Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/b7543be5-0db4-3ac2-983a-82d63bfefca1.roa
File:                     b7543be5-0db4-3ac2-983a-82d63bfefca1.roa (raw, json)
Hash identifier:          g9pTClVUeCb3ObZAvOpO6UZ4IKkAu07LJsAI7b14oVk=
Subject key identifier:   50:6F:D4:DC:BE:F4:23:C8:96:C3:4D:C1:18:91:17:06:D1:31:4D:CA
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584B6631FCF7DC1ED13DFA6B9C80
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/b7543be5-0db4-3ac2-983a-82d63bfefca1.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     61317
IP address blocks:        216.185.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:fc:f7:dc:1e:d1:3d:fa:6b:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=6639c65f-96a0-40a2-a637-01fde12a3284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c1:6e:ed:5b:bd:51:2a:cf:f0:41:09:55:d8:
                    c9:48:89:35:c6:8d:c2:0c:b2:44:cc:e4:76:2f:f5:
                    49:f5:49:0f:6c:85:11:d2:58:89:de:e5:b6:c6:e5:
                    ef:e0:9b:5c:c3:81:f4:ed:3e:19:f5:f6:14:53:d7:
                    af:4c:b4:36:88:e5:84:d0:c0:b8:8e:82:50:8c:04:
                    ad:5e:4d:4c:e2:72:11:d4:ab:75:a4:7f:09:22:89:
                    82:05:87:47:e1:7a:d9:7b:a1:ed:c4:47:09:1a:87:
                    d9:10:09:57:0a:cf:d7:33:ad:a6:f2:76:e3:7e:a7:
                    8b:68:cc:77:65:07:bf:5d:7c:b5:e0:42:f1:2e:bd:
                    47:dc:0a:84:5b:7f:f3:c1:36:25:d9:ec:90:31:0c:
                    14:ac:62:02:75:9e:62:43:16:9e:8a:1d:0a:e6:24:
                    6a:ac:0f:42:03:37:ff:5e:64:a2:42:79:2c:cc:9b:
                    33:e2:1a:c1:d7:b1:cb:4d:6d:fb:8e:94:c9:09:67:
                    90:bd:d2:4b:1b:85:89:aa:85:85:db:7b:5d:99:b6:
                    3c:f8:d6:5c:02:94:ac:9c:20:e6:46:04:14:b8:b4:
                    45:94:e1:b8:f8:3c:5c:a2:33:f5:ae:7b:b3:03:95:
                    a6:de:3f:4a:f0:dd:08:ed:b5:d5:e0:3d:22:a3:1e:
                    71:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6F:D4:DC:BE:F4:23:C8:96:C3:4D:C1:18:91:17:06:D1:31:4D:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/b7543be5-0db4-3ac2-983a-82d63bfefca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:ac:fc:cc:ea:ee:81:04:fd:f5:4f:49:fb:12:c2:85:8e:8c:
         f7:3b:d0:a3:51:c3:27:e0:08:76:15:4c:cc:82:24:95:b7:97:
         ec:04:59:74:e1:56:4f:b2:ad:c1:4b:a3:0c:1c:c3:12:7f:8d:
         37:6a:b6:89:ec:ce:06:1c:48:d0:4f:c4:6a:b7:95:c2:86:4d:
         21:a5:20:b3:7a:63:53:1b:28:58:e0:9c:b0:16:6a:07:fa:87:
         bc:f8:53:4f:42:ad:ea:00:53:b0:18:ea:e3:2b:67:bb:2c:a3:
         42:f0:40:92:aa:85:bf:4b:f8:c0:8f:02:2b:7c:48:4c:8b:0f:
         35:b2:e1:ed:95:99:69:b4:bc:d0:b1:73:8a:24:02:92:46:c0:
         f3:1f:fc:d0:9a:2d:2c:cb:41:e0:30:44:c3:20:1b:67:84:9d:
         86:b0:7e:b9:45:c5:a4:0e:c7:d7:3b:19:32:e0:36:35:fe:6b:
         ca:e9:0f:0d:59:e0:14:2d:63:db:a3:e6:38:0d:94:bf:33:d0:
         0d:47:64:b3:87:9f:f5:51:3e:92:bd:da:c7:a2:69:b1:bf:4a:
         69:d7:7d:57:f5:40:51:73:99:b1:5b:ad:54:56:45:39:86:e4:
         02:33:25:bd:e0:db:0d:15:be:6b:ff:e9:b6:2d:0d:e4:22:92:
         7c:d9:0e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:12:41 2025 by rpki-client