGrKIh1g/843ILaSUo5QKfsu0+eYlqQM=
Subject key identifier:   00:9B:09:51:DC:3B:09:0D:78:1C:D8:F8:6B:B9:69:22:68:42:B9:0F
Certificate issuer:       /CN=750923cb-8ed4-4954-b4bb-8250cc11c580
Certificate serial:       010D0C9F4328584BB45D34F8750986F5A85CEE80
Authority key identifier: 57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/6ad53a49-6abe-3d44-806f-3164436f3834.roa
Signing time:             Fri 31 Oct 2025 13:00:39 +0000
ROA not before:           Fri 31 Oct 2025 13:00:39 +0000
ROA not after:            Thu 29 Jan 2026 14:00:39 +0000
asID:                     33182
IP address blocks:        72.29.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b4:5d:34:f8:75:09:86:f5:a8:5c:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750923cb-8ed4-4954-b4bb-8250cc11c580
        Validity
            Not Before: Oct 31 13:00:39 2025 GMT
            Not After : Jan 29 14:00:39 2026 GMT
        Subject: CN=4e501cce-340d-4831-98b9-6d1ba7c5436c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7d:e3:99:df:a1:65:c6:af:f0:c2:e3:c3:b2:
                    9a:c3:50:37:be:20:9a:07:3a:29:9d:f8:76:e5:12:
                    d5:27:e4:6a:66:04:3f:b2:8b:eb:32:b8:00:40:8e:
                    9d:18:12:cc:4f:54:27:cd:68:7b:47:7c:69:73:6e:
                    1f:96:35:08:b4:5d:ad:c5:52:2a:da:6c:75:50:0d:
                    d9:28:52:40:94:93:25:e8:a7:2c:a4:a3:9f:3a:0d:
                    5b:1d:1f:48:04:87:8f:c3:20:44:cf:34:6b:5e:44:
                    5f:02:6c:c6:16:c7:76:8e:eb:e0:47:6b:e1:f0:24:
                    48:05:86:4f:b1:fe:ad:e7:ed:bf:59:d3:ef:b1:cb:
                    ca:a6:48:29:3f:89:fd:e8:90:43:7f:f7:11:0c:94:
                    7d:cc:c1:05:3f:b5:35:41:8a:28:2f:09:57:06:95:
                    9d:07:2a:b0:7e:e0:42:bb:d4:75:4c:e9:c6:84:cd:
                    94:f5:3c:a7:0b:47:53:17:ef:09:da:8f:2e:02:c9:
                    3c:55:95:7d:96:f7:83:3e:f0:30:89:b2:1d:08:b5:
                    6f:0b:72:88:4a:21:1a:ed:81:e1:e3:09:29:52:f7:
                    d3:6f:f0:e0:b8:10:af:cc:50:92:33:27:a5:35:3e:
                    d0:d7:c1:1c:e2:a3:02:2b:58:0b:60:cf:36:fb:d9:
                    9b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:9B:09:51:DC:3B:09:0D:78:1C:D8:F8:6B:B9:69:22:68:42:B9:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/6ad53a49-6abe-3d44-806f-3164436f3834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl

            X509v3 Authority Key Identifier:
                keyid:57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.29.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:a6:77:93:30:11:15:55:e9:9d:75:bd:19:0a:6d:98:ef:f0:
         ca:c7:df:ad:8b:1c:33:3c:3f:3a:65:3d:6b:a4:1e:83:1a:df:
         a9:e2:a1:a3:77:50:79:6d:90:1b:67:ab:fa:41:56:3f:89:05:
         a7:28:9d:01:a5:1c:9d:91:b5:ac:17:28:4b:f2:19:db:e9:a1:
         af:0d:0e:09:ac:e6:4c:5b:fd:d7:63:db:8b:06:f8:a4:b4:be:
         a7:07:40:52:ba:48:b7:95:b0:ec:5d:07:38:18:90:00:83:ee:
         24:fa:aa:7d:4a:80:7e:f2:8e:6e:f3:c1:40:6c:47:cd:d6:df:
         72:b6:21:aa:c1:f9:3a:89:c6:76:11:2a:38:77:14:e0:d9:e8:
         7f:10:35:af:cb:c2:06:e4:c7:e1:3a:33:c2:76:cb:eb:ae:18:
         8a:db:ed:31:53:50:5f:9c:7b:4b:83:96:9d:6f:56:da:4a:23:
         5c:bf:26:33:f6:32:0a:2c:ff:af:f5:b2:76:3b:5a:ce:b9:68:
         f8:70:ce:1a:7a:72:d8:b6:aa:a9:0a:e5:80:bd:db:a3:9b:00:
         c8:7e:e0:d7:b5:7c:72:23:17:ca:83:74:d3:39:7a:69:00:81:
         9a:e9:af:fa:2e:6a:00:7f:bd:67:68:93:dc:8c:3a:db:33:bc:
         41:b0:04:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:06:21 2025 by rpki-client