Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/3cbe784b-a4fd-3ec5-bcca-2037706eae92.roa
File:                     3cbe784b-a4fd-3ec5-bcca-2037706eae92.roa (raw, json)
Hash identifier:          BQPDqOVjdM79ROukFQJaP015KZIWCtKW4NjLz4hoXDI=
Subject key identifier:   93:D6:B9:31:FB:40:ED:87:FE:D4:AB:65:17:33:D2:98:24:81:AB:31
Certificate issuer:       /CN=1eceffa4-1513-452e-91b8-8d0a0b51f920
Certificate serial:       010D0C9F4328584AECC12CC504267850BE937C80
Authority key identifier: CE:4F:2D:49:31:F6:60:51:61:7F:25:7F:31:32:1C:1E:96:CB:7C:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/3cbe784b-a4fd-3ec5-bcca-2037706eae92.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     18780
IP address blocks:        216.71.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:2c:c5:04:26:78:50:be:93:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1eceffa4-1513-452e-91b8-8d0a0b51f920
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=a316ee60-7442-4bd9-b179-4046244625da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:66:fb:1d:92:7a:f1:63:8a:ff:27:8c:70:b9:
                    72:cb:9f:8f:7e:98:62:ee:0b:e5:3e:8f:fb:6e:71:
                    29:2b:34:25:dc:97:9a:3f:e8:7a:3c:a8:4f:1b:04:
                    19:36:a6:cf:e6:ad:5c:0f:69:83:c3:2a:bf:89:f2:
                    9c:6c:7c:87:c1:ed:71:fe:1c:4e:cd:f2:78:a8:ae:
                    e7:ed:59:63:81:ba:b2:d3:be:d3:cb:0c:4c:d7:e0:
                    46:df:76:0b:49:65:08:4b:5c:5e:e1:5d:25:c0:bf:
                    71:74:98:65:4c:b5:29:f1:ae:15:ae:3e:05:0e:04:
                    52:a9:92:f5:69:ef:79:72:09:7e:a8:7e:bf:48:3c:
                    6e:84:16:85:75:62:8b:6f:8e:27:56:a2:23:1c:c7:
                    f4:6e:48:31:11:41:d8:10:b2:f4:1b:06:12:f1:ab:
                    b4:0d:c4:dc:8a:e9:05:35:05:0d:cd:49:7d:47:da:
                    43:25:60:7e:cf:26:48:e9:70:97:e6:b1:0a:a6:e4:
                    17:de:41:f5:3f:7d:d1:41:3d:f1:99:52:35:48:b3:
                    64:94:fb:40:b3:6b:1e:c9:5f:9a:1b:a1:7d:9f:f2:
                    2d:c1:3d:7a:ae:cf:eb:aa:b3:22:47:bc:24:26:9a:
                    98:0f:25:e6:f9:4c:d1:4e:5f:56:66:13:4b:26:27:
                    a2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D6:B9:31:FB:40:ED:87:FE:D4:AB:65:17:33:D2:98:24:81:AB:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/3cbe784b-a4fd-3ec5-bcca-2037706eae92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920/1eceffa4-1513-452e-91b8-8d0a0b51f920.crl

            X509v3 Authority Key Identifier:
                keyid:CE:4F:2D:49:31:F6:60:51:61:7F:25:7F:31:32:1C:1E:96:CB:7C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1eceffa4-1513-452e-91b8-8d0a0b51f920.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:5b:8d:ec:1a:46:8d:46:99:29:be:9f:87:32:25:a7:28:02:
         24:2c:b2:59:da:61:fa:f1:85:04:54:e3:83:b3:90:17:0e:fa:
         88:ae:e2:9f:a1:9b:5e:da:80:04:d9:ea:ef:c3:40:46:ca:f8:
         f6:01:8a:73:d8:4f:78:cf:a2:7b:0f:5a:3d:9a:a6:fb:92:b1:
         cc:70:44:74:bb:70:6e:c8:27:50:e0:19:3a:79:a2:ac:81:50:
         a4:cc:c1:48:04:5e:09:5d:05:6d:f6:8d:5e:69:4d:9b:d2:31:
         14:2e:ba:6a:b9:ae:ab:74:7a:07:3c:8f:28:ee:eb:37:d1:ff:
         b0:9b:83:3d:f8:69:af:d6:84:1d:6f:5c:57:3a:b9:4a:e1:25:
         fe:0a:d1:54:57:ba:28:81:1f:f1:e8:d7:cb:17:84:8d:81:a3:
         33:c1:80:b5:be:4c:ab:76:40:45:80:86:f5:84:2f:1b:c3:d5:
         50:cb:8a:41:ad:34:b9:af:8f:8c:ca:8e:31:be:46:59:f5:14:
         e2:fe:97:d2:25:8a:5b:3b:fc:98:2f:3b:56:43:5a:eb:6f:bf:
         6a:34:94:ef:67:03:62:1d:fa:5b:34:ae:5e:ad:c6:7a:f8:ea:
         97:b8:f1:d4:73:eb:5f:83:e8:e9:ef:44:5f:7e:51:ca:2e:db:
         43:e8:d3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:56:24 2025 by rpki-client