Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/5e61b1e9-0bc1-3f1b-8892-603a81e585eb.roa
File:                     5e61b1e9-0bc1-3f1b-8892-603a81e585eb.roa (raw, json)
Hash identifier:          dBoVy1Grun/TfB15x88nK99dyVDxu4yLLr+sU5gim9c=
Subject key identifier:   70:65:A2:6F:F3:7A:CB:3E:E5:B4:8B:45:97:B6:D6:12:EF:D9:3A:F4
Certificate issuer:       /CN=3f607d23-8c92-4ffc-9c54-90418a4c4544
Certificate serial:       010D0C9F4328584B89177E2BC7A2741A8AC751C0
Authority key identifier: 69:38:CC:91:AF:7C:EB:E6:E4:1C:20:81:87:F1:6A:12:91:62:40:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/5e61b1e9-0bc1-3f1b-8892-603a81e585eb.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     10466
IP address blocks:        216.27.98.0/23 maxlen: 23
                          216.27.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/3f607d23-8c92-4ffc-9c54-90418a4c4544.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/3f607d23-8c92-4ffc-9c54-90418a4c4544.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:7e:2b:c7:a2:74:1a:8a:c7:51:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f607d23-8c92-4ffc-9c54-90418a4c4544
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=6618cf94-39a7-4241-a8a6-96b99d327278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:31:10:c0:b6:5b:6a:80:47:f9:cc:be:87:0e:
                    6b:0f:52:15:5f:fa:75:bf:e2:9b:03:ba:2b:f6:ca:
                    d7:5b:a0:77:db:a2:eb:56:20:71:36:e6:f5:76:0f:
                    8a:a8:93:e4:1c:0a:a2:b4:9c:64:e2:49:cc:3f:7d:
                    13:ca:8b:e7:38:80:ac:e7:78:b0:bb:86:7e:45:d4:
                    1c:ff:d7:e3:91:67:28:f0:b0:f3:eb:9f:89:9c:8a:
                    9d:fd:55:56:a3:80:b7:39:6e:61:56:d6:f5:6e:4b:
                    af:ed:aa:dd:c8:04:db:c5:63:17:da:91:38:a7:c1:
                    de:91:2f:3a:67:93:0f:a7:21:6e:02:cc:2f:4e:c5:
                    03:ee:c9:28:59:98:95:dd:45:02:7f:cd:36:0a:98:
                    c1:f3:54:80:63:71:97:4f:1c:a8:1b:6c:22:f2:c4:
                    54:e1:fe:15:47:02:f1:fc:41:76:85:f1:f3:37:29:
                    ce:39:57:80:0e:48:3a:6f:b4:26:b4:74:11:06:16:
                    16:18:b4:49:0f:02:6b:2b:04:f3:06:6b:ad:65:c2:
                    4c:95:85:ce:12:6d:5b:5d:a6:1f:87:8e:c8:d5:17:
                    84:7c:c9:31:02:9d:2b:25:36:b8:1b:c5:45:bd:4e:
                    e1:7e:f2:59:0a:67:12:57:f3:04:66:08:20:14:77:
                    9d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:65:A2:6F:F3:7A:CB:3E:E5:B4:8B:45:97:B6:D6:12:EF:D9:3A:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/5e61b1e9-0bc1-3f1b-8892-603a81e585eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/3f607d23-8c92-4ffc-9c54-90418a4c4544.crl

            X509v3 Authority Key Identifier:
                keyid:69:38:CC:91:AF:7C:EB:E6:E4:1C:20:81:87:F1:6A:12:91:62:40:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.27.98.0-216.27.101.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:3b:2e:62:41:35:99:cf:c2:bb:6c:a4:e6:73:be:29:dd:25:
         cf:ac:c6:4d:48:17:45:82:15:51:71:ed:ed:92:a7:30:bc:47:
         0b:d5:52:04:97:37:33:b4:8f:9a:80:d3:ad:ed:03:d2:cb:1c:
         92:8a:1e:cd:ec:c5:b6:81:f7:d4:da:23:f7:1a:74:73:9b:4d:
         7a:ff:d3:a2:e5:8d:d4:ff:03:8b:1c:e7:fe:da:b9:3c:09:27:
         f2:22:84:16:d6:c3:33:2c:99:42:13:f0:98:24:ff:61:6b:61:
         d6:e8:f1:de:fa:8c:d5:26:14:2a:99:29:08:8f:41:22:a5:2d:
         09:3f:76:56:ce:45:18:98:55:39:28:18:4c:92:76:e6:71:2b:
         de:21:7a:22:80:14:00:a5:fe:72:08:cc:db:ce:2f:10:27:51:
         99:ed:17:d5:8e:25:2e:2b:53:dd:eb:08:2b:97:7e:b9:da:49:
         e4:78:78:e1:57:ab:7b:69:e8:f3:d5:e3:f5:38:a1:29:7a:bd:
         34:3c:33:71:5e:72:1a:3d:8d:f9:e8:bd:fe:e9:a9:b2:27:70:
         96:53:b3:9e:d6:a3:c3:5a:e1:07:0c:19:2d:2b:39:d1:f1:6e:
         67:6b:4d:18:ad:f9:73:27:ba:2d:9d:9f:02:b4:87:6b:81:d2:
         59:9f:7c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:08:56 2025 by rpki-client