Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/3cbb1fcf-9925-31c8-b2a7-c63ce0b5ca2a.roa
File:                     3cbb1fcf-9925-31c8-b2a7-c63ce0b5ca2a.roa (raw, json)
Hash identifier:          44hykRkg/7bZqjVszXU5PQHqNUQ0LQ9TgehbnuMRFE4=
Subject key identifier:   23:6F:77:A0:27:C6:7C:1E:E1:2F:F0:D1:52:B1:2C:6C:D1:0C:0E:E8
Certificate issuer:       /CN=109733f6-670d-4e02-a6e2-403ebf727263
Certificate serial:       010D0C9F4328584AC2E108511616A566DCED9F80
Authority key identifier: E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/3cbb1fcf-9925-31c8-b2a7-c63ce0b5ca2a.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     46741
IP address blocks:        216.228.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:08:51:16:16:a5:66:dc:ed:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=109733f6-670d-4e02-a6e2-403ebf727263
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=d5f9fdba-b2e7-4875-b657-c8c32ebaed2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:9f:0e:03:f2:89:7b:ef:63:c2:fd:98:1d:77:
                    1c:97:98:21:42:ff:16:48:c5:dc:f0:66:d1:bd:32:
                    91:5e:51:73:72:76:bd:e0:87:1d:89:4c:58:45:61:
                    7e:2d:18:2c:45:e9:10:f6:c5:41:ab:0f:6a:6b:51:
                    fb:2b:82:56:2f:a6:24:54:0a:56:45:e9:e2:ff:ce:
                    ed:b5:4e:5a:b9:ac:79:1b:d3:ef:a5:9d:8e:6b:2e:
                    5e:4c:a3:a6:49:b6:44:90:d0:da:87:21:f4:43:75:
                    2b:ec:32:e0:6a:9b:29:77:46:92:70:d9:98:64:fa:
                    54:d8:42:bf:00:e2:66:2b:72:9e:ca:c0:e6:d4:ee:
                    54:e2:9a:13:a0:36:36:94:86:ae:33:cb:97:03:fb:
                    0c:b3:f4:99:6f:79:42:15:97:f8:30:da:10:d6:e5:
                    a6:49:07:01:79:9d:70:19:07:2c:ce:55:d5:b3:ae:
                    53:e1:ec:ae:e0:bb:38:29:9d:db:8e:07:c5:9f:bf:
                    56:1b:4c:55:8e:e9:6a:67:b4:d5:68:02:75:65:c6:
                    b7:a8:b5:c1:40:2f:04:bd:7e:84:35:59:57:3f:05:
                    69:2d:ba:30:a7:d6:89:d5:2e:a2:bc:65:d4:44:00:
                    1a:66:8d:4c:0d:19:d9:b0:94:a6:ab:79:6b:d7:0a:
                    11:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6F:77:A0:27:C6:7C:1E:E1:2F:F0:D1:52:B1:2C:6C:D1:0C:0E:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/3cbb1fcf-9925-31c8-b2a7-c63ce0b5ca2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263/109733f6-670d-4e02-a6e2-403ebf727263.crl

            X509v3 Authority Key Identifier:
                keyid:E9:5C:E4:04:D3:8F:E8:AD:35:EE:F9:60:53:56:92:9D:0E:C1:79:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/109733f6-670d-4e02-a6e2-403ebf727263.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.228.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:0b:80:67:2c:2b:4a:43:2a:37:aa:e7:2f:fb:49:c8:d3:57:
         81:9f:8c:d6:06:93:5f:fd:87:45:1d:7f:a8:fd:c1:39:24:a5:
         78:b1:84:20:9d:7e:b9:f1:bf:b8:f4:49:8c:a2:f6:4c:e0:2b:
         5c:07:da:c8:5c:cf:ac:c5:6c:81:5f:f6:f6:3e:46:ab:1e:06:
         86:6b:05:df:86:3e:de:bb:c2:8b:54:65:e1:2c:b3:8d:31:30:
         38:04:a3:c1:af:9f:2b:f5:8e:f7:58:bb:99:05:aa:61:e5:dd:
         ee:29:04:3a:bb:14:b4:b7:f8:6c:35:b6:64:6c:c6:6b:ca:70:
         5f:c5:13:80:13:76:74:86:32:d5:fc:9c:80:4a:3b:e8:46:ce:
         9e:79:10:a1:9d:74:91:ec:ac:f4:37:3a:4a:eb:dd:71:8e:0f:
         80:f6:23:07:c9:b4:f3:62:ef:ad:76:48:01:a4:62:17:dc:3d:
         0a:a2:a2:25:b2:6c:db:75:7d:36:b2:1d:1b:e6:40:cf:4d:0e:
         45:15:e5:8f:65:9a:ac:7c:82:e8:87:ed:d9:ef:d0:e7:c2:77:
         67:e0:9c:60:0b:2c:43:54:a0:2c:e4:66:2d:5b:69:36:01:e4:
         8e:f2:53:02:02:0c:c2:c1:68:e0:00:c2:04:53:ea:8a:0c:07:
         54:ca:92:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:53:28 2025 by rpki-client