Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/e28da1e8-5371-3e37-80fb-bf2da9dda40f.roa
File:                     e28da1e8-5371-3e37-80fb-bf2da9dda40f.roa (raw, json)
Hash identifier:          ZwIxVzEw8xbj5punw1sCWMmVE8issBNyV4/PYIptjU0=
Subject key identifier:   94:EC:3D:79:74:47:C3:97:4B:E8:48:BF:9B:C8:1F:A7:1B:EB:EC:57
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F4328584B89177B9CF07122B961EBBB00
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/e28da1e8-5371-3e37-80fb-bf2da9dda40f.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     27203
IP address blocks:        216.68.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:7b:9c:f0:71:22:b9:61:eb:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=c86ec48b-5b61-482d-8dc5-920c20220337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7a:f3:73:e2:19:fd:ad:bb:70:ab:28:f2:b1:
                    42:ed:2b:45:84:d4:5f:ef:af:6d:e1:2c:7c:e2:de:
                    ff:7d:3b:8a:b9:26:91:9f:be:56:29:31:76:82:14:
                    ac:dc:1b:0f:6f:d7:c8:fd:ad:b4:ff:27:6e:0e:af:
                    0b:00:38:75:f0:4e:80:4a:7c:0d:59:49:70:95:57:
                    8c:77:c0:33:bb:3b:c1:31:f6:a4:8e:1f:12:3d:af:
                    52:7b:d4:1f:ba:f6:a3:4b:f8:37:e6:e7:67:bc:d9:
                    66:59:23:56:92:42:90:10:a5:99:00:98:d2:38:96:
                    3d:f5:80:a9:a4:ae:4c:62:40:4a:70:1c:42:41:de:
                    98:d5:93:bc:31:d9:3b:9e:47:73:6c:78:51:ca:5b:
                    e0:17:ca:83:06:e7:d5:ad:43:38:7f:9f:f8:e2:53:
                    40:ca:fa:db:ad:dd:13:7b:23:ec:43:b7:6b:8c:f6:
                    24:74:9b:a2:b9:dc:3d:9f:60:96:8c:75:17:c7:7d:
                    a7:1b:76:c2:29:de:64:41:7e:81:fd:ff:f3:7d:49:
                    75:bd:28:eb:bb:d8:c0:99:7f:59:d5:f0:7e:82:ea:
                    57:ea:7d:55:29:91:67:8f:7a:4a:8d:69:ec:fa:4f:
                    06:2c:20:96:bf:9a:c6:9d:0f:8e:a9:2f:76:6f:ed:
                    f9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:EC:3D:79:74:47:C3:97:4B:E8:48:BF:9B:C8:1F:A7:1B:EB:EC:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/e28da1e8-5371-3e37-80fb-bf2da9dda40f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.68.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:99:f4:a5:33:67:99:4c:cc:32:77:40:89:19:f7:71:95:6e:
         ef:9b:6d:a9:7a:67:64:99:3d:c0:97:b6:82:63:73:15:2f:c5:
         40:5f:ff:d6:11:fa:ff:0b:1e:28:1f:83:03:f3:5e:d6:3c:27:
         70:25:20:0c:55:4e:c2:02:b5:12:30:2a:5a:d8:a5:81:7f:49:
         89:67:04:8d:da:07:7c:e4:ad:22:8a:d4:8b:63:99:15:bb:ee:
         63:95:82:e1:fd:33:0b:af:a9:be:2d:eb:7e:8e:76:d8:58:48:
         80:a9:98:2b:36:4e:26:99:1e:b4:e2:01:e0:2b:0e:77:c3:da:
         53:ea:0d:cb:35:24:b3:41:b9:66:70:a1:b8:eb:71:97:cb:46:
         f1:45:1d:fb:b8:bc:7c:81:ff:89:5b:26:f8:c6:3c:e9:f4:58:
         13:04:25:f1:c4:c9:55:2e:b4:0f:3e:fe:6c:6c:84:d6:d3:9e:
         a1:d1:2e:5e:95:48:50:be:c7:96:78:03:b7:3a:01:85:09:51:
         d4:d9:2f:50:a8:30:c2:e0:93:04:c5:61:03:ad:4a:4f:8a:99:
         03:3c:af:87:e5:ef:5e:dd:70:cc:9b:90:66:b5:76:a1:81:62:
         46:ea:4b:be:5b:e1:c2:7b:47:2a:70:26:f0:76:7c:1f:2a:56:
         be:fd:d7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:23:37 2025 by rpki-client