Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/928928a1-f7ec-3890-ba27-f9b9292717a9.roa
File:                     928928a1-f7ec-3890-ba27-f9b9292717a9.roa (raw, json)
Hash identifier:          mEiNdqAIKQc82DcSAbq6SGyumpF7JAO41xNUqCTHf+E=
Subject key identifier:   BC:04:2E:E6:89:F8:C5:36:48:0B:F6:CB:6C:C8:6A:3E:40:70:21:9D
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584B44B1BDE29EB9E1ADEA7C5200
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/928928a1-f7ec-3890-ba27-f9b9292717a9.roa
Signing time:             Sun 21 Sep 2025 13:00:42 +0000
ROA not before:           Sun 21 Sep 2025 13:00:42 +0000
ROA not after:            Sat 20 Dec 2025 14:00:42 +0000
asID:                     11233
IP address blocks:        216.110.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:44:b1:bd:e2:9e:b9:e1:ad:ea:7c:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Sep 21 13:00:42 2025 GMT
            Not After : Dec 20 14:00:42 2025 GMT
        Subject: CN=6c7be4df-04a6-4e08-9f6e-5aed1c9d7196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d7:8a:da:e2:48:27:d2:d8:b3:f5:79:8e:59:
                    21:a5:7d:29:85:44:fd:3f:d1:70:c5:5d:20:4d:12:
                    7b:f4:68:e0:0f:21:d0:71:a1:55:ab:4a:dd:59:33:
                    ba:d1:2b:c6:d3:dd:8a:67:79:50:ee:d3:92:98:b5:
                    f0:e0:07:c0:de:63:2b:7c:09:f3:7d:aa:c9:5b:57:
                    ca:89:78:b6:32:19:1f:0e:90:7f:d8:12:ad:88:10:
                    df:59:59:3f:1b:41:9b:d5:01:f1:ee:4f:16:22:71:
                    8b:0d:33:e3:d1:82:7b:6f:e8:bb:7b:f3:d2:7d:bb:
                    79:da:d9:89:85:cb:36:16:75:95:e4:71:fc:90:b7:
                    a3:a4:26:1c:00:02:81:41:5c:73:c0:02:31:9e:d3:
                    aa:2b:99:6f:28:21:9d:56:c4:ad:a8:6e:49:ec:10:
                    d6:d5:30:36:b2:e4:31:26:ad:fb:71:4d:7d:a5:63:
                    a7:60:bd:c8:b4:e7:fa:1b:bb:f3:24:9d:08:6c:56:
                    5d:ca:f8:96:f4:a6:9e:d4:98:99:d2:9c:c9:c6:a4:
                    a2:38:92:5b:4c:26:bf:21:e3:9d:00:ff:fb:56:2d:
                    02:05:fe:6f:57:8d:43:69:7a:ed:cb:3b:7b:e4:1b:
                    09:91:1b:4a:9a:25:ec:6e:8c:8b:51:3f:1a:92:c9:
                    ed:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:04:2E:E6:89:F8:C5:36:48:0B:F6:CB:6C:C8:6A:3E:40:70:21:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/928928a1-f7ec-3890-ba27-f9b9292717a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:35:2b:55:b6:3a:47:22:1b:37:3a:14:54:d9:70:0a:5b:fa:
         72:2a:82:34:62:d8:e2:6e:e3:81:c0:b6:cf:18:a5:9c:f1:68:
         8f:96:17:f0:63:a0:b5:a7:d5:73:fa:be:13:e3:f3:70:51:d1:
         63:1e:de:89:64:f6:88:c7:c6:91:47:1f:19:06:8f:f3:4f:46:
         00:86:e5:88:3f:fb:1b:ab:a3:d4:12:9e:8f:00:2c:81:20:73:
         5d:9e:11:5a:e8:39:17:cf:14:cc:f7:07:66:45:47:3d:8b:b6:
         44:67:58:20:80:fd:05:df:63:30:f9:b0:86:af:49:35:0e:27:
         3f:cb:9b:a4:0c:c5:93:8c:b4:4a:da:1a:4c:55:3b:a5:8a:56:
         48:d7:b0:89:45:88:0d:91:46:6f:e0:e9:d3:e4:2f:9e:96:ce:
         63:62:28:e4:6d:70:34:a1:16:a8:53:1b:b1:4d:0b:78:50:e5:
         1d:4a:cf:b7:20:62:4f:93:50:88:50:7f:13:58:45:7b:86:d7:
         d6:02:e9:c6:79:09:5b:02:cb:6b:be:f4:e2:2b:73:25:d2:91:
         f0:19:61:ac:3a:e7:1c:c5:06:dc:79:8c:36:63:64:8e:15:17:
         0b:88:42:d8:0e:90:23:6a:8f:1d:bd:2b:bf:db:00:c1:a8:44:
         3c:94:10:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:21:25 2025 by rpki-client