Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/81d9ccd1-1871-3517-81cb-fde6bbce7e97.roa
File:                     81d9ccd1-1871-3517-81cb-fde6bbce7e97.roa (raw, json)
Hash identifier:          N+XcY+cKKKG8G449DdQ6rLs2JeT6+gMR4ryuQ8zMe6k=
Subject key identifier:   2B:6E:0F:11:D4:B9:DD:CC:79:B1:65:A5:66:E2:B6:4F:5D:1E:46:9E
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584B33F1B66BF03E45E7D15D0800
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/81d9ccd1-1871-3517-81cb-fde6bbce7e97.roa
Signing time:             Mon 15 Sep 2025 13:00:40 +0000
ROA not before:           Mon 15 Sep 2025 13:00:40 +0000
ROA not after:            Sun 14 Dec 2025 14:00:40 +0000
asID:                     211373
IP address blocks:        216.185.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:33:f1:b6:6b:f0:3e:45:e7:d1:5d:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Sep 15 13:00:40 2025 GMT
            Not After : Dec 14 14:00:40 2025 GMT
        Subject: CN=d2a17c9f-94ec-4a62-a233-3af457be3494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c0:30:0c:7a:6e:c4:c3:6a:1e:2f:c8:48:93:
                    7d:8a:11:af:bd:5a:bf:ed:5c:b6:b5:8f:5b:90:fa:
                    93:13:34:cc:d4:61:74:54:96:f5:fa:20:1a:1c:cc:
                    37:83:01:bb:7c:fc:bf:94:e7:e4:18:ed:4f:ac:c9:
                    f6:58:f5:ac:25:ee:4e:ac:d2:ac:df:37:93:8a:39:
                    86:f2:02:69:b3:c1:0a:a8:3c:f1:91:53:73:aa:b2:
                    de:8d:e3:09:37:12:b9:cf:58:a0:ce:fc:82:ba:bd:
                    e6:df:b0:63:60:bc:1e:15:c1:b4:90:88:e5:39:fb:
                    6c:3a:a1:5b:29:e5:02:dd:5a:af:9b:24:e9:dc:56:
                    99:60:02:78:e6:50:fe:ae:7c:0f:fa:25:7c:f1:9a:
                    56:37:66:75:80:a5:0f:87:f4:29:81:3e:1b:32:a5:
                    02:f3:5a:ca:49:ee:b3:85:bc:b9:7c:5a:12:31:52:
                    53:80:f3:ce:10:82:a5:43:e0:9d:13:6f:f8:b8:ee:
                    10:47:66:89:6e:8b:6c:c5:43:24:08:ea:c9:bd:5d:
                    84:44:f2:e9:f5:af:5d:f9:54:8b:b9:30:33:40:0d:
                    1c:ff:2c:0b:a1:13:f3:9e:cc:cc:73:09:47:9b:a2:
                    e7:7b:66:86:d5:fa:af:9c:0f:12:44:e4:23:5b:59:
                    4e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:6E:0F:11:D4:B9:DD:CC:79:B1:65:A5:66:E2:B6:4F:5D:1E:46:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/81d9ccd1-1871-3517-81cb-fde6bbce7e97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:a4:00:d2:50:7f:a2:82:87:5b:de:06:93:2f:f8:50:2e:c8:
         1e:b7:ba:bc:a4:1e:a9:ef:6f:fd:2d:6c:a0:5b:b9:f2:5a:ec:
         04:3e:a3:e7:d0:87:46:0b:31:f1:be:ec:48:14:53:d6:b2:06:
         e9:0e:5b:25:b8:3e:48:81:e8:41:75:e8:9a:cd:3f:70:91:b6:
         47:02:64:35:b7:c9:18:74:57:ba:87:4d:34:cd:c9:5d:a2:b7:
         9b:45:37:bf:b4:ba:da:a3:9f:88:2c:f8:55:b1:97:ad:01:aa:
         cc:53:86:db:14:7c:cb:4d:f9:8f:8d:47:1c:16:13:32:25:c9:
         a4:7e:31:fc:f2:33:09:c2:fb:b4:8d:4a:4c:9a:34:75:07:c2:
         a0:5f:90:90:7d:fb:fa:4c:1c:9a:3c:35:ec:d0:bb:0a:dc:97:
         3f:3b:9d:c7:d6:01:ec:82:1a:32:09:77:1c:03:46:eb:66:7b:
         05:79:f7:c9:6b:06:1d:b0:16:4f:19:5a:d8:32:c8:d2:10:51:
         b9:3b:e9:85:fa:95:45:ed:6a:ca:12:db:99:3a:f0:03:48:20:
         0d:ad:80:cc:da:a9:e8:3e:f1:a8:41:39:04:ba:42:f9:c3:3d:
         05:60:d6:f7:0a:c5:2b:c5:05:2d:a5:53:5f:b7:b1:c4:fc:f5:
         36:0c:eb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:52:00 2025 by rpki-client