Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/06c142a2-a6df-344a-ba65-001c37951c83.roa
File:                     06c142a2-a6df-344a-ba65-001c37951c83.roa (raw, json)
Hash identifier:          dRatFmm2sF/xfsmBLGaOEC+gOeJMUMeA0qFUaWeME58=
Subject key identifier:   10:3D:53:99:AE:69:C2:EA:9B:0B:D6:42:5F:99:53:00:FC:E8:3D:20
Certificate issuer:       /CN=8ea241f2-3e20-4202-98ef-4d92b45559ea
Certificate serial:       010D0C9F4328584AEE268BC9C002BB326A179040
Authority key identifier: ED:6B:14:F9:53:5D:F2:B5:35:4A:CC:8C:16:95:25:E6:3C:B6:05:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/06c142a2-a6df-344a-ba65-001c37951c83.roa
Signing time:             Thu 21 Aug 2025 13:00:41 +0000
ROA not before:           Thu 21 Aug 2025 13:00:41 +0000
ROA not after:            Wed 19 Nov 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        204.16.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/8ea241f2-3e20-4202-98ef-4d92b45559ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/8ea241f2-3e20-4202-98ef-4d92b45559ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ee:26:8b:c9:c0:02:bb:32:6a:17:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ea241f2-3e20-4202-98ef-4d92b45559ea
        Validity
            Not Before: Aug 21 13:00:41 2025 GMT
            Not After : Nov 19 14:00:41 2025 GMT
        Subject: CN=2578c5e3-992a-4a54-a08d-c4ba35332eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:81:ff:0c:0b:c1:eb:44:7c:7b:fa:8e:5c:7f:
                    6f:8d:0b:62:4b:b7:b8:3d:31:9b:ab:51:a4:ea:ba:
                    b9:9c:ff:5b:fa:3d:b2:95:96:a3:12:f5:d0:bd:b0:
                    47:aa:80:32:b8:3d:75:c9:e6:b4:4e:35:c4:36:15:
                    59:1c:ca:78:a5:f8:85:ed:20:d2:6f:58:d9:14:f3:
                    ed:df:cd:a0:88:d7:66:8c:57:92:62:a3:13:28:9e:
                    3b:f4:68:28:26:47:be:de:e9:9d:ac:86:60:12:85:
                    9b:ac:28:d6:ad:74:0a:9c:a8:de:7f:5e:4b:50:fb:
                    3e:0c:3c:4c:3e:6b:d9:67:37:7b:7a:94:f5:b0:7c:
                    da:4a:f2:ae:94:a0:a3:81:90:31:86:41:63:21:ae:
                    24:92:55:05:80:09:0a:89:20:f3:18:4e:9b:0e:5e:
                    5f:08:83:c3:b8:7d:15:76:cc:fd:a6:c7:8a:b6:cc:
                    e7:6b:15:d4:03:c6:79:87:61:f0:d5:62:d1:e8:ea:
                    b1:c0:19:83:ec:4f:cf:61:b8:9f:62:7d:79:aa:77:
                    c9:77:61:ad:32:c4:fd:17:6c:6f:ae:df:df:00:cd:
                    be:32:0d:f7:98:0f:df:1e:3c:9f:3b:71:ad:10:8b:
                    bf:04:64:16:70:ed:27:dc:60:e9:4e:aa:44:d1:12:
                    08:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:3D:53:99:AE:69:C2:EA:9B:0B:D6:42:5F:99:53:00:FC:E8:3D:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/06c142a2-a6df-344a-ba65-001c37951c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea/8ea241f2-3e20-4202-98ef-4d92b45559ea.crl

            X509v3 Authority Key Identifier:
                keyid:ED:6B:14:F9:53:5D:F2:B5:35:4A:CC:8C:16:95:25:E6:3C:B6:05:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ea241f2-3e20-4202-98ef-4d92b45559ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.16.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:87:8a:ca:81:21:d9:44:a7:c1:84:db:fb:90:4e:6b:13:c7:
         60:77:43:06:f3:76:ff:e4:22:6d:7e:b7:69:f4:55:18:ac:26:
         1f:15:73:16:7d:2d:79:c4:9f:f7:e8:22:bf:b2:91:01:18:bb:
         03:75:89:68:0b:a7:4e:af:c7:90:5d:78:ae:f2:fb:8f:df:f4:
         c8:50:5e:67:c9:c3:3c:42:c1:9c:2c:32:e2:ef:96:06:cc:65:
         72:18:83:8c:a5:16:89:34:0b:94:63:ac:0e:31:9c:79:c6:f9:
         c2:e6:7e:8b:12:5f:fc:d6:1d:4f:e2:81:ae:9c:f8:73:29:b9:
         93:c4:5b:80:ca:69:a8:90:3a:31:86:e6:a3:e1:7a:c1:58:39:
         c6:0a:ce:a7:5a:66:7a:60:3a:cd:ae:92:7a:99:89:f5:53:2d:
         c6:c1:2d:5b:07:75:ad:71:e1:aa:98:d2:eb:42:f5:a5:ec:ab:
         80:d0:03:bb:46:98:8f:fa:23:cf:27:66:38:e7:ea:0c:fb:88:
         55:0b:2e:04:b7:94:14:a1:b4:a0:47:2b:1c:ed:ff:39:40:f3:
         97:ce:e9:93:76:00:f5:a6:16:27:54:7c:3f:ed:10:a0:f0:0f:
         b0:f2:ad:7c:cc:e1:6b:ba:4b:6c:9a:46:b4:6b:4a:42:69:dc:
         37:2d:ed:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:28 2025 by rpki-client