Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/e24e2ac0-8bee-33be-b570-6e2f2968ef38.roa
File:                     e24e2ac0-8bee-33be-b570-6e2f2968ef38.roa (raw, json)
Hash identifier:          VpbvwsB0ojzMQoy1Lyp+ZeK/90lpQ7ae7aMNwd0CkgY=
Subject key identifier:   6F:76:23:6E:CD:71:6B:90:FA:43:36:A5:A9:F2:3F:1F:46:65:10:D9
Certificate issuer:       /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial:       010D0C9F4328584AE031149D0C4981861427A800
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/e24e2ac0-8bee-33be-b570-6e2f2968ef38.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     400238
IP address blocks:        216.87.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:14:9d:0c:49:81:86:14:27:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=fe0780a0-fa2f-4f16-b926-e4d29fa93d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7c:fb:c9:fe:3a:83:ed:81:fb:59:9d:a0:03:
                    45:33:8c:e1:94:c8:88:d7:82:5f:fe:06:66:a8:cf:
                    a7:28:76:b7:71:9d:92:3b:e9:89:c6:00:d6:11:b1:
                    8d:c1:2a:fa:05:49:97:43:a7:5b:82:28:96:e9:a4:
                    c9:dc:25:8e:ac:04:1d:c8:3d:66:3d:e1:96:6d:e0:
                    3f:02:b7:97:0a:0a:7c:d6:9e:ff:05:15:3e:7d:94:
                    d3:b0:ae:bc:c5:5f:0f:24:ed:28:eb:53:e0:7e:56:
                    31:19:d0:cc:44:0e:57:72:d3:e2:76:ce:99:b8:37:
                    cd:b6:a2:13:2a:c1:cf:69:c0:ef:c3:ae:a2:96:d7:
                    0a:47:ed:fc:39:15:dd:0f:14:1b:14:3a:88:9c:36:
                    d1:4f:60:0e:4d:e8:55:2d:44:47:16:dd:05:9a:da:
                    e8:93:5a:00:2c:f9:fd:bc:23:bd:a9:19:90:cd:e4:
                    a3:5f:dd:fa:c0:c6:ad:b0:38:c4:f3:09:33:a9:24:
                    1d:51:a4:0b:9a:31:82:66:21:0d:9f:8f:85:2c:a4:
                    f1:8f:45:18:44:75:c3:ad:38:8f:75:a7:d2:ec:c0:
                    29:48:f7:cc:d3:23:4f:26:ec:a7:2b:8f:d0:17:e2:
                    d5:2b:71:3e:61:01:2e:e9:0f:6f:02:c0:54:52:8b:
                    56:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:76:23:6E:CD:71:6B:90:FA:43:36:A5:A9:F2:3F:1F:46:65:10:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/e24e2ac0-8bee-33be-b570-6e2f2968ef38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:df:80:09:9c:5a:64:a8:a1:36:8b:10:58:51:e0:b7:03:ed:
         a7:fd:c3:f9:96:5e:cb:1b:0e:fe:32:5a:b2:6e:f6:f0:f2:1a:
         4c:cd:fa:2c:b7:5d:67:d3:28:7c:10:cd:85:26:9a:49:18:85:
         bc:62:f2:b1:69:fe:6c:5b:20:09:21:f2:9e:31:96:3d:91:43:
         63:6b:27:d4:9a:f6:4f:2a:96:0f:08:a3:ac:af:ff:df:5b:60:
         0f:47:e4:33:14:9c:7e:39:7a:7a:58:ae:0e:73:ec:08:8b:05:
         8c:9b:ac:f1:c3:c4:93:f4:4c:ef:e3:db:f4:89:1c:55:d7:16:
         85:75:9d:d3:27:06:0c:3a:f4:65:32:b3:0b:d1:e6:fe:79:5f:
         84:2f:f9:da:79:66:3c:46:0e:89:dd:0c:b1:09:f2:84:57:dd:
         31:80:db:44:02:27:e9:82:2b:bd:15:45:3c:74:17:04:62:f8:
         9e:21:07:67:51:6d:4c:00:ca:9a:2a:ce:ab:1d:eb:94:36:ff:
         6a:e4:b3:a4:01:27:81:42:db:4f:b6:c0:30:05:09:f2:c1:98:
         02:a9:00:bf:aa:01:19:a6:99:2a:f7:44:49:96:ae:d7:0e:6a:
         59:01:72:08:2f:79:00:63:a2:cd:d5:27:db:4c:12:14:27:e3:
         8a:c2:c7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:15:20 2025 by rpki-client