Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/c8140f71-e8a5-3f59-bfe0-4779dbaed2fd.roa
File:                     c8140f71-e8a5-3f59-bfe0-4779dbaed2fd.roa (raw, json)
Hash identifier:          BZK5ble04nT2XfOrl4hNJJlDNC48/oTuquqJ0T9CmmM=
Subject key identifier:   B7:3D:E0:AA:74:3A:99:88:9A:9B:7B:2E:18:FD:54:AB:6D:5D:6F:0F
Certificate issuer:       /CN=957264f8-0474-43d0-9a3b-5f53ce28790d
Certificate serial:       010D0C9F4328584AADF10BD0CD559B96561A94C0
Authority key identifier: 8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/c8140f71-e8a5-3f59-bfe0-4779dbaed2fd.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     15344
IP address blocks:        24.92.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:0b:d0:cd:55:9b:96:56:1a:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=957264f8-0474-43d0-9a3b-5f53ce28790d
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=ea2c7e1d-7dab-462c-8b37-e2eea8d2155c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9c:74:a7:cb:91:63:69:e7:a4:f9:4f:70:a5:
                    1e:4e:72:27:f3:dc:cb:d8:fc:8e:ec:f4:18:84:72:
                    0d:8c:4b:3e:ab:2a:13:95:60:dc:02:15:3a:8f:ac:
                    73:7a:e3:cf:f5:af:be:ef:c1:69:79:45:7b:67:7a:
                    2f:2e:39:2c:0c:bf:ca:77:fd:08:93:e4:a4:81:df:
                    09:53:f2:fc:7e:6e:72:d4:cf:22:89:4a:11:41:d6:
                    a0:8a:24:13:43:58:aa:0d:e3:da:cd:0f:c8:22:85:
                    d8:1b:f0:88:6a:e8:11:2b:a8:87:d6:fa:c9:99:67:
                    93:2a:1e:8d:e8:48:ec:ca:cd:30:69:e7:4e:d5:ee:
                    c7:86:70:3f:ef:be:10:b6:2b:f3:12:cf:1e:41:b2:
                    ab:e7:f0:a9:30:6e:ff:67:84:42:a8:7c:e3:98:c7:
                    0a:48:8f:d4:f6:53:27:63:17:0e:0e:30:0c:28:73:
                    0e:d4:eb:d1:fa:fd:16:61:45:7f:05:ef:d6:38:c9:
                    33:53:88:d8:39:09:a5:91:ff:ed:6b:0f:e2:7c:0a:
                    c0:24:d5:2d:da:31:24:6c:3d:fd:93:00:04:e2:88:
                    f1:aa:4f:41:ec:69:36:bc:5a:38:67:72:7f:ea:1a:
                    6c:4d:9d:cb:58:3d:3c:fb:2a:35:94:e0:19:90:14:
                    82:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3D:E0:AA:74:3A:99:88:9A:9B:7B:2E:18:FD:54:AB:6D:5D:6F:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/c8140f71-e8a5-3f59-bfe0-4779dbaed2fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d/957264f8-0474-43d0-9a3b-5f53ce28790d.crl

            X509v3 Authority Key Identifier:
                keyid:8E:9D:11:16:67:5E:D2:48:46:F0:6A:D8:54:07:55:80:F0:16:CC:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/957264f8-0474-43d0-9a3b-5f53ce28790d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.92.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:52:6f:90:28:06:ed:0c:4d:66:ad:1d:b2:dd:3c:19:c0:69:
         c1:98:e9:cd:0a:28:3b:fb:7b:b1:9a:5a:e0:37:d9:22:3e:d2:
         3b:10:d4:d2:39:c7:f2:d0:49:1b:76:13:b3:34:64:27:8c:b7:
         30:7d:ef:ba:de:80:b6:8c:0e:a7:b4:fe:05:be:6a:77:91:a3:
         d9:39:fc:71:f1:aa:64:3a:2f:91:63:5b:3d:5b:05:78:58:12:
         c5:aa:16:23:b9:de:e3:a9:44:65:fe:df:eb:1a:2e:c1:48:bc:
         fa:d0:89:da:3e:72:41:00:da:05:87:14:f1:50:7b:40:aa:9e:
         80:3e:ae:e1:1d:8a:6c:80:4e:11:1c:95:68:03:74:78:2c:0a:
         82:58:9e:27:e4:cb:34:25:1f:f9:72:9c:09:6c:9b:b9:60:ed:
         99:ad:c1:dd:26:e3:37:35:8b:37:65:e0:6e:5c:7e:2b:26:fc:
         0e:1b:b3:a9:40:44:90:02:28:a7:66:cf:12:5e:3a:5e:26:97:
         cb:97:3d:bb:0b:62:ee:14:6f:e8:41:ab:8e:47:ed:6f:d2:d1:
         ed:6d:13:cb:e5:db:f1:89:f5:0a:50:50:7c:98:9d:9e:6f:cf:
         4a:60:59:d7:a4:8d:96:24:56:b4:f8:02:07:d6:96:cf:c7:10:
         77:00:1a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:36:02 2025 by rpki-client