Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b216376c-c660-3cf3-b721-6550c616d3cb.roa
File:                     b216376c-c660-3cf3-b721-6550c616d3cb.roa (raw, json)
Hash identifier:          YYdNn1+1DjUmR2eeVP52kbE3p7lSO+uV00lXd2ApIgE=
Subject key identifier:   CB:AD:F1:28:A8:31:DC:F7:07:A7:CC:BA:90:4C:05:3E:CE:9F:64:13
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584B8A7CD0DC661A94B8A787E7C0
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b216376c-c660-3cf3-b721-6550c616d3cb.roa
Signing time:             Thu 16 Oct 2025 13:00:38 +0000
ROA not before:           Thu 16 Oct 2025 13:00:38 +0000
ROA not after:            Wed 14 Jan 2026 14:00:38 +0000
asID:                     40717
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8a:7c:d0:dc:66:1a:94:b8:a7:87:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Oct 16 13:00:38 2025 GMT
            Not After : Jan 14 14:00:38 2026 GMT
        Subject: CN=015554df-9b04-4a7e-9270-b5ea709fd5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0b:0f:98:4a:ba:33:43:9d:cc:66:a7:98:85:
                    a6:ad:a8:2d:30:34:38:b1:b1:64:5e:2e:09:a0:91:
                    a9:d3:0c:f6:79:6c:da:c8:30:93:87:00:9e:81:8e:
                    db:1c:52:ef:8b:ba:f0:a0:7a:61:5c:f3:b9:a0:22:
                    b1:6b:69:64:26:7e:e4:fd:b4:0f:6e:48:99:29:5e:
                    f4:16:c2:fd:ca:71:3c:76:20:aa:45:c4:59:8d:b9:
                    60:b2:8d:af:1c:31:6f:42:04:c4:0b:0e:ed:3f:b1:
                    e0:d2:26:81:7e:ec:0a:be:fc:8c:02:3a:a8:01:04:
                    27:c7:a1:73:cc:74:04:97:35:77:80:18:ce:56:57:
                    94:7d:ce:ef:85:af:47:a0:d5:bd:49:ba:b3:ec:5a:
                    3a:c9:a1:d8:04:12:79:d6:6e:e4:e6:e0:1c:78:a7:
                    66:9f:d7:4e:ee:2e:fd:dc:37:c4:f5:5b:6d:c0:68:
                    88:db:5d:09:2c:9a:94:79:2b:5e:fa:cd:7f:eb:05:
                    e2:4f:72:8b:ce:a6:47:f4:3b:fe:c3:e4:59:70:62:
                    e2:77:0e:61:7e:96:e9:0f:07:96:21:16:0c:c8:af:
                    3a:eb:66:86:7d:cc:86:25:91:30:b0:1b:f2:cc:65:
                    72:f5:3e:07:11:e9:73:15:8b:d7:f1:e6:82:cd:4b:
                    62:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:AD:F1:28:A8:31:DC:F7:07:A7:CC:BA:90:4C:05:3E:CE:9F:64:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/b216376c-c660-3cf3-b721-6550c616d3cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:74:62:fc:7d:aa:a6:ba:24:29:5c:9c:e1:97:e8:fb:b4:e2:
         98:67:c5:95:6b:5e:dd:71:23:d6:e6:e9:d2:12:c0:ba:3e:26:
         c6:ff:03:58:0a:c0:47:37:19:08:6f:aa:44:41:e5:0f:4e:42:
         80:08:dc:45:b5:f1:79:27:7f:61:82:b0:8a:a2:e0:9e:43:8e:
         73:13:25:ab:19:e4:41:60:ee:91:27:16:ec:fa:c1:5f:ea:34:
         c5:ee:65:65:93:59:23:02:ad:5d:a6:cc:8b:f3:87:56:43:22:
         d6:ae:c9:cb:9e:56:1c:7b:83:11:00:31:1a:8b:a5:e4:d7:26:
         e0:fe:34:f6:32:ed:a7:71:35:35:df:d3:79:6f:e2:23:cb:76:
         b1:9b:b0:83:04:be:7f:83:20:92:63:a7:2b:55:4d:02:3c:e6:
         6a:80:d6:9c:d0:66:72:db:bc:23:dd:a6:89:79:e4:d0:43:48:
         36:36:e7:b3:a0:d6:5f:6d:b2:c4:f4:f1:c6:5e:73:4b:e3:2d:
         9c:a2:cc:00:97:a7:ac:e7:8d:5b:b5:b3:41:b5:f8:95:5c:b2:
         75:47:ba:7b:d0:87:fc:29:ca:4f:ac:ef:f2:9e:f9:2d:04:9c:
         04:3d:61:71:35:f8:da:80:ac:5b:7b:a1:70:4c:87:b9:aa:fb:
         c6:64:cc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:45:10 2025 by rpki-client