Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/98277976-b42d-3c8f-917e-6bf12b3c5674.roa
File:                     98277976-b42d-3c8f-917e-6bf12b3c5674.roa (raw, json)
Hash identifier:          zU/jp6EC/nCl4m6pcwVs9QXILtiDOS/CiZSv4g8PIgU=
Subject key identifier:   E1:E5:45:27:3A:F3:04:7F:75:35:55:1A:CD:0B:62:D1:76:9C:3B:A3
Certificate issuer:       /CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
Certificate serial:       010D0C9F4328584B6D2C9295CC0430184EC2AC00
Authority key identifier: 18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/98277976-b42d-3c8f-917e-6bf12b3c5674.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     393262
IP address blocks:        216.41.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:92:95:cc:04:30:18:4e:c2:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=7c59f780-d8b1-4f42-bbe7-43cdb37daa57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:51:17:7a:22:25:13:47:4f:eb:01:ae:0b:f1:
                    95:59:3b:93:ca:13:bb:99:41:55:6f:fa:ba:e2:d0:
                    ac:5e:84:34:52:61:1f:56:e3:45:bb:28:4e:fa:94:
                    bf:27:cd:c9:13:dd:05:6d:ab:ce:64:34:03:42:13:
                    a4:55:e8:bd:0f:87:77:92:9d:6c:b4:62:89:63:6f:
                    6a:99:af:82:46:fb:70:ad:1a:09:48:bd:ef:89:9a:
                    9b:3a:e9:b2:bd:45:c7:a0:20:33:b5:02:23:94:28:
                    07:f6:82:f4:bb:d5:3b:16:25:14:89:c3:f9:ec:fc:
                    39:82:b3:16:cd:c0:fb:f3:38:88:27:77:43:d1:8a:
                    62:30:93:33:da:09:e9:92:58:6c:c0:de:7d:28:66:
                    60:8c:cc:59:03:24:2a:cb:f7:03:43:f2:d3:cd:50:
                    3e:78:a5:c5:93:ab:e2:7e:28:f5:0e:fd:7c:a6:07:
                    ee:1d:52:0c:3b:dd:a0:ff:9d:64:65:69:d6:c7:08:
                    61:0d:ca:ca:79:60:7f:0c:3a:8c:86:3f:34:e7:2e:
                    61:e9:ea:fe:8f:94:28:fb:24:d9:a4:b3:cb:b7:74:
                    b6:c5:d4:50:1f:23:0e:e2:2a:ff:66:36:cc:4d:6b:
                    f3:39:7b:9f:92:da:27:e2:1f:cd:34:c7:41:bd:99:
                    1e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E5:45:27:3A:F3:04:7F:75:35:55:1A:CD:0B:62:D1:76:9C:3B:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/98277976-b42d-3c8f-917e-6bf12b3c5674.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl

            X509v3 Authority Key Identifier:
                keyid:18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.41.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:be:cf:c3:d5:28:af:40:38:7e:af:b8:7c:38:21:00:2d:f8:
         9a:fa:07:59:c7:cb:4b:6d:14:8b:b9:55:40:7a:c5:c3:c1:82:
         bf:dc:72:d0:23:0b:16:be:19:55:03:f9:e6:38:9f:c9:aa:c2:
         34:03:39:d3:05:30:6d:70:b0:76:a2:eb:f8:f6:0b:10:74:9e:
         93:25:d8:53:bc:16:b2:10:bd:44:52:09:97:93:1f:2e:75:d7:
         91:b6:72:c9:4c:3d:2e:83:88:ff:21:cd:04:7b:bc:b5:b4:b1:
         41:86:97:20:01:e9:ac:49:48:7c:44:02:c8:1c:33:9a:48:ce:
         fc:39:46:9c:ea:1b:ed:21:5d:be:be:63:90:78:e8:ce:80:d8:
         1c:36:52:db:fe:5c:90:b4:55:72:aa:75:65:2c:79:9d:11:84:
         3e:1f:79:06:3f:da:63:ff:2f:af:d7:3d:e6:04:d7:22:8e:4b:
         a3:b2:ab:2a:11:ac:c7:12:24:fe:d3:7c:f0:39:92:fa:c5:1c:
         fd:4e:06:00:cc:fe:3d:32:e5:77:3b:d0:8b:f5:fd:17:0f:92:
         51:7e:92:85:d8:61:f7:e4:fd:13:6b:8c:31:d4:bc:95:99:9e:
         2a:cb:0d:dc:6c:25:eb:9c:e2:4b:d9:fe:ac:b5:62:32:89:3e:
         46:c3:60:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:21:43 2025 by rpki-client