Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/14cab7a4-9592-3724-82d8-0c2cba745ca8.roa
File:                     14cab7a4-9592-3724-82d8-0c2cba745ca8.roa (raw, json)
Hash identifier:          JiKSmQgi9yvOfwY54L234+ZMG9/H9psfmI0bZCJWE6o=
Subject key identifier:   66:9F:6E:8E:F1:F7:F2:EE:09:92:74:9B:79:3D:51:90:3D:BA:0A:8D
Certificate issuer:       /CN=d7a960e2-9fa8-4b77-8609-5ee424f44087
Certificate serial:       010D0C9F4328584AE196857D5A44414E998B0000
Authority key identifier: A2:A6:EF:CB:44:3A:94:85:33:05:1B:25:CC:81:A8:4A:7E:34:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/14cab7a4-9592-3724-82d8-0c2cba745ca8.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     19318
IP address blocks:        216.219.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:85:7d:5a:44:41:4e:99:8b:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7a960e2-9fa8-4b77-8609-5ee424f44087
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=9f857c6c-08b4-4c45-b2b0-804d299a26ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ce:67:27:61:d6:98:e8:3d:0b:56:e4:6d:03:
                    cc:ce:5c:d7:a6:7e:38:6a:27:a7:e7:61:e5:33:a6:
                    6f:28:40:a7:30:70:60:b6:32:47:60:7b:1a:1c:e8:
                    4f:93:c7:e0:eb:33:b7:bd:fd:7d:d6:d8:89:61:10:
                    9f:c3:c2:f1:8a:b5:d8:bc:0a:59:e6:d2:0b:a4:f5:
                    7e:a3:1d:31:67:38:f2:e9:6d:44:fd:e4:ef:b0:38:
                    19:97:7a:73:96:23:8d:5a:e4:81:a1:59:ec:82:9e:
                    05:5c:ba:39:0c:fe:f1:a0:3a:44:e3:84:63:04:e9:
                    5e:85:3d:56:ba:6f:2b:98:5d:37:6b:ce:61:0a:d8:
                    fc:77:1a:70:47:84:44:6a:63:eb:66:77:49:43:c0:
                    26:14:00:b0:9d:ce:fb:96:0b:d5:c7:14:f7:82:fd:
                    b5:2f:e1:8f:e9:c7:71:96:cd:fe:d4:e7:85:a4:fd:
                    cc:58:32:c6:d6:d8:b1:72:5d:3d:a5:b5:a0:b6:06:
                    56:62:b8:e0:36:bb:72:8a:0d:83:c3:24:70:86:e6:
                    8e:c7:9c:10:45:d5:ac:2b:5f:29:b8:b9:6e:d0:60:
                    46:37:78:e8:d9:77:f7:52:5a:29:62:04:b0:51:b0:
                    da:a2:5a:19:30:9f:66:a8:e8:79:45:8c:8b:09:d1:
                    7d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9F:6E:8E:F1:F7:F2:EE:09:92:74:9B:79:3D:51:90:3D:BA:0A:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/14cab7a4-9592-3724-82d8-0c2cba745ca8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087/d7a960e2-9fa8-4b77-8609-5ee424f44087.crl

            X509v3 Authority Key Identifier:
                keyid:A2:A6:EF:CB:44:3A:94:85:33:05:1B:25:CC:81:A8:4A:7E:34:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7a960e2-9fa8-4b77-8609-5ee424f44087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.219.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:00:20:fc:1a:d8:6d:5c:3b:8d:99:ad:a4:ec:26:61:71:5d:
         e4:23:f2:44:4f:64:aa:c8:f9:03:55:5a:8e:5a:2a:dd:f3:1c:
         c1:b5:20:46:24:26:dc:c7:b5:c7:0f:5a:41:81:f6:9f:b6:05:
         7c:84:29:cf:6c:f1:9a:7e:7c:0f:4c:86:d8:c3:6e:ac:81:2d:
         6c:c1:05:85:17:e3:26:c3:1a:f9:46:46:d8:07:93:2a:a5:90:
         c6:8f:88:12:0b:44:03:f8:0a:3d:cd:7a:6e:6b:62:61:28:d6:
         6e:ad:04:a7:b5:3e:09:bd:bf:b9:ed:c5:8c:a5:2b:df:ea:6e:
         af:c2:0f:b8:ed:43:d6:2c:3c:8d:9e:90:8b:3e:00:9d:af:12:
         c0:78:c2:b7:7f:49:97:8e:7b:7e:27:c0:9d:12:9d:96:8f:5b:
         aa:03:fd:85:09:97:16:ba:2f:20:49:19:27:79:ca:65:1f:75:
         64:e7:2e:d9:7e:d6:0b:d5:58:e4:8e:8f:c6:eb:3d:77:48:6f:
         c3:54:39:96:55:af:f8:14:3e:29:9e:84:a2:29:0b:97:0f:af:
         bf:35:d2:71:c2:e2:23:02:fd:8a:22:a3:4f:71:bf:de:ec:16:
         e7:dc:38:31:95:2d:f8:51:fd:82:67:87:32:03:e6:98:55:24:
         1a:ef:40:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:54:11 2025 by rpki-client