Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/c8bf8c6b-3982-384d-83bd-389b7a0a3f31.roa
File:                     c8bf8c6b-3982-384d-83bd-389b7a0a3f31.roa (raw, json)
Hash identifier:          ZrbjEA0z3MOkzRTI1AaTIakBM6gWWM4yRD2t6bMdUI8=
Subject key identifier:   71:90:42:D2:C5:80:72:DF:B7:0F:B5:C2:29:89:65:FB:AA:76:D4:9B
Certificate issuer:       /CN=7daddf1f-a775-44aa-b3ca-3520f73993ed
Certificate serial:       010D0C9F4328584B540C6A0BE407F83AE61C79C0
Authority key identifier: 32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/c8bf8c6b-3982-384d-83bd-389b7a0a3f31.roa
Signing time:             Sat 27 Sep 2025 01:00:33 +0000
ROA not before:           Sat 27 Sep 2025 01:00:33 +0000
ROA not after:            Fri 26 Dec 2025 02:00:33 +0000
asID:                     26380
IP address blocks:        216.119.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:54:0c:6a:0b:e4:07:f8:3a:e6:1c:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7daddf1f-a775-44aa-b3ca-3520f73993ed
        Validity
            Not Before: Sep 27 01:00:33 2025 GMT
            Not After : Dec 26 02:00:33 2025 GMT
        Subject: CN=b0faaeae-de8a-4e7f-a0be-a092fb1a8711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:40:96:dc:17:12:ff:1b:c8:20:e8:fa:cd:e3:
                    5f:c8:45:81:88:57:6b:c1:df:0d:ad:c0:65:11:77:
                    fe:67:1c:3b:35:46:c1:29:25:55:4a:4b:f9:39:96:
                    44:c9:1a:3e:c1:4b:b9:8f:4a:00:9e:70:f2:2e:30:
                    c8:e1:24:8d:65:76:d2:40:ee:1b:59:30:f3:13:2d:
                    44:4b:02:6d:13:e9:99:b0:ad:5b:89:ac:ad:6e:54:
                    78:6d:a3:8f:01:68:86:c7:f0:6c:b0:d7:3e:e6:22:
                    14:9e:0d:09:14:a4:ef:32:f9:65:29:e6:ba:12:d6:
                    8a:64:38:4c:d6:e3:d9:fb:81:17:c9:25:89:88:35:
                    ed:ad:00:21:fc:6e:5e:8e:10:02:6b:1c:a6:19:54:
                    c8:a3:99:c3:86:35:76:84:31:05:6c:7a:ed:96:0e:
                    10:c7:ab:9b:f6:29:60:2d:ac:29:e5:53:49:c4:e8:
                    c0:7c:60:ec:3b:e2:4c:62:70:bb:b0:eb:f7:57:ef:
                    45:62:04:34:ea:f9:93:60:95:b9:01:85:8d:64:c2:
                    c6:75:8e:e8:be:de:f7:8a:cf:ea:4c:48:23:fe:c0:
                    59:55:c6:3c:a2:46:de:74:be:80:ca:6c:73:59:87:
                    d4:db:9c:6d:e7:1d:7a:c9:66:23:e5:2a:b5:24:4a:
                    3e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:90:42:D2:C5:80:72:DF:B7:0F:B5:C2:29:89:65:FB:AA:76:D4:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/c8bf8c6b-3982-384d-83bd-389b7a0a3f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.crl

            X509v3 Authority Key Identifier:
                keyid:32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.119.213.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:28:10:59:ea:9d:07:05:a6:14:0f:eb:ef:47:9c:4d:bd:f5:
         4f:0d:d5:7b:85:8a:dc:ca:4c:12:fc:82:63:32:ba:31:5e:88:
         a1:d9:df:76:03:73:98:f4:ba:15:35:ae:33:4f:ed:cc:d3:13:
         1b:cb:c6:25:f1:44:db:0d:f0:56:4f:fe:5d:d9:fe:3e:b4:3b:
         d3:07:37:79:57:8d:ee:b6:e9:4d:de:ad:0b:90:18:71:37:ee:
         22:56:4f:73:fd:5f:20:18:a2:41:bf:35:69:6f:a4:37:2d:22:
         f5:ff:9a:48:ca:5d:26:15:d1:ca:b4:81:0b:ab:0f:bf:61:c8:
         7b:c6:bc:7a:b3:61:f6:da:09:f6:7d:03:0a:27:14:05:e6:47:
         8b:e2:1c:46:4d:14:d5:c0:39:3e:5b:33:10:f6:bd:ef:7f:79:
         a3:51:37:34:58:71:e9:36:91:54:67:3f:e8:11:e6:a5:a1:e0:
         b9:3e:22:a8:f6:97:64:f3:7a:11:6f:f0:4c:ff:94:11:bf:f8:
         7d:ad:d2:ab:b1:90:74:91:9a:86:c3:4e:fb:09:c6:d7:03:12:
         a8:30:85:09:6a:ee:26:89:c4:5a:3f:1b:e3:d3:68:02:69:b8:
         6b:ef:77:c0:f5:15:9f:a9:e9:f0:b2:9b:0c:30:04:3c:ef:e7:
         3b:0c:d5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:46:39 2025 by rpki-client