Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e7685d9e-79c5-3bc9-bb3e-351b1bb0b369.roa
File:                     e7685d9e-79c5-3bc9-bb3e-351b1bb0b369.roa (raw, json)
Hash identifier:          gRiK1cFylAzaQZYB9LQzdRNmTpeGf8mygqIp4DoFisY=
Subject key identifier:   8D:E6:F9:E7:45:40:54:70:0B:EF:36:6A:A0:3B:2D:3A:E1:53:33:0E
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584B8EACE70B9046B6094E355880
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e7685d9e-79c5-3bc9-bb3e-351b1bb0b369.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     62240
IP address blocks:        216.169.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:e7:0b:90:46:b6:09:4e:35:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=63a00131-06bb-4553-952d-f7facc72db7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b4:21:d9:69:c9:c4:5e:95:cd:60:57:a3:3d:
                    2b:0e:93:94:93:29:b9:ff:83:a4:af:b7:e7:27:10:
                    a0:6f:00:90:6e:a8:8a:9d:14:eb:7c:1a:f8:18:04:
                    b9:17:62:3e:fe:46:07:7d:b9:b9:30:01:25:2c:e5:
                    1c:2d:e4:ed:78:5a:7d:c0:6d:25:e2:71:c9:e0:a6:
                    89:ff:45:0a:19:05:1b:2e:28:b7:55:0b:dc:fb:1c:
                    9e:97:47:a1:9a:3e:c0:d5:7f:e1:4e:f9:91:ab:4a:
                    28:d1:64:64:4e:be:4e:ee:05:c3:ad:40:f3:d4:2b:
                    5e:54:5a:72:fd:f7:d8:84:57:6d:4e:a3:91:07:dd:
                    b3:38:0a:1a:6f:42:12:c7:12:25:b3:e8:7f:e0:f6:
                    62:d4:04:e3:5c:db:7c:54:a0:d7:f3:86:f6:a8:1b:
                    4d:00:ac:45:62:aa:8b:13:d0:2d:c6:fd:d2:58:e7:
                    63:95:b4:a2:2b:ba:10:d4:f7:1c:56:4e:04:db:53:
                    69:67:a3:6d:4c:ff:c5:7b:20:9e:0d:0e:f3:e3:10:
                    c9:c0:04:5f:f8:69:df:ce:e1:c7:c2:df:e2:dd:5b:
                    73:fd:c0:2e:88:da:84:cf:0e:68:b9:f2:d7:5a:38:
                    da:ea:a3:54:87:cf:50:47:d6:ae:da:69:22:ba:cc:
                    8a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E6:F9:E7:45:40:54:70:0B:EF:36:6A:A0:3B:2D:3A:E1:53:33:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/e7685d9e-79c5-3bc9-bb3e-351b1bb0b369.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.169.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:f3:86:43:53:bf:39:9b:a5:52:c1:70:d5:73:53:d2:bb:c9:
         a2:b2:57:8b:a8:16:7f:d7:dd:08:e4:ea:7c:5c:56:c8:ee:f0:
         a0:63:8e:ed:26:d3:7c:ec:34:00:9d:09:d9:c0:96:c4:a1:a1:
         6c:0d:c5:77:5e:74:67:94:87:9f:56:0e:ae:ff:55:0a:e9:98:
         d0:3f:a5:3c:df:c6:8c:09:ec:47:26:f3:23:1d:39:ac:31:37:
         67:28:01:23:de:2e:26:11:b1:4b:87:b5:cd:9d:15:9c:a3:6f:
         87:62:30:bd:9d:ab:83:74:a2:79:0c:db:44:81:7e:83:62:a2:
         58:ce:c8:d3:32:6b:3c:07:44:10:dd:77:0e:6d:91:cd:8f:90:
         29:2f:b7:92:c5:38:b0:46:69:ba:2e:ff:39:c7:26:50:c5:be:
         52:f9:e6:f2:99:87:47:b7:0d:be:7d:3e:bb:1f:d5:03:01:a4:
         01:16:66:47:63:34:87:21:44:4d:01:d7:94:73:b0:b3:f1:5e:
         2c:7a:c9:3a:72:a3:be:07:b6:3a:db:2c:c4:c1:09:b6:12:fe:
         f4:4b:1e:17:09:c4:e0:65:eb:10:04:c1:74:ad:80:9e:0d:98:
         9a:d7:28:19:3d:c6:66:03:f0:f5:06:eb:68:11:3c:fd:ad:1b:
         b2:b9:20:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:29 2025 by rpki-client