Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f9f264db-1dd4-3963-92a2-ce4f07b328cb.roa
File:                     f9f264db-1dd4-3963-92a2-ce4f07b328cb.roa (raw, json)
Hash identifier:          b22kUV7cnhDCz3K6+8jBgAWJodJwZyyHafV/VSed+Y0=
Subject key identifier:   52:2D:CB:96:4F:48:24:D6:2C:40:D8:0E:F5:29:DD:3B:17:51:E4:8C
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584B84E77C21A859683BDF024160
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f9f264db-1dd4-3963-92a2-ce4f07b328cb.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     14990
IP address blocks:        216.206.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:7c:21:a8:59:68:3b:df:02:41:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=8686b6a0-4d95-458a-b6b6-bea0811fbce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b3:bb:2e:ba:ef:8c:b9:59:ba:ea:a7:fe:57:
                    57:80:1c:d2:b5:82:de:3e:38:f2:1f:80:46:b5:b8:
                    58:e1:96:58:2b:c7:cb:39:29:b9:6c:5e:7f:ac:fd:
                    5e:5f:de:75:45:c1:b0:63:85:94:4e:30:11:54:4f:
                    dc:0d:45:36:f9:37:aa:d5:53:48:d1:48:74:d2:47:
                    36:4c:93:51:2f:03:d4:d5:56:f1:25:89:41:41:54:
                    e7:a9:fa:97:83:a3:02:ea:ab:f5:1b:c6:99:ea:3c:
                    e5:11:7a:2d:eb:b1:64:e3:a3:3c:e7:ef:63:63:9b:
                    c4:62:2c:61:0a:6e:b3:c1:05:78:31:eb:0b:89:9b:
                    d7:32:75:69:95:48:80:d3:f9:35:a2:4c:03:0b:7e:
                    d8:19:9e:60:a2:e0:b7:6c:fa:8d:20:d8:bf:75:18:
                    de:24:87:09:6b:57:96:60:3f:c1:84:a4:8a:e2:d6:
                    87:78:73:7c:43:3c:a3:86:3e:0f:f7:cb:d5:e5:3a:
                    21:f6:f2:e9:da:2f:b1:ad:66:ea:53:70:78:c5:a7:
                    4a:b2:72:d0:2e:c8:ec:2a:ae:44:7f:f4:47:50:ac:
                    1c:2a:68:34:9e:a0:68:76:c9:ac:7a:af:5e:51:d2:
                    9a:81:31:4a:29:f3:14:8d:d7:88:4d:e1:bb:47:12:
                    18:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:2D:CB:96:4F:48:24:D6:2C:40:D8:0E:F5:29:DD:3B:17:51:E4:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/f9f264db-1dd4-3963-92a2-ce4f07b328cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.206.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:55:eb:10:8a:7c:af:c1:ce:3d:b4:99:28:f6:5a:32:5f:84:
         7b:6f:4b:50:0a:4a:66:b6:3b:69:18:3d:58:fb:e7:09:96:b3:
         7b:ea:47:26:84:c0:64:a5:c5:23:27:9a:5c:1f:5d:5f:63:dc:
         b2:dd:8e:92:5b:1a:6a:45:ad:02:1f:01:a5:99:2f:e0:4d:dd:
         78:30:2f:0d:a1:8e:62:eb:13:aa:8b:f2:4d:71:f8:00:d5:4c:
         34:24:2e:2b:78:9c:30:9c:6b:9f:cb:20:b6:68:0d:bf:c8:65:
         1f:3b:a8:43:ac:8f:55:5d:98:db:44:aa:99:13:ad:ec:9a:64:
         4b:2d:0e:56:d4:35:02:b3:db:7e:19:72:80:36:1b:4e:87:62:
         9e:5a:d0:aa:99:7d:ee:19:4c:87:4c:be:cc:ed:03:82:66:d9:
         8e:c1:41:62:a5:b6:13:55:bb:04:9c:82:fd:cd:4b:88:c7:59:
         50:b8:d0:17:ff:6c:16:95:81:ba:2e:11:e9:39:04:6b:48:26:
         31:a9:00:c8:86:35:e1:f1:60:fa:ee:3c:04:a5:0a:48:2e:1c:
         2e:2f:4c:8a:5d:e0:b3:9c:01:58:e3:0e:2b:59:59:49:17:9a:
         39:a0:a2:55:72:e3:a5:ee:e2:b8:51:53:cc:45:e2:82:cd:be:
         60:d0:2e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:10:24 2025 by rpki-client