Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/275430b0-67d5-3f84-ac22-2d5e3f4b701e.roa
File:                     275430b0-67d5-3f84-ac22-2d5e3f4b701e.roa (raw, json)
Hash identifier:          jtiqhPaw4ntPMEEocfcp/N5PrEYKpIJplaGYa+SN0jc=
Subject key identifier:   37:41:C9:9E:1C:E1:5F:F1:DC:B6:0A:CE:11:60:D6:C7:AD:1A:CF:B5
Certificate issuer:       /CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Certificate serial:       010D0C9F4328584B2066D11C59F6631CC505BD80
Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/275430b0-67d5-3f84-ac22-2d5e3f4b701e.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     19229
IP address blocks:        216.157.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:d1:1c:59:f6:63:1c:c5:05:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=11038165-108d-4767-be16-bb3425e93bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:3c:c0:52:72:ed:f9:dc:5d:16:87:e1:22:62:
                    7f:f9:8b:70:9a:ff:fd:71:cd:14:92:9a:d9:12:66:
                    fa:ef:9b:d6:39:bb:f9:61:28:fb:eb:b4:6e:ca:e3:
                    9d:02:ae:3f:60:cc:f1:69:74:e9:9d:2e:14:b8:0e:
                    ae:d8:a5:2b:d8:a1:ae:43:d3:36:cf:a3:2c:17:81:
                    63:63:77:3c:99:3f:63:93:73:e4:22:50:c5:16:e8:
                    37:0a:ed:d7:a3:be:90:25:7b:d5:a2:2d:92:cd:11:
                    3e:b5:df:bc:59:34:7e:08:d7:45:7b:06:be:4f:0a:
                    e0:e0:e7:8d:92:26:3d:12:5d:89:a5:52:d5:bf:2d:
                    81:64:dc:87:ba:64:6c:c7:3e:b2:a8:ec:81:1e:d5:
                    61:a5:2c:1d:88:83:7d:ee:56:5f:26:95:fb:55:d8:
                    46:93:b6:95:a4:71:24:f2:19:a7:8b:6f:ff:9d:48:
                    2f:07:81:6f:69:80:bc:f5:b9:0c:95:08:2b:6d:7e:
                    cf:73:3c:1e:a4:87:ba:0c:df:27:12:82:7f:e9:aa:
                    97:cb:ed:8a:cb:66:27:5a:1f:cd:1d:50:70:93:83:
                    30:26:5c:ac:53:d3:af:b8:d5:29:08:9e:c9:e5:a5:
                    b7:a6:96:a8:62:1e:e8:5a:42:5c:7d:c2:d7:21:b8:
                    24:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:41:C9:9E:1C:E1:5F:F1:DC:B6:0A:CE:11:60:D6:C7:AD:1A:CF:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/275430b0-67d5-3f84-ac22-2d5e3f4b701e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl

            X509v3 Authority Key Identifier:
                keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:f1:d2:b1:39:1e:df:8d:32:5e:24:44:99:9f:6e:b2:4b:8f:
         82:b6:3e:a2:ca:86:3c:ad:39:6e:9b:56:9b:00:0a:cc:fd:52:
         97:03:0d:75:4b:cb:42:cd:f0:4b:ae:b2:20:69:ac:cd:07:74:
         9a:c9:3a:05:94:52:50:e1:99:fb:da:90:2b:60:bc:44:80:5f:
         94:47:ae:9c:99:65:81:dc:40:dc:e3:b4:8d:87:8f:90:9a:3d:
         7d:9c:90:c2:14:64:95:06:b4:3c:23:61:c6:59:d7:3c:67:55:
         43:40:df:07:1a:74:bd:2d:c0:86:30:72:83:87:13:9c:ba:aa:
         43:00:29:27:1a:0b:07:bb:22:89:31:51:bf:7c:af:d9:06:57:
         6f:16:83:81:56:48:4a:36:6e:b9:d7:0f:88:67:b0:51:12:d1:
         d2:47:ea:dc:44:f5:70:98:af:d3:3c:94:8b:2e:96:6f:94:6a:
         60:5c:c1:3c:94:95:4a:ac:bb:41:83:8a:71:bf:2e:4a:57:86:
         f9:9f:d4:ac:15:dc:9e:85:07:96:98:d4:cd:6e:42:92:df:a0:
         e3:fe:37:dc:22:4e:da:79:f5:03:a4:5f:c7:dc:e3:2c:07:f9:
         2a:62:5c:e2:a7:9a:bb:9e:90:1c:9d:d2:a4:6d:a3:84:35:8e:
         7d:17:d3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:24:42 2025 by rpki-client