Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/8f580b9c-39df-3e7b-9b77-15f9f9ee0f4f.roa
File:                     8f580b9c-39df-3e7b-9b77-15f9f9ee0f4f.roa (raw, json)
Hash identifier:          vNZkN9BknVCtB3d3teBM//gI7Pjd5jbm/LZFmda0qFE=
Subject key identifier:   91:F5:7A:41:B5:4F:E9:36:47:07:63:BA:93:22:45:59:4C:3D:F4:22
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584AF2567AC1BC79C79EAC9BD800
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/8f580b9c-39df-3e7b-9b77-15f9f9ee0f4f.roa
Signing time:             Sat 23 Aug 2025 01:00:33 +0000
ROA not before:           Sat 23 Aug 2025 01:00:33 +0000
ROA not after:            Fri 21 Nov 2025 02:00:33 +0000
asID:                     19437
IP address blocks:        216.185.49.0/24 maxlen: 24
                          216.185.51.0/24 maxlen: 24
                          216.185.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f2:56:7a:c1:bc:79:c7:9e:ac:9b:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Aug 23 01:00:33 2025 GMT
            Not After : Nov 21 02:00:33 2025 GMT
        Subject: CN=b0990940-d86a-4ec6-97e4-18c3a2ac51fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:53:87:2a:26:9c:0c:02:8b:4a:e2:ea:04:60:
                    94:aa:3c:ec:2e:64:5d:aa:7a:69:74:66:ca:6a:80:
                    60:9b:c3:da:5c:cc:aa:fe:10:a4:1c:67:72:5f:08:
                    8c:32:6b:b7:8b:b7:aa:da:8f:6b:b9:79:25:9e:13:
                    b5:79:1e:b1:63:7f:b9:de:c6:79:f1:43:1d:f8:4a:
                    e0:36:7e:a8:0c:13:32:d8:34:23:5e:5b:95:33:6e:
                    fd:5f:c1:f1:d4:0e:2a:71:c6:fe:32:d0:5e:27:5e:
                    b2:ea:d5:44:4d:95:b6:7a:f5:84:a6:50:e0:4e:f2:
                    c8:63:9c:25:cf:a6:55:63:65:64:70:e4:30:be:f8:
                    1d:24:39:1a:a7:9f:fe:e6:e8:8c:9e:73:18:3f:76:
                    50:27:52:fd:a1:cd:70:97:d4:e8:86:f0:d0:89:92:
                    91:a9:a3:3f:0e:bc:83:72:40:47:57:1e:ab:5b:b1:
                    48:af:e1:9d:68:3e:2d:b8:91:de:77:c8:5d:68:b8:
                    71:16:f6:c3:95:32:ec:9b:e9:e7:0c:56:2b:c1:3f:
                    34:b8:40:35:77:43:f8:3d:9e:51:48:86:21:8a:c1:
                    5b:ad:9c:84:cd:28:aa:25:ea:c0:4b:44:0a:51:61:
                    49:71:b7:44:c3:91:74:35:b0:b2:81:ff:99:c0:05:
                    c1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F5:7A:41:B5:4F:E9:36:47:07:63:BA:93:22:45:59:4C:3D:F4:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/8f580b9c-39df-3e7b-9b77-15f9f9ee0f4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.49.0/24
                  216.185.51.0-216.185.52.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:df:4e:50:b6:93:0e:90:48:ed:4a:8f:e6:01:fb:1c:bb:13:
         65:fb:e5:b5:55:d4:34:4c:1c:42:6f:95:a6:d0:d2:a8:db:3a:
         66:ff:a0:6e:06:65:6b:fe:99:ef:3d:ad:89:4e:4d:fc:d9:c7:
         a7:e3:52:17:c7:51:f3:ac:19:c6:4d:8e:c9:7b:e2:0b:6c:6f:
         7e:bc:35:d8:7d:d8:ae:b2:96:43:98:43:62:c4:9f:cd:3b:9a:
         a2:af:8a:24:49:d4:93:ce:ac:de:30:c0:a4:ec:31:43:bf:70:
         30:80:35:d9:ed:ba:fc:5f:ce:ed:37:aa:53:a8:92:47:31:b7:
         ea:1a:eb:05:9c:a0:19:fd:27:77:d7:df:f0:ec:7c:c1:9d:1d:
         75:7a:37:99:4d:53:06:56:3c:7d:a6:64:ca:d1:5e:14:db:69:
         da:0b:6c:31:d5:01:d5:f0:26:b1:fd:c7:f0:47:16:de:7a:40:
         55:4c:3d:b5:4b:af:d1:58:18:5e:8e:85:b9:12:39:0e:2f:38:
         0c:09:16:8a:89:01:ab:8d:00:20:9b:62:67:75:72:c1:ee:1c:
         34:79:a0:bf:03:2f:ed:59:63:d6:dd:3f:b4:3a:e5:ec:c5:24:
         36:ab:0a:2c:7f:1d:1b:09:dc:27:10:eb:63:40:e9:e7:09:f2:
         40:65:bc:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:09:20 2025 by rpki-client