Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/7fe2765a-c49b-36f5-8e9c-f00562ab17e0.roa
File:                     7fe2765a-c49b-36f5-8e9c-f00562ab17e0.roa (raw, json)
Hash identifier:          cxkYjpBPDW2xHDz9LtiCwzfBPUjDSAFjigmq5GNfSDU=
Subject key identifier:   34:63:74:0D:18:82:A3:71:7B:1C:7E:0F:17:56:F1:60:23:36:5B:80
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F4328584AEE2682F7EBA87FAC8D94FA00
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/7fe2765a-c49b-36f5-8e9c-f00562ab17e0.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     36231
IP address blocks:        216.126.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:82:f7:eb:a8:7f:ac:8d:94:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=0aea7ee1-47f7-4b9e-865a-572255429466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:da:37:b3:9d:24:59:de:60:91:db:9c:88:9c:
                    87:32:93:9c:bf:72:2f:a7:7e:78:e4:c8:68:30:c9:
                    37:8a:c6:57:74:36:4c:ad:cf:c1:27:0f:ef:18:da:
                    b3:38:6f:8a:09:4a:c0:96:ff:c4:6a:1c:7e:b2:d9:
                    97:9c:c0:3f:dc:27:8a:dd:26:07:da:66:67:f5:2e:
                    2c:d7:04:4d:96:b6:5f:50:a8:61:02:f4:b5:d8:3c:
                    7e:1a:a0:41:2b:3b:3b:87:7d:d5:f6:3c:6d:d6:7f:
                    ad:41:6c:38:ef:a0:d1:72:ee:37:1e:a1:d5:4e:86:
                    1a:22:30:b6:53:ed:8b:ed:0f:50:f9:b0:7e:cb:d7:
                    fd:75:82:43:b3:ea:1d:a9:b5:b0:bb:22:18:61:97:
                    85:3d:95:26:46:42:19:53:c8:86:e0:58:84:40:fc:
                    ea:95:8b:90:3b:6c:4e:6a:6a:00:a8:bf:27:35:ee:
                    87:b5:a5:d5:3a:35:ba:b0:41:af:6c:87:68:55:10:
                    90:85:01:ec:94:7b:e3:31:c7:98:f2:2a:9f:71:e1:
                    21:87:be:93:58:1f:3e:8b:ee:0c:ef:8c:b4:6d:ee:
                    58:01:ee:36:b8:99:a1:3c:e8:d2:59:49:33:e9:1a:
                    02:9d:19:56:ec:e3:26:73:1d:70:fa:d3:aa:07:7f:
                    01:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:63:74:0D:18:82:A3:71:7B:1C:7E:0F:17:56:F1:60:23:36:5B:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/7fe2765a-c49b-36f5-8e9c-f00562ab17e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:26:7d:34:24:92:b6:1c:a1:3c:4c:4b:81:4c:65:24:1b:6f:
         10:d2:22:35:98:1c:97:d4:21:95:96:f1:6a:04:75:d1:24:d6:
         e1:dd:81:b1:af:cd:4a:b0:95:4b:f6:14:25:34:56:6c:27:cc:
         a1:88:48:00:a9:38:69:3f:c3:42:df:4d:28:ac:f1:b0:dc:8d:
         92:8b:ce:5b:63:49:5d:99:77:37:19:a0:0d:03:f3:8e:d9:d6:
         c3:a3:2f:44:dc:36:82:d9:38:50:a7:ad:bc:99:93:f9:ee:48:
         fe:32:5a:44:44:49:6c:bb:3a:d5:96:6f:12:5f:1a:0e:5c:d2:
         f4:dc:e7:c6:b7:5b:cb:06:8c:25:3f:87:43:d6:28:a5:42:17:
         59:f7:7b:df:35:d1:1b:3c:80:b5:37:39:45:dc:52:8b:db:89:
         02:1f:1f:73:53:26:15:3c:2d:b2:ac:0b:34:84:29:57:e6:04:
         4d:e7:c1:65:7b:07:2d:6f:30:04:6c:ec:ed:f3:2d:5c:1b:67:
         f3:8e:b1:db:b1:dc:2d:08:df:09:23:2e:c8:70:b3:0e:d4:ed:
         71:91:6c:39:2d:88:4a:ba:70:10:5c:d0:8d:9d:38:e2:1a:ea:
         0f:3f:b6:6c:41:83:c1:d3:f7:74:88:59:b2:3f:24:88:7a:8c:
         36:de:ef:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:44:36 2025 by rpki-client