Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/e3677ffe-42b3-3c33-9bd2-957363aabf2f.roa
File:                     e3677ffe-42b3-3c33-9bd2-957363aabf2f.roa (raw, json)
Hash identifier:          mCH6to4M22f0RPS8b0md8ZuJGlyCnQPW1w+NnhYTyzI=
Subject key identifier:   CC:B7:B4:CE:56:FE:C7:9E:E2:FD:48:99:F7:76:CB:56:B3:B4:8A:AB
Certificate issuer:       /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
Certificate serial:       010D0C9F4328584B4FDC80E5A5626555B073D900
Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/e3677ffe-42b3-3c33-9bd2-957363aabf2f.roa
Signing time:             Thu 25 Sep 2025 13:00:41 +0000
ROA not before:           Thu 25 Sep 2025 13:00:41 +0000
ROA not after:            Wed 24 Dec 2025 14:00:41 +0000
asID:                     53808
IP address blocks:        216.238.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4f:dc:80:e5:a5:62:65:55:b0:73:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
        Validity
            Not Before: Sep 25 13:00:41 2025 GMT
            Not After : Dec 24 14:00:41 2025 GMT
        Subject: CN=fa813949-9e57-4c0e-a7b1-e63b87e43e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3b:bf:58:41:30:10:4a:6c:8c:ed:67:e0:b1:
                    2c:82:b5:44:1f:03:d7:9c:81:de:a7:e1:13:2b:cf:
                    ca:a1:06:4e:cb:02:2d:c4:8d:df:ac:8d:65:a7:c8:
                    2d:4f:ee:cf:c3:03:18:0e:93:93:72:a3:70:80:bf:
                    5f:54:cf:7c:76:58:34:6a:f0:ee:42:ed:9f:55:bc:
                    7b:c8:e1:a6:a4:a8:a9:2b:ed:f1:5c:9a:ee:4f:0e:
                    40:18:78:84:26:7a:6f:7b:df:de:ca:d1:c8:f7:a2:
                    fa:14:92:ad:24:54:41:1e:e8:73:65:b1:49:60:ae:
                    63:77:57:72:0b:31:66:da:38:7d:aa:f1:22:60:62:
                    bc:2d:17:d6:3d:52:26:42:3a:9f:bf:68:59:2c:b5:
                    fd:2f:bc:db:0f:f8:e4:10:c3:1a:ed:d1:cd:6e:86:
                    23:55:ee:6a:30:31:d0:b9:e9:a0:c3:22:5d:a5:bb:
                    3d:e1:84:2a:8e:dd:a2:24:60:f1:43:5a:71:95:2f:
                    10:fd:44:8e:a9:f4:ec:c6:47:8e:4e:06:bf:1c:52:
                    ac:b0:5b:0b:33:8e:de:e8:34:a0:c9:0b:54:87:22:
                    ce:1e:44:86:4a:37:2a:14:1c:a2:66:e7:d5:3e:55:
                    88:78:cf:f6:36:03:41:97:b6:b6:22:f2:38:2f:9a:
                    86:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B7:B4:CE:56:FE:C7:9E:E2:FD:48:99:F7:76:CB:56:B3:B4:8A:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/e3677ffe-42b3-3c33-9bd2-957363aabf2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl

            X509v3 Authority Key Identifier:
                keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:38:84:67:b2:ee:ed:69:70:0e:a1:79:a3:f7:ca:8a:3c:e5:
         53:1b:14:5e:cc:30:14:b3:8e:01:91:01:1e:59:ec:25:c9:c9:
         97:ad:05:75:c3:93:6e:c1:e2:89:af:db:f1:d0:69:19:7f:be:
         ac:70:60:a0:87:fb:ec:88:af:59:4d:fd:4b:13:0d:7a:4e:11:
         72:2d:c2:45:10:22:c4:86:d0:c3:39:d3:bb:04:de:b3:51:4e:
         0a:e2:a4:ab:05:5a:85:1e:84:d1:54:1d:46:9b:9b:74:6d:13:
         10:eb:e6:cf:b5:5d:40:36:4d:d2:d2:42:d3:a2:a8:a3:e7:fc:
         3a:8c:d9:0b:eb:7a:fa:e2:6a:6d:33:ce:2a:7e:01:b6:f4:fe:
         e4:01:72:73:57:b7:ed:26:db:67:11:96:3c:cc:9f:29:ca:36:
         46:59:c3:eb:80:e9:2e:59:dc:0d:9d:22:a0:38:1e:ba:57:dd:
         9c:74:cb:34:8b:d5:81:46:ae:a9:b9:ce:ae:80:25:29:ca:e7:
         fd:da:71:96:d1:cc:6b:5a:4f:88:c1:5d:e6:ed:4c:4c:42:06:
         8d:14:9a:be:5f:68:ba:aa:5f:6d:77:ed:7f:74:b5:52:d6:5c:
         40:55:cd:cc:44:44:36:6f:51:b7:03:0f:19:19:00:fa:01:e2:
         d0:cf:5a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:59:18 2025 by rpki-client