Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/102ce021-8612-3b85-b74e-5a2ec2f9e00d.roa
File:                     102ce021-8612-3b85-b74e-5a2ec2f9e00d.roa (raw, json)
Hash identifier:          uUz/x3DfshIS9wgbwDnYgij7iGjOpTzSS21Z54rfWYg=
Subject key identifier:   5B:F8:EB:50:D1:8B:1F:66:7B:36:13:93:48:3E:57:25:3B:93:F5:58
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B6BC77AF2B79FCFECE6E00E40
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/102ce021-8612-3b85-b74e-5a2ec2f9e00d.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     396581
IP address blocks:        216.168.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:7a:f2:b7:9f:cf:ec:e6:e0:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=fabe137b-193f-4c35-9405-b29648d6b9bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:9b:4c:f6:86:bb:e0:34:58:d6:a6:15:46:3d:
                    94:8b:86:fe:ba:b8:87:ff:9b:e2:08:1b:f2:82:a3:
                    e0:45:64:90:4c:68:0a:29:2d:a5:da:f5:b0:d7:69:
                    69:2a:81:e7:9d:3d:f4:57:ca:68:e7:9c:76:d5:3e:
                    05:34:8b:09:fc:50:8f:d1:d2:9a:0c:bb:a3:4e:af:
                    08:c6:31:39:2b:6f:dd:9a:f0:3c:12:f1:fe:4b:a4:
                    89:81:ae:4a:cf:0b:32:f6:bb:9e:69:fb:dd:00:70:
                    18:95:c4:25:8c:fc:c1:49:6b:eb:88:7b:57:b6:87:
                    9a:54:7d:18:e4:bc:03:c4:30:71:11:58:66:a1:8c:
                    6d:97:33:97:6b:90:e7:24:f1:2d:43:9e:3c:36:7a:
                    e7:58:89:b7:41:a9:10:d8:8c:41:69:e5:14:e4:9b:
                    52:52:47:82:e7:b7:62:67:fe:df:9d:3a:6a:16:f7:
                    28:73:40:5b:b1:d0:27:02:5b:32:fd:60:02:eb:aa:
                    62:ab:3b:ad:bd:54:0b:36:49:8b:de:d1:7a:b5:cc:
                    36:ee:0e:41:62:e7:b3:d8:1d:75:33:80:4b:28:45:
                    e9:39:68:0d:80:f1:be:27:3b:d0:5c:95:65:1e:63:
                    11:fb:6b:16:8c:4e:aa:38:74:b8:51:e5:1a:b5:53:
                    81:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:F8:EB:50:D1:8B:1F:66:7B:36:13:93:48:3E:57:25:3B:93:F5:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/102ce021-8612-3b85-b74e-5a2ec2f9e00d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:06:45:10:92:21:75:20:c3:68:a7:80:fe:a9:f8:98:e1:88:
         ab:6a:ad:fa:27:45:4a:69:8e:9a:e7:4c:bc:91:96:63:87:a3:
         61:df:48:c6:3e:a3:cb:d2:d1:62:17:1f:96:3f:29:9f:65:c1:
         7f:ee:8d:5c:f1:b3:ec:86:35:0f:bf:19:68:35:7d:32:14:8c:
         2f:90:2b:b3:ef:08:aa:20:0d:65:21:b1:c9:40:33:97:01:a4:
         76:73:2a:f9:fb:9d:4c:3b:19:c8:68:5b:8c:53:c3:8f:38:30:
         5c:6b:e3:3e:82:72:b2:e1:1d:3d:34:d5:8c:bf:8b:68:ef:dd:
         11:b4:5c:30:0d:a8:50:68:31:58:92:be:f4:4b:43:d7:03:16:
         ec:4b:45:a5:e4:e6:99:69:81:0b:43:15:6e:20:c9:16:3c:01:
         0e:87:8d:3d:be:ab:f8:33:b4:3a:3a:4c:f7:db:1a:97:27:5b:
         16:b5:20:cf:e1:66:73:c1:a2:c2:af:6e:90:a1:65:03:8e:60:
         4d:90:82:73:f6:44:2d:47:02:87:84:8c:6a:86:d0:33:8c:50:
         d9:92:c6:8a:f9:10:cf:44:96:e8:0b:3e:f7:06:b2:d2:65:42:
         9b:8e:7f:91:6b:26:3c:2e:f6:09:0f:dc:54:59:ef:84:e6:90:
         37:ff:17:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:20:56 2025 by rpki-client