Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/1ae4996e-0a4b-3bfd-9fb1-20f2aa7f8ba7.roa
File:                     1ae4996e-0a4b-3bfd-9fb1-20f2aa7f8ba7.roa (raw, json)
Hash identifier:          r2iVfeeN1+J7vCw9ONNOqlg0P1vTHqlfTi4lFR7jpWo=
Subject key identifier:   C2:38:2A:06:7C:EC:BD:6C:3C:40:79:0E:98:B8:BF:7D:54:46:92:66
Certificate issuer:       /CN=a47e2843-16e1-4ed0-acc2-7a942bfc46ce
Certificate serial:       010D0C9F4328584AC8764D2C3E905274C2E86900
Authority key identifier: EF:9F:F6:47:56:F0:E2:3D:69:AA:68:94:D7:E1:F8:8E:B7:CE:01:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/1ae4996e-0a4b-3bfd-9fb1-20f2aa7f8ba7.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     397373
IP address blocks:        216.87.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:4d:2c:3e:90:52:74:c2:e8:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a47e2843-16e1-4ed0-acc2-7a942bfc46ce
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=38bb8ff9-82e3-4b94-8f98-8c3e5cdb9bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:90:0a:56:c9:3f:b3:e1:8d:a6:2f:71:42:13:
                    69:82:9a:31:53:d2:68:ca:68:05:96:2d:f9:bd:1f:
                    64:7a:3b:88:de:8c:c6:a4:41:f7:8a:7a:4c:a4:83:
                    b9:39:42:e8:2b:2c:98:1a:89:52:98:31:6c:92:08:
                    b8:92:ed:6f:8a:45:96:c9:d5:3d:91:0a:5e:dc:9f:
                    c5:86:66:26:a9:e2:2e:dd:8f:38:ba:54:0d:c1:17:
                    23:9a:35:ea:8f:eb:68:15:47:18:98:93:24:eb:4d:
                    05:92:03:fe:7c:f5:07:b5:1e:27:f4:11:d5:ab:8d:
                    86:9b:56:45:1f:c9:4d:08:0c:6b:b2:c7:7c:07:30:
                    f5:ec:26:63:7e:9a:3a:a3:87:bd:9d:31:19:19:b4:
                    2b:bc:ab:74:3d:d4:17:5b:bd:2d:3a:e7:24:5d:81:
                    25:5a:fd:fc:5f:80:a2:b3:94:c4:7d:31:ed:3f:d4:
                    19:c4:70:7f:07:a7:42:33:2b:c4:c4:3f:ee:f5:59:
                    ec:73:54:11:7f:f7:f0:71:e7:26:39:aa:7f:54:99:
                    29:85:51:11:6f:82:bd:82:f3:fe:25:7d:be:db:33:
                    e1:a9:60:b8:fe:24:b7:94:00:e7:a9:9f:79:6a:fa:
                    9b:ac:32:3e:d2:50:40:8f:96:43:f9:30:f4:14:fe:
                    c4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:38:2A:06:7C:EC:BD:6C:3C:40:79:0E:98:B8:BF:7D:54:46:92:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/1ae4996e-0a4b-3bfd-9fb1-20f2aa7f8ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.crl

            X509v3 Authority Key Identifier:
                keyid:EF:9F:F6:47:56:F0:E2:3D:69:AA:68:94:D7:E1:F8:8E:B7:CE:01:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:99:24:97:b8:e2:02:5e:8e:66:01:3c:5c:4c:d7:89:ba:59:
         0b:4d:a6:57:99:0c:10:99:34:4f:46:42:c6:02:7c:37:d2:8d:
         0b:db:62:f9:b7:e4:50:52:67:b4:0e:94:b0:dc:c6:a1:d3:2a:
         10:9d:4d:50:14:70:0a:a6:e0:26:63:8c:68:9f:85:17:91:3d:
         5d:13:4e:c3:fc:d9:4d:0b:24:ec:94:3a:d2:69:fd:9a:37:c2:
         10:12:1b:27:55:bf:73:75:b6:bc:98:bb:86:25:b9:ed:ce:86:
         52:c6:16:22:d2:c6:76:1f:90:08:18:43:1d:69:8b:f8:2d:19:
         58:d4:4a:aa:6c:58:8c:54:b7:eb:41:11:73:f1:f8:25:54:2c:
         cf:d9:cc:45:78:dc:04:bd:3f:ed:e5:78:61:10:e1:45:c2:b6:
         39:d4:7a:73:d5:fb:af:d0:25:7a:e3:4a:f9:fd:96:9c:fb:8c:
         13:9e:29:f2:82:f2:fc:80:78:ca:2f:f8:92:d4:1b:f9:1a:da:
         3f:b4:85:d8:48:17:f5:86:c5:b1:85:1e:74:97:40:18:65:6b:
         ca:11:63:0c:e1:cb:6e:b0:c3:27:4b:fa:39:9d:52:94:26:fd:
         39:11:cc:24:f7:a1:cf:f4:1a:62:8d:5d:88:26:69:a1:a8:22:
         86:c4:9a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:56:30 2025 by rpki-client