Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/912f5eaa-9a9d-3d8b-8012-10690c9e5149.roa
File:                     912f5eaa-9a9d-3d8b-8012-10690c9e5149.roa (raw, json)
Hash identifier:          zrH8/Cs1tMeXnN/vvnNBXFW/zw7Iqjb5y5zR5pm9JvE=
Subject key identifier:   46:04:06:C5:A9:21:76:35:8A:9B:06:6E:B9:6E:F9:7A:74:15:28:4E
Certificate issuer:       /CN=0e002701-2485-4643-ba40-3ea23fa41085
Certificate serial:       010D0C9F4328584AD7D129813F8A9CE1BD8D32B0
Authority key identifier: 89:24:57:81:82:9B:18:63:45:EE:40:AE:69:58:AB:9A:35:E5:62:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/912f5eaa-9a9d-3d8b-8012-10690c9e5149.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     16563
IP address blocks:        208.86.96.0/23 maxlen: 23
                          208.86.96.0/24 maxlen: 24
                          208.86.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:29:81:3f:8a:9c:e1:bd:8d:32:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e002701-2485-4643-ba40-3ea23fa41085
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=9bb3c79c-ed2b-4187-8690-1054882bcf87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:78:f5:18:8d:5a:e6:08:d0:d0:de:af:07:90:
                    b7:d2:4a:7c:d5:64:29:5c:82:10:12:4a:b1:eb:66:
                    0b:e9:31:bf:cb:3e:24:15:0e:de:a2:99:3b:97:83:
                    94:bb:a0:f6:30:26:f1:e0:7c:94:e7:c0:03:d6:4c:
                    f4:9b:37:84:ff:f6:9d:ae:aa:d3:92:47:aa:cf:88:
                    8c:e9:02:10:41:4c:10:4e:e7:2e:cc:9a:7a:5f:f0:
                    e7:12:ae:f6:16:d9:70:51:e9:ee:81:6f:14:94:24:
                    66:bf:89:67:8f:ad:d7:29:2a:e5:35:a6:8b:38:26:
                    e8:1d:d8:8c:f5:15:0e:20:1a:ca:42:eb:c6:3d:74:
                    27:fa:e6:ea:0b:dd:71:ac:31:c5:f5:cf:a0:29:55:
                    a8:f4:57:d5:75:26:03:76:26:d6:19:54:08:65:75:
                    fd:8f:bf:5a:59:d1:04:23:78:0a:39:c6:24:18:3b:
                    5e:76:1e:15:a9:5d:c6:70:26:56:e1:25:09:9c:5f:
                    52:13:45:31:da:90:7c:ee:e1:8d:7b:cf:2b:29:57:
                    2c:ae:f2:b7:f3:99:f5:1b:8c:9b:95:95:34:69:d1:
                    27:d6:d3:fa:10:27:1f:05:d2:37:dc:7d:d1:12:48:
                    1f:b9:a4:00:c3:93:c5:1f:8c:fc:60:8c:4b:ed:d9:
                    8f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:04:06:C5:A9:21:76:35:8A:9B:06:6E:B9:6E:F9:7A:74:15:28:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/912f5eaa-9a9d-3d8b-8012-10690c9e5149.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.crl

            X509v3 Authority Key Identifier:
                keyid:89:24:57:81:82:9B:18:63:45:EE:40:AE:69:58:AB:9A:35:E5:62:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.86.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:bf:a6:78:3f:75:02:0c:d4:88:6a:4d:bb:97:bd:fe:19:70:
         cc:eb:f8:b5:e8:6a:5b:0b:e5:43:69:ea:2b:cf:e3:db:4a:cf:
         28:50:79:d5:92:b0:7c:6a:84:a3:9c:a7:e6:12:4e:04:82:2b:
         56:20:c5:6c:4c:82:fa:1d:91:44:5c:f2:49:d7:45:8d:26:78:
         b9:bf:4a:96:6b:1c:3d:ee:a5:74:94:b5:c4:20:c4:59:0e:37:
         44:3a:e1:44:e4:01:01:85:45:93:ea:8b:8a:d4:40:8f:54:67:
         bd:39:ae:39:f1:89:65:52:b4:b4:8a:4d:8d:ea:e8:f6:b8:0f:
         43:33:0c:05:8c:83:6a:1b:12:7e:38:4f:0c:09:f7:0a:a8:38:
         05:1e:e4:87:88:ad:f6:94:28:cb:2d:13:42:48:97:1d:d4:17:
         e1:b8:6a:5a:72:d9:5d:33:29:31:13:3e:a8:e1:7b:f3:f6:ce:
         27:16:a7:0c:93:d3:02:86:1a:08:1f:a8:84:d5:b1:a7:67:c6:
         f1:6e:b9:51:e6:63:dd:a3:ea:79:77:0a:d5:31:a9:6c:07:ac:
         3a:91:d3:d7:5e:6a:0d:19:c5:41:8c:ea:f8:79:67:02:b4:d1:
         ad:05:15:4c:a8:02:70:6d:dc:62:28:52:f5:6b:d6:58:22:bd:
         1f:66:dd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:32:30 2025 by rpki-client