Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/df1d2790-04a3-3ed1-808b-1dab0cc2d47e.roa
File:                     df1d2790-04a3-3ed1-808b-1dab0cc2d47e.roa (raw, json)
Hash identifier:          8EL4oTeFepI+voEjBaeUnNBGdxq5lS8tPxDAc4LEAvc=
Subject key identifier:   38:72:D7:BE:A3:B1:14:01:59:62:5B:20:AE:9A:3A:96:8E:82:75:E9
Certificate issuer:       /CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
Certificate serial:       010D0C9F4328584B2A2C2D186A817DB4BA334700
Authority key identifier: 64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/df1d2790-04a3-3ed1-808b-1dab0cc2d47e.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     46841
IP address blocks:        100.42.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:2d:18:6a:81:7d:b4:ba:33:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86b35f71-51ac-43ff-b604-cba3552c4c8c
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=3b9d4973-5c79-4362-99bd-e0606e952027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0c:fb:79:9c:69:ae:d4:75:5c:69:36:51:50:
                    a3:32:eb:6a:74:f5:d0:7a:17:c2:c6:89:89:96:ec:
                    96:e8:69:0c:c2:d7:8b:67:72:dd:57:05:fd:92:40:
                    15:a1:c1:04:73:f9:66:61:1f:31:cd:03:34:fa:83:
                    1e:4b:d7:8e:dd:53:d4:3c:d7:89:86:27:d2:3d:c0:
                    0a:51:cd:b1:27:9b:8f:ce:8e:e4:11:e4:9b:cd:77:
                    bc:a7:79:d1:e9:37:cd:43:57:47:bc:ea:8e:d5:73:
                    7e:8c:25:a6:a7:d7:e0:db:7b:2a:a3:e7:a9:d7:cf:
                    91:4f:27:20:3a:47:01:fc:5a:07:07:c4:1b:51:bb:
                    41:45:bc:fc:24:98:67:42:f6:c4:55:b3:c4:e4:b9:
                    30:10:36:82:b5:2b:7e:9a:5f:45:0b:6e:ea:8e:1f:
                    fc:0b:ce:14:78:55:54:80:68:ba:fb:ca:fe:a9:92:
                    91:aa:21:ac:e5:f1:d4:55:37:e5:56:fa:85:32:08:
                    cd:60:ab:78:f6:da:27:ed:de:b9:06:af:99:fb:fe:
                    95:41:3e:2a:64:ca:e4:a1:d0:12:18:00:57:f9:bd:
                    4e:0f:95:c5:51:4d:9c:fb:59:56:9c:43:18:ee:45:
                    18:65:a1:2b:b9:1b:91:b2:09:6a:93:90:07:df:53:
                    67:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:72:D7:BE:A3:B1:14:01:59:62:5B:20:AE:9A:3A:96:8E:82:75:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/df1d2790-04a3-3ed1-808b-1dab0cc2d47e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c/86b35f71-51ac-43ff-b604-cba3552c4c8c.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:3D:FE:D3:DF:3D:6B:67:BC:6D:BC:E9:05:BC:C0:6C:E6:1C:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/86b35f71-51ac-43ff-b604-cba3552c4c8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.42.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:ee:d2:93:46:68:9b:ac:f3:f8:84:39:36:98:29:fb:47:64:
         e2:79:57:bc:a0:3e:ce:8b:12:6e:8a:ac:a8:e8:b3:07:76:c1:
         53:a9:28:42:f4:ab:18:d6:dd:d8:0a:ea:2e:a1:82:29:47:12:
         5e:db:b3:d5:30:b9:9e:af:29:f7:7c:2c:13:54:98:1a:e1:da:
         6c:3c:18:4e:bd:b4:1f:35:67:82:60:44:1a:a0:60:1a:6c:7d:
         88:35:e8:e1:b7:b9:ad:ad:62:a6:81:b1:48:7a:20:90:5c:75:
         ae:a6:b0:25:e2:3f:05:6a:98:eb:bb:c9:11:92:b6:de:ea:d1:
         a3:da:6f:ad:3f:29:ea:9e:a9:75:17:1a:c3:53:4f:6c:eb:e0:
         b3:6a:04:4e:c2:d2:ba:7d:8e:da:9e:b0:fb:e4:51:f4:d9:8b:
         a3:99:6c:08:d2:ed:75:5e:ea:50:58:1c:fa:aa:8a:05:da:67:
         60:93:de:85:c4:71:9b:79:fc:48:80:26:6c:a3:a5:6c:62:96:
         45:a6:a9:15:4e:0e:bb:0c:17:bb:05:f3:c2:23:12:43:27:a4:
         5f:de:8b:ec:d2:80:91:3a:79:b9:11:ed:00:a8:63:7b:c7:45:
         3c:1b:19:b1:5c:dd:22:4d:a4:bb:cb:32:40:4f:bd:a8:ff:40:
         a4:e0:16:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:44:34 2025 by rpki-client