Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7018635-aa3f-3afe-895b-c67734b5e6d8.roa
File:                     e7018635-aa3f-3afe-895b-c67734b5e6d8.roa (raw, json)
Hash identifier:          UeP2IDtbzZEAYQN2TA3jEkw16nMjhyH+e1E3AR2kFxs=
Subject key identifier:   43:6D:70:A0:7B:51:DB:B1:F6:69:89:1A:F3:15:AF:1F:5D:C3:71:92
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB74F9801D3FEFE1E6B4580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7018635-aa3f-3afe-895b-c67734b5e6d8.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33661
IP address blocks:        216.45.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:4f:98:01:d3:fe:fe:1e:6b:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=e1572282-22ef-485e-ae6e-7a7af92b9c66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:82:ac:d3:0c:ea:54:b2:5e:10:b1:e5:60:2e:
                    c5:18:8f:ac:59:e5:2d:1a:f1:12:17:18:98:c5:8d:
                    05:91:45:3e:b9:48:67:d4:c9:7b:e2:3f:53:d9:51:
                    34:74:78:c1:90:5b:40:d7:51:54:46:58:1c:c2:b4:
                    81:8a:c7:1a:be:2f:01:53:d8:d0:cf:cb:5c:94:e2:
                    14:44:e2:0a:31:0b:5c:b8:08:5a:e0:9c:6c:eb:d8:
                    aa:48:71:39:e6:20:63:88:94:2a:88:87:ae:38:20:
                    94:c3:0e:a7:4d:23:db:51:a4:62:7e:2e:25:94:47:
                    f8:f8:8b:d4:c1:a4:66:2f:7b:be:d4:3d:dc:b4:c2:
                    bd:19:34:10:34:17:d3:21:cb:24:8d:92:e7:a3:54:
                    cd:e1:79:67:cd:7f:1a:65:22:6e:ad:db:49:7c:ab:
                    40:9f:6b:be:e3:9c:e6:54:e8:14:4f:af:af:4c:fd:
                    09:ba:f9:09:9f:9f:dc:dd:e0:33:a2:6f:a9:04:b8:
                    8c:1a:18:dd:14:3b:42:9c:35:b5:05:74:b5:9b:04:
                    82:c2:d7:74:21:a0:31:c7:d4:29:86:88:b0:01:65:
                    dc:ba:a7:43:7c:71:e8:f5:31:0b:73:a8:34:d7:e4:
                    ef:52:10:98:c7:1b:d6:96:2c:63:af:e5:cc:38:85:
                    92:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6D:70:A0:7B:51:DB:B1:F6:69:89:1A:F3:15:AF:1F:5D:C3:71:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e7018635-aa3f-3afe-895b-c67734b5e6d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.45.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:bb:ec:3b:94:ad:1e:f1:a7:df:f6:b1:66:c6:44:c9:d7:92:
         74:d4:74:a0:80:ff:bf:ed:00:bc:80:6f:3d:1d:11:fc:56:80:
         66:a7:af:01:f8:f0:89:41:a8:38:2f:af:3d:b3:8c:a3:96:6c:
         27:0c:43:41:f7:c0:8e:d7:06:84:92:b7:b1:ab:48:ac:01:4e:
         58:e8:43:47:6a:e2:d9:34:bc:01:de:5d:2e:d3:3e:b0:20:28:
         0a:b6:29:23:7b:20:65:97:62:a5:cb:5b:72:11:bc:40:ec:60:
         d7:37:b3:a6:82:c5:6e:9f:da:c2:91:bb:47:ae:43:9d:2d:58:
         47:ce:23:61:e7:5a:a8:45:44:22:92:0e:c9:cd:0f:6f:9b:f3:
         24:13:7a:1e:71:07:b1:71:8a:5c:a1:32:0f:dc:9a:a0:67:33:
         40:4a:27:6f:e9:ac:cf:3f:48:ae:73:9e:74:ef:77:b2:98:29:
         19:0a:07:88:ed:c6:51:31:5e:0a:0d:44:35:ee:71:8c:14:63:
         94:0a:45:6a:df:a6:46:f7:80:89:04:ea:d4:0d:89:ee:98:f5:
         fa:a1:99:b4:36:d3:57:df:56:d8:a7:e9:ce:7b:09:30:b6:d0:
         99:c8:db:53:a7:d4:5f:6d:ec:35:76:41:70:bc:d2:a9:ea:30:
         a4:60:3a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:35:33 2025 by rpki-client