Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a646c31c-2719-3146-9260-c40f59eb735d.roa
File:                     a646c31c-2719-3146-9260-c40f59eb735d.roa (raw, json)
Hash identifier:          1dOgHKiKM4/dEqinovq+ia2DwtVwrE3R+G64zBZgsx4=
Subject key identifier:   DD:12:C9:98:E4:58:79:B0:B4:D2:4C:D2:BE:7D:F5:3A:F5:78:AB:2A
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584B715CAF182D7ED1B8DEBA1840
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a646c31c-2719-3146-9260-c40f59eb735d.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     13692
IP address blocks:        216.110.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:af:18:2d:7e:d1:b8:de:ba:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=768b4f68-5740-4d87-8118-431f6822a64a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d7:5f:56:1b:6f:66:9d:e7:a6:9b:cb:1f:d3:
                    81:41:93:98:8f:a5:ca:e8:06:49:f1:34:67:94:96:
                    b2:cd:28:c3:2c:70:07:05:43:00:09:b1:f6:5b:7c:
                    ed:60:29:17:85:76:2f:ab:f3:eb:13:a8:5b:a9:22:
                    98:17:e1:87:1a:1d:62:57:59:9c:14:d9:c9:3d:84:
                    e6:cb:ad:2a:d8:57:a0:9b:8b:cf:65:10:df:d0:4c:
                    66:cf:58:86:89:2d:d0:f9:f7:05:a8:43:3a:8c:69:
                    80:89:0e:8b:dc:e9:d4:83:89:e9:cd:39:af:6d:5f:
                    b6:45:a2:35:06:8b:fa:ed:2d:fc:cd:83:1f:75:1d:
                    c6:8f:9f:ac:02:be:3b:14:e3:e2:8e:21:9d:2c:22:
                    5c:3a:2a:f3:54:1a:d8:d2:e7:eb:33:79:a2:d0:51:
                    36:b8:0a:d5:04:bb:68:2f:9d:3b:74:46:cd:3d:ae:
                    77:e8:fb:b1:3e:34:52:50:35:07:1d:2c:ee:e9:20:
                    5d:84:41:f2:e2:e2:f4:c2:28:dd:fb:e8:76:0c:62:
                    c1:44:b9:64:03:cc:a9:d2:32:9b:9a:e7:8f:d5:24:
                    97:dc:1a:cb:fd:e5:ed:fe:43:f5:81:0f:35:b8:39:
                    91:fb:50:27:a3:16:18:3e:b2:ee:17:c2:1d:ea:c8:
                    b1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:12:C9:98:E4:58:79:B0:B4:D2:4C:D2:BE:7D:F5:3A:F5:78:AB:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a646c31c-2719-3146-9260-c40f59eb735d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:2a:c7:72:c6:40:d1:6b:b7:2c:b3:38:67:fd:d2:b4:cc:b3:
         44:4e:11:ac:30:d6:4c:04:8c:2b:48:93:89:77:1f:bc:17:75:
         d2:d0:76:4f:9f:85:1e:ac:d2:59:47:65:f9:ae:df:90:50:70:
         ed:46:f2:19:93:c4:3b:f1:71:3e:9c:a6:d7:da:71:97:f6:f1:
         6c:55:4b:de:7e:55:ef:7e:98:f2:bc:7d:34:43:6c:96:7f:7a:
         bd:6c:a5:c9:d5:b7:f4:1d:f5:44:f8:af:65:94:f0:47:98:12:
         7b:96:53:2b:1f:43:78:64:ed:10:55:cb:e0:cb:13:70:84:3c:
         3f:a0:f3:b8:61:24:ad:b6:da:29:f2:99:4e:d4:e6:71:3c:bd:
         a2:59:b3:c5:74:55:e1:11:58:df:f4:11:df:24:6b:fe:e4:eb:
         7b:b0:9f:9a:45:78:29:b4:8c:bb:f2:50:28:02:28:b4:64:54:
         4b:37:6c:0c:db:8d:e8:d7:12:62:6d:42:c5:bf:aa:d6:6c:d7:
         b1:78:15:22:e1:f7:0b:40:ee:63:cc:e8:39:71:1d:d8:1b:c3:
         0c:e4:ba:2b:88:d7:8d:a7:8b:6a:8c:60:81:fe:2e:2d:55:dd:
         28:c0:2b:90:2b:24:ec:ce:8b:f8:4b:2e:c6:5f:b2:f8:83:07:
         8b:12:9d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:23:01 2025 by rpki-client