Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/982467e0-bb30-39d1-b029-5277f662fd9c.roa
File:                     982467e0-bb30-39d1-b029-5277f662fd9c.roa (raw, json)
Hash identifier:          6ZJkF8y35/4gyEKetf73ESqEOzpJ7yx0wz8jQUZRxSk=
Subject key identifier:   1E:4A:32:59:40:A5:2B:CB:BD:54:39:BE:E2:0F:FF:7F:6D:84:40:86
Certificate issuer:       /CN=a4e67936-c857-487d-93df-2dff7fa79988
Certificate serial:       010D0C9F4328584A8A8106314A0133A5FE588480
Authority key identifier: 16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/982467e0-bb30-39d1-b029-5277f662fd9c.roa
Signing time:             Wed 16 Jul 2025 20:22:17 +0000
ROA not before:           Wed 16 Jul 2025 20:22:17 +0000
ROA not after:            Tue 14 Oct 2025 20:22:17 +0000
asID:                     16509
IP address blocks:        72.0.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8a:81:06:31:4a:01:33:a5:fe:58:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e67936-c857-487d-93df-2dff7fa79988
        Validity
            Not Before: Jul 16 20:22:17 2025 GMT
            Not After : Oct 14 20:22:17 2025 GMT
        Subject: CN=16f77c31-477a-4c0b-9492-ab11cc048434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:72:f9:cf:96:71:23:f2:17:04:e2:0d:73:a1:
                    41:be:57:4e:1e:0b:25:e7:f5:47:1d:db:d7:76:92:
                    cb:ba:25:2d:96:c9:d3:d3:da:13:b8:40:8b:64:4e:
                    a7:f4:f7:26:db:fe:38:59:bf:e9:fd:2a:a8:68:9f:
                    f4:21:d9:f3:b8:a3:2d:8d:36:e5:0d:b0:a0:b9:46:
                    f2:4d:0c:13:d2:1b:84:a7:65:e7:17:bd:63:fe:c8:
                    55:2b:83:63:39:43:07:b2:ae:16:4c:78:0e:42:b4:
                    9c:31:c7:f3:23:bc:12:d4:97:89:4b:37:a1:ef:c0:
                    14:8d:97:7c:84:86:19:97:53:17:cb:67:16:ad:da:
                    cd:07:0e:be:3b:ed:a9:19:be:17:58:17:b6:6b:6e:
                    2d:e9:3f:f6:d9:37:a8:fd:a8:7d:99:8c:f6:e8:44:
                    23:6c:21:83:1b:03:35:b4:9d:83:d0:d1:42:34:27:
                    3d:15:ac:08:d7:7f:c3:74:0f:f8:c7:7e:86:a6:95:
                    4e:d9:fa:66:0f:be:d5:2f:b6:b2:87:8b:e4:7a:7c:
                    c7:04:6e:da:92:57:69:4a:6a:12:76:d8:59:6f:f1:
                    38:3c:da:14:4d:1a:ca:63:05:74:69:43:f2:c6:94:
                    c3:52:3d:00:ef:15:bc:a3:cf:75:fa:91:1d:ed:74:
                    66:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4A:32:59:40:A5:2B:CB:BD:54:39:BE:E2:0F:FF:7F:6D:84:40:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/982467e0-bb30-39d1-b029-5277f662fd9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988/a4e67936-c857-487d-93df-2dff7fa79988.crl

            X509v3 Authority Key Identifier:
                keyid:16:A5:E3:3A:12:28:97:2E:9F:52:34:01:A7:6E:E1:96:9C:DF:E9:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4e67936-c857-487d-93df-2dff7fa79988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.0.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:6e:0c:58:92:08:c1:bf:e6:73:41:59:95:b4:d2:75:52:71:
         c7:02:08:7c:6d:1d:e2:22:a0:72:80:06:57:22:59:e6:dc:13:
         c7:1b:4d:ce:54:19:b7:40:d5:58:e4:5c:47:29:11:81:e7:41:
         85:f2:e5:84:3f:07:a7:25:9a:48:5c:df:8e:e5:d0:45:c3:4c:
         a8:07:53:d4:80:42:80:ba:eb:8f:b3:8a:cb:51:1f:17:7e:ff:
         99:16:51:35:1e:0e:ca:e9:25:94:6e:0b:ee:2c:37:c2:bc:99:
         86:6f:95:4e:48:ad:ff:ef:16:f8:76:05:c0:93:76:51:9b:d4:
         9f:3c:82:f8:2b:fb:cf:5a:e5:df:7c:07:e9:1f:ac:20:31:ca:
         32:08:e2:61:8b:87:45:af:d4:25:15:6d:93:ce:13:ae:eb:73:
         3b:c3:4a:3f:82:2f:c4:10:1c:4a:cf:a0:59:ee:2f:ad:fa:5e:
         07:50:0d:f1:6c:b6:eb:ff:a5:c6:d1:d5:08:cc:fc:22:68:62:
         52:9e:78:27:5d:cd:5a:36:e8:70:63:e1:f5:37:d0:0f:77:ec:
         85:6c:ef:5e:1a:50:98:51:a7:69:35:b9:b8:71:f5:1f:86:87:
         98:fe:4f:b4:1d:10:23:5a:8a:23:18:15:58:03:3e:ef:5d:2b:
         a1:2b:77:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:48:18 2025 by rpki-client