Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/402aa7d1-fd12-3d3b-8452-bd4c206c64e6.roa
File:                     402aa7d1-fd12-3d3b-8452-bd4c206c64e6.roa (raw, json)
Hash identifier:          FWIIg6BFAMQrJEiOVGauhCRmU6OUCeS/ikUFB7Zd2bo=
Subject key identifier:   2D:D1:EF:86:28:05:0B:0C:96:94:9E:20:F4:EA:3E:1C:96:17:60:C5
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584B1806CC764E33113F9647F480
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/402aa7d1-fd12-3d3b-8452-bd4c206c64e6.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     62651
IP address blocks:        216.131.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:cc:76:4e:33:11:3f:96:47:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=d1748ef6-41ca-4ea3-9d57-77058134e479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b6:97:c8:5c:46:ca:0c:f2:dd:be:28:c1:fd:
                    5b:36:12:fc:ca:79:6f:7e:8b:2a:10:49:7c:3f:bd:
                    7c:94:6f:4a:a2:12:af:c6:4e:27:7e:d3:d7:30:a6:
                    56:b2:32:85:80:75:0c:dd:33:e7:50:59:05:19:6b:
                    e5:44:c0:38:29:4a:24:05:5c:3b:1e:68:76:dd:c8:
                    35:76:70:9c:85:68:a6:9f:fe:d6:2c:6d:fe:f5:b1:
                    00:41:6b:9f:58:4f:82:85:17:1a:00:d5:da:2a:cf:
                    a4:63:32:c9:e5:82:9f:2c:70:8d:f6:56:0e:df:24:
                    7d:eb:fe:55:bd:ee:fe:ed:88:14:5e:1a:28:d8:bd:
                    1f:b3:84:ff:9b:56:bf:51:65:2c:a1:26:ae:9d:c5:
                    5b:2a:26:6f:88:3b:eb:6d:82:f8:18:96:e4:38:89:
                    1c:dc:33:0b:52:d6:0c:e1:3b:62:64:18:c1:87:f3:
                    9a:e5:7e:45:36:26:a8:3c:f2:04:c2:df:63:fa:71:
                    99:a9:73:97:8b:29:70:f2:36:de:32:b3:ad:c9:4f:
                    bd:50:af:dd:b5:13:52:e6:0c:da:ac:d4:58:ff:7e:
                    68:a1:b7:29:2e:ac:6b:4f:99:1d:36:02:95:b5:b6:
                    0a:19:15:2f:3a:f9:b7:df:46:79:05:b3:29:c5:9a:
                    76:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D1:EF:86:28:05:0B:0C:96:94:9E:20:F4:EA:3E:1C:96:17:60:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/402aa7d1-fd12-3d3b-8452-bd4c206c64e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.131.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:94:91:d5:43:68:48:a0:af:c8:2c:a0:ec:5a:16:39:c1:61:
         8a:0c:a2:52:32:c9:b6:e8:7e:0b:21:8e:cd:e1:77:c3:a3:5d:
         79:9d:40:d3:38:cb:92:db:9d:d9:7e:61:63:16:e8:c6:f8:84:
         25:5c:f7:14:c0:6f:85:b4:25:ea:f5:e4:98:37:f4:5f:0e:fd:
         81:9c:fc:d1:ca:87:d0:fe:9e:18:b6:03:6d:fe:9c:dc:77:fc:
         1f:b3:37:de:fc:b4:38:5e:c7:92:38:fe:58:29:ab:88:44:19:
         26:93:44:df:01:6c:db:b5:44:43:aa:cb:85:91:a1:fd:ad:93:
         10:90:3b:90:bd:42:df:f8:a9:2a:15:80:76:f4:c4:fa:a4:d3:
         d5:3a:16:16:af:13:62:7a:b5:b6:68:f9:4c:cb:cc:bf:7b:97:
         63:dd:06:7f:18:ec:02:c5:36:67:43:e8:b3:e7:6c:34:47:bd:
         53:a2:8a:33:32:63:09:f5:20:74:b5:75:c2:01:73:32:d3:ef:
         bc:5e:33:f8:2f:22:ff:b5:70:68:6c:a1:68:69:b6:26:2e:6a:
         bf:8a:35:a1:f1:3f:68:eb:86:45:bb:91:e0:0c:95:ee:90:9f:
         c3:60:e5:a3:c4:a9:8e:06:3d:2e:e4:69:13:ba:c9:ef:73:f9:
         59:83:8f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:09:22 2025 by rpki-client