Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2c309e9a-487a-3082-b76d-a570291dea7e.roa
File:                     2c309e9a-487a-3082-b76d-a570291dea7e.roa (raw, json)
Hash identifier:          5re0Snaoco2yxqelvc6eZWVZCsv7liPsjQ5Jm0jfAMk=
Subject key identifier:   03:53:7B:41:E0:79:09:C9:E6:E1:3D:E1:1A:91:F3:24:47:36:0E:85
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584AADF10CB9E8B8F183A8A462C0
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2c309e9a-487a-3082-b76d-a570291dea7e.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        192.184.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:0c:b9:e8:b8:f1:83:a8:a4:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=a7db5591-d5fe-4c0a-9905-456e15cb175a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:91:64:a4:aa:4b:33:8d:f9:59:46:6c:e6:05:
                    e0:5d:eb:ac:e3:d8:c0:d7:29:f4:e1:ad:f7:32:41:
                    3f:54:f3:32:ec:05:3a:ba:98:32:45:b4:92:9c:2a:
                    a9:ea:ff:27:43:4c:20:49:08:f7:df:7e:51:8d:9e:
                    f6:7a:2f:d6:19:c8:42:98:17:6f:31:65:51:8a:b8:
                    a0:dd:2a:42:9d:42:0b:d9:5f:0c:f7:60:22:5a:08:
                    dc:0a:a3:d2:57:89:64:3c:3f:ca:45:ab:7c:11:98:
                    dd:11:8a:00:91:d2:23:c2:0b:28:f4:c2:82:20:a9:
                    a6:d6:5e:38:25:c4:ee:10:e3:c6:e8:03:d7:19:82:
                    09:1e:dd:c9:0e:a0:c4:51:c0:27:12:48:bb:5a:24:
                    fd:68:f7:d2:d7:a0:cb:72:ed:ed:3d:7a:af:29:b6:
                    92:62:b9:2b:b9:95:c4:c4:f4:56:b5:3d:2e:a1:da:
                    85:23:7c:97:56:53:5b:e9:4f:2b:37:5b:94:69:f7:
                    9d:d9:f9:67:88:b2:4c:70:7e:ae:b6:70:53:11:05:
                    40:c7:80:0d:1f:a5:f8:be:12:14:b6:48:93:f7:99:
                    9e:d9:a9:7c:cf:75:db:78:c2:e2:1f:50:3b:4b:0e:
                    b2:5c:38:1a:ee:0c:ff:6f:13:bb:22:b6:2e:b8:2d:
                    98:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:53:7B:41:E0:79:09:C9:E6:E1:3D:E1:1A:91:F3:24:47:36:0E:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/2c309e9a-487a-3082-b76d-a570291dea7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.184.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:a1:1b:c1:23:30:8d:5b:be:f3:a2:ee:82:65:fa:55:cd:e7:
         5b:3c:d4:a1:df:5a:c7:de:6f:ba:04:f0:7e:f4:43:2b:62:96:
         fd:17:36:a1:b8:bc:9b:b7:9a:3c:d6:27:20:e8:75:2e:15:a8:
         cf:08:81:21:fe:29:84:37:20:a6:55:2f:44:85:3d:e0:1c:ff:
         22:8a:23:32:3f:d1:db:dd:a7:71:8c:32:4c:3b:59:e8:61:34:
         49:64:9e:3d:50:24:a8:67:e2:98:96:07:df:d2:3f:41:e7:b9:
         c4:2d:fe:0f:53:e0:91:61:fb:05:51:82:90:6e:b5:d2:79:48:
         39:9d:df:51:87:cd:cc:4b:ae:b0:3a:fb:98:3f:62:f9:c7:af:
         3c:ce:83:27:e3:c3:d3:1a:ae:9d:0d:f7:72:3e:49:37:f0:14:
         d3:e5:b8:a6:57:df:32:e9:96:67:6b:90:d1:45:ec:35:b3:f6:
         a8:42:26:17:cb:1c:e7:1d:ed:03:df:98:98:55:54:8b:71:da:
         1c:a7:4e:1c:ca:45:de:e1:e3:3b:76:c9:18:65:ae:64:06:ee:
         e4:e5:35:34:06:f7:23:3b:2b:b8:5f:8f:49:c6:24:36:fe:b5:
         a5:de:f8:7b:de:1d:1c:3d:d7:8b:9a:b9:8d:72:3a:6c:10:33:
         91:b3:e3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:11 2025 by rpki-client