Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/5abb830c-5160-3ecd-a82c-c26f5856e7b1.roa
File:                     5abb830c-5160-3ecd-a82c-c26f5856e7b1.roa (raw, json)
Hash identifier:          6HAKNtAt6nCB4HZHlwEee3Wj0+jmlXNV+mkDYHNyGlE=
Subject key identifier:   4F:EB:E5:1F:4F:A4:10:A4:ED:86:D9:CB:E0:77:0E:C9:8E:74:C0:C4
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F4328584B8BE210CD50F2A83C00F6BB80
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/5abb830c-5160-3ecd-a82c-c26f5856e7b1.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     10359
IP address blocks:        216.165.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:10:cd:50:f2:a8:3c:00:f6:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=e7895edd-fbc1-4fb6-b81a-364ac26c9f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e2:62:a0:86:a4:c3:53:d1:dd:c2:00:3a:a4:
                    f7:8b:ec:6e:ce:a2:3d:1b:59:76:cb:22:5a:17:66:
                    a1:98:d9:d7:d8:d4:b5:74:c2:cc:d0:d1:3b:53:e6:
                    93:26:af:06:ec:a0:6a:c3:35:9b:e5:8f:4f:c9:7e:
                    c6:46:b4:64:3b:04:b9:80:2a:86:3c:6c:61:ba:83:
                    0f:e4:5e:6c:7e:a4:22:9b:9a:da:0b:af:e4:9b:39:
                    2e:37:1e:c2:e0:0e:d5:8a:12:a5:43:65:ec:22:28:
                    a4:82:f5:a2:e0:8e:ec:bb:7d:1b:45:e8:a4:69:55:
                    5d:95:a3:49:59:0e:86:05:3f:00:73:63:75:30:bc:
                    1e:20:87:41:7d:58:19:4f:03:f4:2e:6a:45:fc:42:
                    25:ac:ea:ed:de:0a:07:05:40:6e:17:28:7d:2e:3b:
                    c6:51:b4:ce:79:d2:13:db:b3:24:44:3d:15:a8:bf:
                    bd:1f:79:23:29:64:96:45:ef:ef:ee:1d:3e:58:bf:
                    43:a4:2f:a3:49:ec:e5:a0:76:89:0c:a9:06:6a:86:
                    e4:02:51:a7:a2:fb:ab:89:73:e6:2a:f2:d0:fa:cc:
                    a0:98:1f:99:90:73:4f:b3:66:3a:f7:20:d4:19:01:
                    02:6c:c8:c3:ea:8b:5d:89:f7:d4:ad:63:3c:49:18:
                    83:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:EB:E5:1F:4F:A4:10:A4:ED:86:D9:CB:E0:77:0E:C9:8E:74:C0:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/5abb830c-5160-3ecd-a82c-c26f5856e7b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.165.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:0e:61:ec:89:89:a7:f8:5e:9a:45:23:ae:da:9c:fe:31:b0:
         04:dd:f4:1f:77:e6:2b:eb:a8:1a:f8:af:a7:ef:e4:13:e9:8c:
         b2:bd:13:2d:23:04:f6:32:0e:2b:8d:e2:10:27:ce:f5:96:a4:
         eb:47:84:83:4b:26:3e:e3:39:ae:71:64:24:28:58:fe:99:55:
         19:3c:9f:9a:a8:ff:63:9f:67:46:65:9f:c8:a7:2d:11:81:54:
         11:bf:37:e4:6e:3a:de:31:fc:68:e8:59:67:e2:ee:fc:e5:e0:
         e3:2a:42:a5:98:b2:5e:6e:12:6a:86:ad:b4:2e:0f:36:21:39:
         c5:cc:0c:f6:61:84:c5:3f:8d:81:4e:50:1a:51:a0:bf:d2:1a:
         b0:b9:7c:18:b0:f6:ea:23:fc:fe:69:a2:c0:a8:41:15:d1:35:
         ad:00:75:c5:5b:94:15:0f:4c:81:47:6e:24:db:9f:c1:19:39:
         1a:a1:04:bd:d3:1f:6b:e4:1a:2b:15:63:97:4b:3d:9f:24:c1:
         76:8e:b2:8d:b6:68:dd:e7:1e:1a:68:f2:5b:a6:64:e8:7b:a1:
         f1:cb:2a:c3:38:3e:b3:fb:78:e6:ff:11:df:f8:39:26:e2:f2:
         13:ae:64:bf:f7:f0:f9:b7:68:f8:6b:13:55:34:59:d9:43:4f:
         0b:32:6c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:50:48 2025 by rpki-client