Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/7518a639-5e46-32d5-bd76-7cd0192b9dc8.roa
File:                     7518a639-5e46-32d5-bd76-7cd0192b9dc8.roa (raw, json)
Hash identifier:          vi+U/jO39V1cUuxR5zO7BkcRGLITDCeGDJIBYxrZNvo=
Subject key identifier:   B0:18:D2:49:2C:F1:22:1B:BB:50:B2:22:6F:F4:94:D0:9F:23:75:D9
Certificate issuer:       /CN=efead3cb-1d38-407f-ba06-8e276b067238
Certificate serial:       010D0C9F4328584B84E77734C0ADCBDAB7C9A300
Authority key identifier: 34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/7518a639-5e46-32d5-bd76-7cd0192b9dc8.roa
Signing time:             Tue 14 Oct 2025 13:00:37 +0000
ROA not before:           Tue 14 Oct 2025 13:00:37 +0000
ROA not after:            Mon 12 Jan 2026 14:00:37 +0000
asID:                     16509
IP address blocks:        216.238.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:84:e7:77:34:c0:ad:cb:da:b7:c9:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efead3cb-1d38-407f-ba06-8e276b067238
        Validity
            Not Before: Oct 14 13:00:37 2025 GMT
            Not After : Jan 12 14:00:37 2026 GMT
        Subject: CN=e4bb75eb-0092-4144-9f59-fc1fb0071bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d5:8d:3c:20:b0:22:33:a5:6a:a2:de:34:6c:
                    42:e1:b6:bf:70:ee:6e:2f:f9:15:ce:71:52:21:e3:
                    e8:1a:28:83:ad:bf:92:bb:76:51:49:44:a9:ce:ce:
                    e6:ba:57:77:6d:7b:47:38:b9:6a:4b:47:c3:35:c2:
                    c1:1e:9b:b5:9a:9d:4a:67:5b:2d:ee:fe:ef:bc:39:
                    8a:dd:86:ad:a1:33:d1:09:8c:31:a6:86:0f:7a:8a:
                    b0:a4:54:b1:80:91:6a:f5:5a:37:8b:f9:64:56:8b:
                    44:10:98:b1:c7:6f:7b:c1:10:1c:a9:62:ac:1f:05:
                    50:32:e0:08:28:83:00:93:99:d6:3a:28:d0:0d:53:
                    b3:2e:c2:ef:8e:4f:c9:2b:72:b3:2d:4d:45:e9:e6:
                    84:63:6c:7a:85:45:35:88:df:24:cf:8b:52:82:3e:
                    99:f3:34:e0:0f:bb:91:16:e9:a4:ea:1a:cb:87:ae:
                    00:a2:bc:2e:64:29:d5:63:5c:ed:f8:31:89:9f:c2:
                    71:89:92:c1:0e:9b:17:64:d6:2f:40:23:b8:82:97:
                    66:79:ae:85:26:5a:dc:30:04:d7:30:4b:5f:cf:26:
                    52:41:9f:e1:58:3e:7f:aa:ae:81:6b:a8:52:a4:f0:
                    65:9e:39:54:06:f7:08:77:9d:23:5b:96:84:19:9d:
                    60:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:18:D2:49:2C:F1:22:1B:BB:50:B2:22:6F:F4:94:D0:9F:23:75:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/7518a639-5e46-32d5-bd76-7cd0192b9dc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl

            X509v3 Authority Key Identifier:
                keyid:34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:95:82:a3:e4:c7:46:22:64:7f:31:30:29:e4:53:ac:17:f1:
         1c:3c:d4:e0:cd:92:ae:be:7e:ac:c8:3a:4d:92:73:3b:bf:ca:
         dc:4b:a0:1c:f2:2a:79:c3:ab:5a:49:24:b1:fc:b6:08:ca:07:
         d6:b6:eb:61:39:15:97:79:d6:0f:fe:5d:df:67:f3:1d:60:eb:
         0d:55:01:87:30:f2:8f:22:0d:e2:d8:f7:80:da:04:11:79:19:
         b0:de:5e:ea:e0:f1:81:05:09:d9:88:eb:3e:6c:2e:f9:38:8d:
         74:7e:8a:7d:82:c6:82:c2:41:ac:00:ea:ff:e1:97:62:9c:5d:
         c5:32:59:e2:84:11:e3:6f:e5:12:28:f8:e8:58:e5:3e:78:2e:
         8b:ed:7a:9f:ec:6e:17:ca:24:4c:1e:5e:cd:32:7a:84:bb:c9:
         3f:54:7f:ef:14:68:df:d6:b8:9a:9c:54:17:d6:46:a9:19:43:
         83:32:9d:78:b9:f4:e1:96:42:c8:f1:35:fe:04:5a:de:10:68:
         cd:3c:c6:31:45:0c:a0:48:69:00:77:96:60:e1:3f:16:f1:c5:
         d2:ae:70:ad:67:74:d2:8c:0b:3d:1e:95:5d:8c:54:91:a1:ff:
         c6:f7:48:c7:88:5d:bd:ff:2b:1b:3d:0b:80:cd:c7:26:af:9b:
         da:44:b0:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:28:09 2025 by rpki-client