Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/d78b5208-8afe-354d-8515-74294ec79433.roa
File:                     d78b5208-8afe-354d-8515-74294ec79433.roa (raw, json)
Hash identifier:          tqcRjfsLymdU59G4BklAl+OrLOstg5W9xkdrI6nCGcA=
Subject key identifier:   E9:A8:A3:27:B4:38:F6:69:0D:3D:32:22:30:3D:54:4B:5C:64:6C:5F
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584ACB40ECBF14353D0C14F9C980
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/d78b5208-8afe-354d-8515-74294ec79433.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     15348
IP address blocks:        216.40.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:ec:bf:14:35:3d:0c:14:f9:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=da60353a-4ad2-49d7-8d04-28a557107722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0c:2a:9a:1f:a1:80:5b:a3:69:f0:90:ee:64:
                    a3:31:77:e0:66:fc:82:50:8a:16:27:ff:e2:d7:37:
                    3f:f6:e2:a8:f2:d8:3c:bc:20:96:f2:44:8e:43:6f:
                    c9:30:ba:b7:13:dd:8e:ea:a2:81:a1:2a:87:c1:42:
                    8f:3d:aa:a0:77:05:df:c7:a7:b4:72:20:83:ec:e6:
                    dd:67:03:89:fb:5c:9d:e0:0b:6d:89:a9:88:bc:96:
                    a1:b3:4c:f9:e9:00:e1:92:e8:5a:63:70:7f:8d:6f:
                    26:d8:3c:b5:88:b1:af:54:12:c2:8a:5c:7a:fd:25:
                    e6:90:56:59:ee:af:87:ff:22:d0:cb:c6:4b:d7:19:
                    eb:43:fb:5b:8c:ee:b7:4d:57:83:1f:cc:28:15:8f:
                    96:2f:8d:67:0e:43:0f:05:24:a2:19:d1:48:f0:ed:
                    a2:3d:2c:9f:8b:66:93:c1:7c:29:04:50:49:a4:22:
                    c8:f3:b8:90:bd:3d:39:8c:d1:6f:c8:f0:8f:59:79:
                    92:b5:9e:45:17:2e:69:ad:41:a8:9c:69:8a:e4:40:
                    b9:4d:80:bb:65:08:b4:f8:7d:fe:5d:57:9d:e0:a3:
                    6d:7d:62:b4:24:50:39:09:e5:e5:87:f0:52:38:14:
                    d3:c9:a2:f2:b3:ab:59:ac:09:80:37:e8:e7:a9:1a:
                    4b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A8:A3:27:B4:38:F6:69:0D:3D:32:22:30:3D:54:4B:5C:64:6C:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/d78b5208-8afe-354d-8515-74294ec79433.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.40.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:31:26:3d:70:24:eb:e5:f4:50:cf:9d:54:2d:d6:24:bc:a0:
         68:54:6a:d6:f9:7b:02:ef:3a:94:2e:76:b8:77:9f:1c:84:db:
         9c:2b:b1:d4:ce:a7:4b:90:af:69:df:48:57:dc:0c:1d:53:11:
         64:8f:33:fe:9a:25:b4:c3:e9:cc:c6:ae:15:2d:b9:48:10:07:
         cb:83:55:ed:3d:09:8a:35:a0:a7:28:4b:e8:7b:89:cf:72:40:
         fb:40:ba:33:40:e8:1a:4c:0b:66:09:6a:ca:fa:bd:df:ec:84:
         4e:f4:91:b4:79:65:92:2a:92:fd:44:3a:7b:8c:56:75:d1:20:
         1e:36:97:91:63:53:cc:ee:57:37:9d:45:4b:7c:8c:5e:3c:b9:
         91:31:6c:92:1a:ce:c1:cc:b9:08:14:22:74:5e:22:42:9b:73:
         a6:e0:c8:ff:51:99:83:95:36:3c:d8:c2:fc:30:d5:41:95:39:
         8a:ea:d3:b4:8e:ba:19:3a:3b:1f:3f:3e:9c:a6:3a:85:9e:86:
         7e:b9:83:ab:88:77:95:6b:34:54:94:6a:c8:4b:1d:8b:2c:c5:
         23:e7:7f:25:a8:a1:eb:d1:18:83:a0:9b:de:03:98:9f:91:b9:
         b7:df:29:52:21:25:1c:f7:5f:31:d6:83:6b:a6:94:24:83:79:
         70:4f:1a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:33:41 2025 by rpki-client