Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b610ba4-3b85-3a38-a54d-2fd8309009cb.roa
File:                     9b610ba4-3b85-3a38-a54d-2fd8309009cb.roa (raw, json)
Hash identifier:          fgry0N4qOdP6HflyY1rs8lWoQEWpXmUuJOIH7TpOz/U=
Subject key identifier:   35:D3:C1:A6:4A:B6:54:FE:C6:94:1E:8D:F8:CD:7A:ED:6B:B7:88:66
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584B6BC77D85EE322ACBA5EAE000
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b610ba4-3b85-3a38-a54d-2fd8309009cb.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     396589
IP address blocks:        216.168.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:7d:85:ee:32:2a:cb:a5:ea:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=9a5ad5f8-4c3a-474c-9e4c-c2df6c99d386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ba:30:38:27:a8:12:f3:8f:2c:b2:cc:1e:fd:
                    a8:0b:69:be:8b:18:6a:5e:4c:b5:4d:4a:84:12:4a:
                    c8:11:c8:6c:46:e9:24:52:87:8a:12:1f:14:df:2d:
                    4d:bb:11:ce:81:37:19:74:b8:1d:6e:58:c4:56:bf:
                    4c:a4:7f:07:4b:a5:f4:28:e6:1f:fe:cc:ff:91:63:
                    15:da:c9:b8:e8:9e:f1:c8:65:f8:d0:1c:4f:00:df:
                    eb:bd:f1:f6:00:79:49:72:80:58:00:52:d7:a6:6f:
                    cd:bb:b0:46:0d:4f:0d:4d:48:98:51:6d:8c:49:eb:
                    f7:db:2b:c0:4f:04:75:91:81:da:22:1e:da:65:43:
                    ef:12:6b:ef:79:0b:9e:77:54:64:22:10:9d:27:f2:
                    ec:b6:54:53:a8:d8:98:3a:b2:4e:86:e0:04:80:4b:
                    78:5b:51:a8:40:06:c6:59:02:49:80:0e:35:5a:6c:
                    6d:c1:22:d8:5f:5a:3d:ab:d3:b2:cd:1d:c3:7f:67:
                    35:f1:ec:39:89:7a:88:72:5f:f1:24:3f:65:37:b0:
                    db:e8:1d:72:d9:31:4b:85:46:8c:10:76:0f:12:f9:
                    2e:4a:54:44:c2:f6:eb:a9:f0:d9:e3:a6:91:3c:29:
                    22:22:40:91:f9:d3:aa:6b:4d:e2:74:16:90:15:80:
                    68:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D3:C1:A6:4A:B6:54:FE:C6:94:1E:8D:F8:CD:7A:ED:6B:B7:88:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/9b610ba4-3b85-3a38-a54d-2fd8309009cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:2a:8c:d1:55:9d:f3:3f:15:b1:48:75:66:83:f9:9a:99:2a:
         4d:b2:4a:13:9b:70:87:9e:37:79:a5:36:b4:65:78:ce:63:b0:
         b6:77:e7:42:c7:54:18:5c:b4:84:83:8a:5e:27:95:32:93:2a:
         e2:0e:03:c7:05:14:b6:f7:9f:fc:e0:e8:44:a1:3d:22:32:ad:
         b0:4a:e7:d7:51:8a:be:31:1c:dc:1c:9c:d8:91:03:57:07:16:
         81:f9:42:d2:79:1b:bd:e5:e7:cc:1f:f5:0a:4c:92:47:9b:0c:
         81:e7:50:06:8f:91:06:42:ac:64:ed:0b:82:73:52:8f:a9:eb:
         e0:9a:0f:6a:f1:f1:4d:1f:b0:a9:70:99:48:6b:fb:7c:44:73:
         c5:41:70:48:21:44:ab:13:90:8d:4e:26:b7:e7:ff:54:a6:cd:
         64:ac:2d:86:12:dd:de:0e:c4:b9:ad:7c:65:91:7f:68:7a:6e:
         cd:8c:4d:c2:5d:ba:8d:90:ba:67:d9:1b:a4:ed:9b:cb:3c:79:
         d5:8b:c8:2b:e1:e5:09:58:b1:a0:6d:dd:e7:21:a8:6c:f4:a8:
         75:06:f8:46:81:10:bf:74:8c:ed:08:4d:0a:3a:85:29:df:ea:
         d3:f7:b7:67:db:3f:3e:32:77:40:17:28:f6:66:3b:bd:eb:7d:
         92:41:81:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:16:29 2025 by rpki-client