Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5caa51a5-bb08-37b7-ae28-304ba7c5a583.roa
File:                     5caa51a5-bb08-37b7-ae28-304ba7c5a583.roa (raw, json)
Hash identifier:          Ot5kBUu2AkEnkZGREeNbn7jW6wJKSbad1ajbMFDqQT4=
Subject key identifier:   64:C1:2F:6E:59:24:35:64:16:E3:21:85:6C:6D:DD:D7:1E:ED:4D:7D
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AC711178D9B58940296AA7080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5caa51a5-bb08-37b7-ae28-304ba7c5a583.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     13335
IP address blocks:        108.162.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:17:8d:9b:58:94:02:96:aa:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=52b25920-ade3-42ba-bbf9-6efb339e825c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8f:27:b1:c2:33:ce:23:6d:95:f5:78:6f:62:
                    68:0b:14:a8:7a:3b:2d:19:c6:44:09:f2:02:f4:1d:
                    3e:c8:f7:47:92:6f:11:f0:f5:8b:a3:33:51:4f:1e:
                    16:07:36:99:a3:1d:01:55:ab:af:3a:97:a7:27:91:
                    44:c1:21:b0:98:bc:2d:10:c6:aa:21:ca:9e:fe:d9:
                    0d:4a:13:88:2f:00:8f:3f:a5:7d:2a:16:e9:0a:6e:
                    5f:64:b3:b1:4e:12:65:fe:73:d4:3f:77:d3:e9:6d:
                    05:19:bd:7f:1f:a9:25:eb:3e:48:95:f4:39:fe:f2:
                    b4:a4:8e:43:e0:b7:e0:93:50:e8:f0:81:06:0a:fa:
                    eb:b4:79:36:05:8a:20:c5:44:dc:3b:67:bc:91:5f:
                    31:a3:43:36:87:35:fb:30:92:cd:e5:9f:0d:de:6f:
                    23:9b:8d:c7:71:af:ce:d3:7f:ca:d2:e8:af:33:a5:
                    ee:58:1a:7a:d9:7e:39:2f:38:50:d9:a5:22:8f:1b:
                    ca:bc:b7:9b:51:08:e4:ab:31:2c:30:85:44:50:4a:
                    e3:db:4d:92:84:21:55:41:b5:ff:28:93:e0:6a:2f:
                    78:44:d9:07:bf:31:81:dc:09:71:68:3b:fc:8b:23:
                    a5:4b:14:e0:0a:11:b4:74:22:10:14:55:ef:bf:c5:
                    39:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C1:2F:6E:59:24:35:64:16:E3:21:85:6C:6D:DD:D7:1E:ED:4D:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5caa51a5-bb08-37b7-ae28-304ba7c5a583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.162.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:08:a5:be:26:9d:90:ed:3c:4d:9b:72:64:b6:a9:df:b2:64:
         fd:93:24:0a:1c:7d:ab:f6:f1:ae:84:fc:e3:9f:7b:7c:46:fc:
         d1:ee:47:46:ea:a9:d1:52:60:75:0d:a6:25:84:d1:3d:28:2b:
         95:3d:88:a1:c1:06:79:a5:39:ae:fe:0d:4b:01:3c:6a:f1:16:
         a4:a9:3c:d1:ca:25:ed:8c:ca:65:a7:e8:8c:2d:23:2b:2d:07:
         35:60:87:fb:ab:d3:df:5f:ad:4a:37:26:98:ca:c8:fa:bf:dc:
         8e:77:45:68:51:77:bd:c2:4b:da:d5:5d:d1:b0:e7:48:7e:cf:
         ab:70:9c:b0:04:85:99:74:42:ad:1a:7f:c1:1d:d3:81:76:cc:
         49:a1:65:60:a6:a7:34:f6:10:0d:78:37:17:9a:82:24:89:99:
         1d:5f:32:81:e9:7f:f3:5c:28:96:78:fb:8d:83:90:5c:fd:80:
         5d:d3:6e:c7:e6:ad:7d:31:bb:53:06:4b:f8:d7:02:73:60:16:
         0e:ca:6f:d4:a2:17:00:bd:4f:fe:3b:42:f3:38:62:4b:e0:ed:
         fe:43:4c:fd:97:4b:05:ef:bd:56:8e:d2:24:17:8c:03:4e:72:
         ce:54:56:6b:0c:13:50:93:d8:4c:02:77:2a:96:39:f6:a6:e2:
         63:be:af:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:08:17 2025 by rpki-client