Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/b3fa1351-bc7b-391d-8685-0aeff2dafec1.roa
File:                     b3fa1351-bc7b-391d-8685-0aeff2dafec1.roa (raw, json)
Hash identifier:          adO8LFBbEdl8Ct8xTpvNk46QoLH7SolB8JtN7t80cf4=
Subject key identifier:   F0:25:A0:13:F3:F2:54:86:9F:16:8F:E6:DD:94:B9:F3:1F:6E:2C:51
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584AE685F687C2DE82D5450A83C0
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/b3fa1351-bc7b-391d-8685-0aeff2dafec1.roa
Signing time:             Mon 18 Aug 2025 19:26:36 +0000
ROA not before:           Mon 18 Aug 2025 19:26:36 +0000
ROA not after:            Sun 16 Nov 2025 20:26:36 +0000
asID:                     9304
IP address blocks:        216.83.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:85:f6:87:c2:de:82:d5:45:0a:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Aug 18 19:26:36 2025 GMT
            Not After : Nov 16 20:26:36 2025 GMT
        Subject: CN=2c8eea38-db68-4a48-b2c1-29ca485fd1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fc:a8:32:99:b3:fc:5c:87:fd:2f:d5:90:43:
                    0c:2d:19:03:3c:9d:e4:f8:29:17:53:90:ff:89:0a:
                    d1:89:51:cd:7e:18:13:96:6f:ea:e1:27:bb:c9:a7:
                    40:b0:fa:74:1d:da:b4:a5:8a:c3:ef:3f:07:42:69:
                    44:f0:94:76:cd:2a:54:47:6b:23:51:32:ca:4e:7e:
                    97:e5:93:a9:8c:7b:51:78:ca:8b:fe:37:25:67:10:
                    74:56:8a:c7:f8:c3:7d:2c:67:37:3c:28:7e:7d:92:
                    0e:e1:2b:f1:ef:bb:9b:6a:1a:48:12:bc:ff:aa:1d:
                    00:37:c9:49:68:53:3d:4b:e6:13:30:fc:3a:63:43:
                    e5:80:a6:60:6b:bb:bc:35:7f:c9:5c:7a:1c:ec:a5:
                    b7:e4:29:13:91:48:ea:cd:04:7f:90:6a:19:6c:88:
                    e8:a2:e0:5f:c0:d7:b8:28:12:36:86:d0:6a:74:95:
                    04:cd:6b:f7:4a:12:a9:ce:c4:6d:c6:c1:95:be:f2:
                    73:c6:68:c6:f2:69:07:f1:42:60:ef:46:6d:62:66:
                    60:78:2f:5f:86:ac:de:45:6e:4d:20:68:e7:2c:70:
                    ae:72:15:0c:b5:7d:99:5b:7a:19:29:ba:54:0d:67:
                    6a:6b:4d:40:53:ac:48:63:21:f2:3d:67:eb:14:3b:
                    8b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:25:A0:13:F3:F2:54:86:9F:16:8F:E6:DD:94:B9:F3:1F:6E:2C:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/b3fa1351-bc7b-391d-8685-0aeff2dafec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.83.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:27:b8:1b:17:cf:91:f7:93:60:a9:e6:e7:60:9f:db:7e:e5:
         d7:0f:60:84:08:ec:cb:f1:3b:bd:30:81:d7:da:ff:f9:d2:b9:
         10:6a:a4:be:61:1b:4e:10:6f:90:1b:2b:f4:fd:64:22:f4:25:
         11:4d:12:a0:cf:ac:37:55:9b:83:26:51:93:ac:ae:c8:df:fc:
         8b:04:ef:9b:a6:44:e8:ed:67:1a:9d:39:00:86:2d:34:c3:42:
         c6:d4:9a:b6:9d:63:fe:c1:69:9c:42:90:69:d2:cd:c2:61:03:
         7e:d6:b2:2a:00:a6:8e:42:de:77:5f:62:83:0a:52:45:b2:85:
         df:1c:f0:2c:95:74:b8:97:f3:bb:e7:b1:1e:a9:1d:dd:5f:65:
         38:3e:e5:32:2e:03:ef:fb:fc:06:e7:bd:8f:01:85:45:ee:58:
         61:7c:f7:bc:af:d7:98:82:95:2d:e7:56:2d:a7:61:7f:d4:bc:
         d9:c5:fa:b6:bc:84:95:0e:71:70:26:ba:77:0c:d6:3e:6f:c7:
         fd:3c:80:4f:b8:5c:3d:37:ff:f8:34:ca:53:06:7b:2c:1e:c0:
         fe:fe:25:f1:c7:e6:ca:39:28:14:bc:64:b5:50:da:98:77:1a:
         ab:a6:ef:83:e1:bc:6d:b6:b4:19:5f:c3:ed:62:9b:ba:c1:40:
         25:ea:8b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:59:27 2025 by rpki-client