Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/fccd2d6b-b059-3f6f-98b6-bd33fb0ea38f.roa
File:                     fccd2d6b-b059-3f6f-98b6-bd33fb0ea38f.roa (raw, json)
Hash identifier:          3Ac1kM3/zpYe2ch0bqp3Ktuu29iO3vRvpu6lFcvPcvg=
Subject key identifier:   82:30:85:6C:C4:8A:84:51:CC:11:0D:BB:52:53:36:E5:B7:E6:6D:04
Certificate issuer:       /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial:       010D0C9F4328584ADA9BC78B994F3DE7C0C6EBE0
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/fccd2d6b-b059-3f6f-98b6-bd33fb0ea38f.roa
Signing time:             Thu 14 Aug 2025 13:00:41 +0000
ROA not before:           Thu 14 Aug 2025 13:00:41 +0000
ROA not after:            Wed 12 Nov 2025 14:00:41 +0000
asID:                     394708
IP address blocks:        216.255.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:da:9b:c7:8b:99:4f:3d:e7:c0:c6:eb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
        Validity
            Not Before: Aug 14 13:00:41 2025 GMT
            Not After : Nov 12 14:00:41 2025 GMT
        Subject: CN=3cc62b13-924b-4615-bd33-ffc1f1392620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d9:99:47:34:67:a9:90:56:b8:6d:53:d8:08:
                    39:93:10:ba:99:c4:da:34:d0:55:39:d6:c8:fc:c4:
                    45:71:29:4c:cc:e9:27:44:f7:c7:8e:13:90:d7:2d:
                    a7:65:08:e5:f2:a6:36:60:70:ca:0e:3f:79:44:26:
                    1a:38:58:27:ff:70:45:92:d8:3d:fe:62:bb:21:d9:
                    78:38:d4:d6:fe:6e:34:8f:2a:45:8c:22:d4:46:99:
                    aa:b8:ed:87:90:3f:e8:72:52:2b:8b:a0:63:a2:be:
                    b7:e5:79:6c:a1:5f:57:d2:6a:01:d4:50:f2:8b:46:
                    b0:97:da:ed:cc:6b:f4:c2:d5:81:6e:c6:7b:84:de:
                    7f:15:c9:a8:71:a4:5d:b4:18:7e:fa:30:fa:28:75:
                    f3:60:0c:3c:13:ab:b1:30:f2:63:9c:d6:21:b3:c4:
                    77:14:b7:4b:5a:37:4f:d0:93:39:d3:a8:97:24:49:
                    6e:cf:42:42:e2:68:54:c1:de:1d:70:1f:f5:bd:85:
                    a8:58:5e:76:c3:b9:80:3d:5d:e7:32:01:7d:5f:f9:
                    bf:f8:d4:2e:c9:cb:f3:36:19:2f:10:03:ec:f6:22:
                    67:1f:96:7e:4b:d3:24:e7:dc:1b:39:1d:a4:16:db:
                    2a:02:81:5a:f9:1a:c1:24:7f:ce:7b:7e:17:41:d3:
                    e4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:30:85:6C:C4:8A:84:51:CC:11:0D:BB:52:53:36:E5:B7:E6:6D:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/fccd2d6b-b059-3f6f-98b6-bd33fb0ea38f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl

            X509v3 Authority Key Identifier:
                keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.255.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:80:6b:41:ea:2c:73:ed:fd:3a:13:65:72:87:d0:68:59:14:
         61:68:d1:9a:68:0e:f8:5d:44:e9:82:34:4f:2f:6d:46:d8:09:
         36:08:bd:c6:cd:58:96:dc:c5:3e:27:63:78:94:66:83:be:2a:
         c1:8e:ab:56:3c:50:5a:38:b1:4c:6b:ce:3b:a3:58:6d:63:23:
         65:4f:2a:37:d3:22:ce:b0:82:36:ce:92:79:68:92:54:22:f8:
         32:a6:82:e8:03:fb:8a:36:1d:ee:86:23:4f:cb:7a:3b:46:1c:
         ab:94:b1:71:3c:79:d3:ba:72:a9:5d:3d:56:ba:78:c0:3b:a1:
         bd:87:4a:2d:18:b3:af:ea:50:0f:d5:98:94:09:9a:3f:06:77:
         74:96:07:12:5a:55:6e:32:73:c9:c1:9f:07:18:b4:9e:00:a8:
         0d:c8:17:50:d5:f2:cd:bb:06:a2:e5:e1:b7:7d:ad:8e:bf:59:
         39:8e:35:fa:b8:9e:05:80:ad:90:11:70:18:d1:ff:b6:e8:fa:
         98:c5:14:ee:36:23:ff:82:2e:a9:f8:4f:24:d2:4a:75:78:96:
         c8:d5:96:1c:34:ec:8a:b0:7c:2b:e8:2c:3e:02:28:be:aa:1c:
         3c:6b:34:9d:42:8a:7e:a4:8d:60:74:2d:a9:13:55:4b:9d:f9:
         fd:e9:77:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:07:50 2025 by rpki-client