Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f9f264db-1dd4-3963-92a2-ce4f07b328cb.roa
File:                     f9f264db-1dd4-3963-92a2-ce4f07b328cb.roa (raw, json)
Hash identifier:          jSivf7dQhF7Keda8SqKfSkv0vnoKXonh787QtWJnZl0=
Subject key identifier:   32:3B:33:F0:88:98:53:91:02:5B:63:58:39:74:5E:BD:4C:18:C5:53
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584AA42B841D176E1CDE7A074C80
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f9f264db-1dd4-3963-92a2-ce4f07b328cb.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     14990
IP address blocks:        216.206.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:84:1d:17:6e:1c:de:7a:07:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=b2decb47-0bc5-4391-a9ed-47d1828a5451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:55:33:a5:aa:d3:94:ad:00:80:71:7d:61:d4:
                    57:94:ed:36:55:57:64:d9:f3:46:59:53:f0:04:f6:
                    a5:61:4e:43:42:b6:22:40:7d:0c:b3:56:c8:5e:2f:
                    0b:ab:4b:f0:54:c7:52:30:5d:3e:22:71:89:fd:de:
                    96:cf:f3:58:0a:cd:77:47:dd:d4:ea:62:fe:d5:a4:
                    f2:a3:35:25:d0:70:70:08:45:57:05:86:ce:00:7e:
                    f6:eb:1d:ad:78:00:ba:f7:12:d1:dc:a7:b9:09:67:
                    f1:c2:3e:4e:fb:da:d1:d5:c2:8e:6f:32:c7:61:e7:
                    21:77:a5:68:1d:c3:36:bc:a6:da:b9:c9:1d:93:c4:
                    66:8a:50:ac:dd:da:f4:d0:ca:f0:13:81:03:a8:2d:
                    80:e5:b8:d5:ae:32:b1:3c:0c:7d:72:7c:27:ad:c7:
                    2a:24:cb:23:0f:e8:25:5f:c3:7c:4b:8d:73:3b:c9:
                    03:19:56:fd:e6:b2:06:b1:1b:86:ed:7a:7e:2b:0f:
                    a3:5d:16:02:3d:1c:bb:c0:35:58:3f:e0:7a:db:1e:
                    76:64:5e:58:88:08:a6:50:03:de:59:76:c2:22:ae:
                    ca:f6:af:ad:9f:68:a0:a9:42:36:db:79:c0:f1:59:
                    64:24:15:59:72:06:a5:4f:73:ed:3c:fe:38:57:ff:
                    b0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3B:33:F0:88:98:53:91:02:5B:63:58:39:74:5E:BD:4C:18:C5:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f9f264db-1dd4-3963-92a2-ce4f07b328cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.206.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:6e:5c:8e:24:06:39:b2:56:40:d8:cf:db:60:15:a7:0e:6a:
         99:e1:de:45:6d:57:de:47:17:0f:a5:ca:13:70:10:b3:00:98:
         ef:3d:30:83:98:95:fd:48:78:78:81:d4:47:b6:a4:b9:f7:2b:
         8d:39:b6:ce:b2:74:77:7b:19:87:ee:e4:09:d1:55:48:bc:79:
         2e:d8:6a:28:b4:e2:3e:11:04:e3:b2:38:70:fe:70:2d:16:04:
         05:88:70:b0:65:64:3b:2b:de:a5:05:e7:a6:1d:1d:3d:0b:6e:
         ac:a6:b3:b5:3e:84:4b:8d:31:ef:f6:ee:97:ae:a8:30:fa:a8:
         c8:88:1f:6e:cc:34:5a:2f:53:01:60:28:d4:e8:0b:11:79:0b:
         17:f5:f0:f8:67:1b:32:79:40:0d:74:ab:d0:1d:63:44:d0:d8:
         80:40:30:54:41:c8:9f:46:bd:f3:18:48:5f:dd:2e:6c:da:9b:
         02:2d:2f:ec:f9:8a:8d:2c:71:75:1c:2c:e7:da:67:50:69:7b:
         6b:b9:c9:21:97:50:61:79:30:af:d6:d5:74:a8:b2:b5:cf:e6:
         af:01:c3:2a:48:02:f0:a0:9c:88:01:71:85:ae:a6:45:39:15:
         51:35:3c:13:b3:8e:71:2b:0d:b8:97:21:e6:02:95:f7:49:5b:
         f8:82:00:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:17:59 2025 by rpki-client