Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/4db02882-9972-309e-8162-dbdd8d5ea807.roa
File:                     4db02882-9972-309e-8162-dbdd8d5ea807.roa (raw, json)
Hash identifier:          wRX0jZZ+Ipr8PqrIZT6y47YLJIl8tiWDb1uhyUB3Mnk=
Subject key identifier:   5C:6F:DC:85:71:E1:38:7F:DF:0A:71:F0:C6:80:6C:0F:91:91:5C:6D
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584AC5AB929ABBC47D882CA46380
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/4db02882-9972-309e-8162-dbdd8d5ea807.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     16696
IP address blocks:        216.120.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:92:9a:bb:c4:7d:88:2c:a4:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=9cbcb9ff-9019-4d30-8842-5d699e86d97f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cc:42:83:18:46:01:21:b0:c7:21:ef:7e:9e:
                    a3:ab:56:68:24:9a:3b:39:3d:29:ca:27:ab:df:04:
                    84:0e:48:a2:fe:0f:3e:f1:7a:90:12:b0:de:e7:03:
                    d2:d2:82:2c:ea:45:7d:62:6b:d7:63:33:1f:9b:57:
                    b7:64:03:05:c6:94:06:c0:d7:dd:e8:9b:3c:25:19:
                    68:e8:4f:b1:85:3b:5e:4f:23:2b:02:50:17:7d:2c:
                    c5:7a:f4:9c:6d:c6:3c:e2:d6:0d:f3:46:54:ba:da:
                    a7:16:fa:b7:01:c8:9f:98:34:a8:6e:ae:e3:6d:e8:
                    dd:97:4c:2b:57:d7:7d:95:a4:82:1e:52:dc:90:b3:
                    c9:3f:90:43:9e:75:e8:b7:a6:72:19:1f:fe:0b:d4:
                    b0:58:53:92:af:a9:f8:7a:85:88:78:92:fa:52:34:
                    ef:51:8a:e7:6a:4f:05:22:3c:57:8a:c5:d8:6a:14:
                    2b:a8:70:3b:8a:2d:f7:bd:2c:2d:8c:86:7a:64:3d:
                    24:7f:35:0e:41:5c:f9:e5:85:13:8d:3b:46:4b:ec:
                    93:6e:b2:83:03:13:6b:e9:b2:b2:42:86:35:26:ee:
                    3b:d6:1b:09:54:31:69:bf:3a:d1:5c:5f:ac:43:3b:
                    7f:0f:6d:f6:8f:03:79:d0:f0:73:97:59:2d:90:75:
                    96:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:6F:DC:85:71:E1:38:7F:DF:0A:71:F0:C6:80:6C:0F:91:91:5C:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/4db02882-9972-309e-8162-dbdd8d5ea807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:5e:19:52:82:a7:b5:41:8d:54:ea:59:63:c2:37:01:28:d6:
         11:4f:03:30:9f:b8:bd:ea:3b:ab:6f:00:6e:1f:dd:84:fa:f5:
         af:36:da:e7:27:e6:eb:fb:a6:a2:09:dd:40:c3:30:02:85:cc:
         3d:6f:55:b7:2a:d2:12:fb:27:4a:19:54:10:f0:3b:56:3c:01:
         d2:e2:32:b9:ac:6e:8a:96:f9:94:ba:30:ba:ea:71:af:34:81:
         ee:5a:55:65:12:8a:38:d7:2d:ab:a5:4a:a9:39:fb:04:83:49:
         61:ae:61:d7:5e:b3:9f:c6:19:e5:ec:3f:06:d1:61:7c:38:b2:
         fb:06:c3:ed:fb:c9:5b:a7:99:17:a0:bf:df:4a:d0:79:f9:88:
         1d:01:62:a9:67:70:a5:83:27:fb:d2:dd:c5:01:c1:98:ba:2d:
         b7:05:a8:a3:5a:cb:8b:58:e7:d1:37:86:e1:c6:33:d8:7f:e2:
         68:9f:a7:62:50:05:ea:8a:2d:79:38:a6:af:fb:ca:1e:2c:f5:
         07:4b:6d:76:50:8a:8c:3f:c0:dc:8d:b3:5d:a7:52:0d:5e:e9:
         02:9e:1e:7a:f1:94:6e:46:2b:f3:a7:74:91:13:49:b4:7e:14:
         e7:ba:6b:42:71:be:38:dd:98:e3:f7:f7:9d:d9:e9:6b:b0:27:
         4d:b6:f7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:17:38 2025 by rpki-client