Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/14d10ddb-8760-32eb-96e5-87639f83797c.roa
File:                     14d10ddb-8760-32eb-96e5-87639f83797c.roa (raw, json)
Hash identifier:          z1hHiF94qPMhIoGW3ndBGkk3VjNJC5tyQ7B3yUMpSmE=
Subject key identifier:   52:1E:62:38:75:82:62:78:57:08:92:42:7C:D7:3C:95:E6:5F:C5:59
Certificate issuer:       /CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0
Certificate serial:       010D0C9F4328584B1D9C2B48287AD62168111500
Authority key identifier: A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/14d10ddb-8760-32eb-96e5-87639f83797c.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     46320
IP address blocks:        216.234.168.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:2b:48:28:7a:d6:21:68:11:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=c56fa602-f758-4226-9c74-f851c1075af8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:44:4f:4d:1a:ae:da:06:97:4d:b7:e6:a8:e6:
                    b5:4b:cf:6d:20:a9:ec:74:bc:96:62:5f:89:ea:0d:
                    1e:43:55:e8:bd:f1:3d:ff:e9:b7:fb:95:13:15:a6:
                    e4:ac:45:14:8b:23:f8:2c:07:96:3e:64:29:29:46:
                    40:ef:3e:f3:d5:35:73:02:40:2c:1c:77:fd:2c:b7:
                    2d:2a:d0:df:4c:50:3d:47:09:b4:58:9c:82:e0:f8:
                    a1:99:9f:3b:33:87:1c:91:38:f7:e9:ed:24:22:42:
                    a0:11:1e:1d:db:fd:71:ed:78:18:55:76:2d:92:4b:
                    86:45:cc:00:bb:56:47:2b:f5:66:55:83:fc:c9:ec:
                    40:51:8d:72:9f:a9:c3:a2:8a:f4:25:8a:ae:8e:54:
                    ac:a0:81:0c:39:8d:ae:16:6c:cd:12:81:05:a0:f1:
                    03:da:96:dd:a1:a5:14:a7:a6:9f:c8:20:9a:cf:7d:
                    62:8f:22:94:b4:d7:ac:f1:1b:fb:7b:8a:d3:bd:d4:
                    47:0f:66:bd:db:2c:4f:a5:ae:5f:ca:f4:bb:0c:a6:
                    e1:d5:7f:9a:bf:cc:58:78:61:65:af:b7:80:fe:71:
                    88:a8:35:7a:de:d3:53:f0:7c:0a:2b:88:50:57:e2:
                    b0:24:8a:10:8c:22:e0:13:0f:56:50:37:4b:02:d5:
                    36:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1E:62:38:75:82:62:78:57:08:92:42:7C:D7:3C:95:E6:5F:C5:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/14d10ddb-8760-32eb-96e5-87639f83797c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl

            X509v3 Authority Key Identifier:
                keyid:A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:58:4e:e2:ab:5b:8b:a8:c6:91:14:a9:72:74:c1:ae:f2:ea:
         50:bf:09:46:40:11:aa:f4:b9:00:0d:17:09:a0:0b:38:e0:ab:
         4a:26:89:34:1a:86:f2:9f:62:88:9a:c9:75:60:26:9b:0b:74:
         80:cd:0c:58:00:4a:40:f6:3a:36:df:88:16:25:c9:36:09:98:
         e9:cc:1d:17:92:b6:e1:a3:0f:a7:30:e7:51:bc:f4:54:38:58:
         d7:bf:79:60:ea:4a:57:08:f2:34:1a:b0:ef:bc:25:93:d0:e5:
         ce:de:4e:11:6f:5f:fe:96:08:25:76:1d:19:67:c1:24:5d:16:
         ae:ec:01:97:dc:c4:0b:ac:a9:e1:ed:cc:25:a9:42:8a:ff:3e:
         a1:af:7c:a7:88:63:dd:3c:5c:c2:ac:50:bb:fc:5f:f5:6f:c0:
         83:13:77:47:98:fe:43:81:01:1c:cd:0b:f8:dd:9b:cf:d0:9f:
         b2:5e:99:92:f2:47:34:c8:3c:b6:a0:f7:6e:78:b4:8b:a9:24:
         a0:33:ec:1a:75:d4:ca:5a:29:2b:bd:f7:b2:33:6e:43:cb:c2:
         bb:ec:7f:e2:6f:48:77:44:06:40:76:52:75:57:45:aa:27:ba:
         57:22:6b:1f:06:ae:16:6d:b6:33:d9:51:a8:57:93:32:87:2c:
         40:33:1a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:20:57 2025 by rpki-client