Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/8b1d10f2-d762-3535-82e1-19a0a82b5df4.roa
File:                     8b1d10f2-d762-3535-82e1-19a0a82b5df4.roa (raw, json)
Hash identifier:          JfZEtylnljiNzkhoWrA3vrl9z7UwN+G48ZYKHfy7BSE=
Subject key identifier:   40:07:CA:5A:77:BC:94:18:7D:E5:45:00:29:75:54:8D:91:F1:2A:0E
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F4328584B76F255C40CB8B1CF894697A0
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/8b1d10f2-d762-3535-82e1-19a0a82b5df4.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     55002
IP address blocks:        216.196.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:55:c4:0c:b8:b1:cf:89:46:97:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=9417d756-a8b6-4413-b9e8-13d0551744cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b5:fe:b7:05:da:ac:9a:d3:92:0d:4c:dc:b5:
                    3d:f5:c4:71:8e:5d:dd:75:3b:cb:49:c4:cd:50:75:
                    ca:b6:b6:8f:42:91:c5:e0:40:92:e9:b9:e0:3b:0a:
                    31:12:ea:aa:e9:3b:83:6a:06:0e:d7:38:5f:32:2c:
                    20:df:44:8e:16:f2:dc:b4:a8:33:be:c0:58:e5:fc:
                    db:a3:d2:55:a0:6c:48:0c:e8:76:9d:0e:66:7e:84:
                    af:3b:21:91:d1:98:91:08:f0:ef:37:3f:7e:5b:ed:
                    b9:53:46:2a:42:fa:81:04:47:48:eb:06:78:60:3b:
                    07:dc:32:e5:bc:9f:2d:09:52:61:3a:56:0c:aa:3a:
                    7e:bf:3c:16:61:cf:21:36:2b:90:74:22:e4:cb:f0:
                    2d:24:d6:75:73:06:3a:d6:fc:5a:03:03:5a:12:c4:
                    c0:93:e2:31:62:56:e5:00:ff:98:a2:e8:23:ac:93:
                    68:fc:a6:f1:e7:c9:21:4f:a3:4e:85:37:94:de:ed:
                    a3:9c:1f:a4:30:d6:21:6c:2a:bb:6d:41:34:c6:48:
                    6f:3a:c5:a2:53:e2:f3:cf:aa:f9:12:1a:73:a9:19:
                    0b:ac:1a:33:78:de:95:13:3c:86:0d:21:e1:f3:24:
                    2d:fa:55:cf:d0:19:8a:10:9b:7f:eb:8c:d4:ea:db:
                    40:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:07:CA:5A:77:BC:94:18:7D:E5:45:00:29:75:54:8D:91:F1:2A:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/8b1d10f2-d762-3535-82e1-19a0a82b5df4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.196.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:f3:77:0f:9b:e9:90:83:f2:de:8f:ad:23:16:58:f4:a2:eb:
         1e:1d:98:b6:55:3e:49:e9:82:88:0e:66:8a:27:c0:97:ca:d0:
         dd:17:f6:7f:d8:fd:21:80:a7:f8:01:63:a0:e3:91:27:8b:f8:
         dc:34:51:c0:ad:6c:5e:d9:59:83:5a:a6:66:41:19:ca:d5:2c:
         73:32:31:ff:43:d9:b7:69:9a:5f:94:53:83:dc:d8:b9:0d:da:
         96:34:1f:22:e6:6f:b4:a3:ec:fe:92:7d:67:0f:9b:98:a2:88:
         78:eb:3c:4f:de:f9:cf:70:a3:3b:30:41:dc:5d:86:67:1d:52:
         5a:30:c0:08:83:ec:09:2a:2b:11:18:e7:c3:08:fe:5d:11:58:
         c3:1d:ff:5c:c8:28:ca:bd:cd:05:d0:85:c3:89:a6:63:bf:22:
         ba:fa:cb:17:74:f5:74:9b:d4:90:93:8e:8e:7b:81:d1:59:53:
         ab:d3:1a:2b:0f:b7:07:1d:64:43:cd:f7:b3:4f:72:fb:6b:82:
         af:d0:32:a2:c9:8f:5f:e8:d4:a3:29:db:fe:57:42:f3:b8:9a:
         ee:70:b0:de:de:57:e0:c9:49:f4:25:c0:ff:dd:15:91:70:c0:
         61:11:1f:51:ca:56:2f:4d:87:49:d3:09:86:93:86:4d:64:5c:
         a2:0d:18:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:29:54 2025 by rpki-client