Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/f87456cf-08c3-304e-bc3e-9b21713eff7f.roa
File:                     f87456cf-08c3-304e-bc3e-9b21713eff7f.roa (raw, json)
Hash identifier:          mfBU/1vTrOGF4z0FYu2F59OPiNJp07VNOhylF0/v7Xc=
Subject key identifier:   D0:7D:F7:8A:7D:30:B8:06:CB:2E:CB:B7:8C:E9:78:05:85:A0:95:29
Certificate issuer:       /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial:       010D0C9F4328584AE03114065F6CCBEA538B7000
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/f87456cf-08c3-304e-bc3e-9b21713eff7f.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     400238
IP address blocks:        216.87.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:14:06:5f:6c:cb:ea:53:8b:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=4e9ea3a1-4598-4a37-823e-fa84b3118502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3b:fd:75:f1:1a:fc:80:1a:6f:d3:ea:59:75:
                    01:0a:14:78:1c:af:41:af:1f:0c:15:c4:28:db:69:
                    6f:ae:f2:82:37:2d:63:81:a9:90:b7:e2:7a:e7:a6:
                    e4:f9:7e:88:1d:23:33:f4:eb:81:e3:11:4a:96:92:
                    2b:9d:62:ad:14:d3:cf:32:2e:bb:43:04:8f:7c:69:
                    72:7f:8b:19:59:32:4d:f7:ab:08:4c:84:d3:db:66:
                    87:e0:ec:d6:f7:22:ad:73:ad:8e:86:e2:70:fa:f6:
                    7e:b2:e2:a3:d0:68:ef:1f:87:b4:af:b2:50:27:cb:
                    82:d0:c6:6b:c0:12:31:43:85:93:dc:b7:a7:f4:7e:
                    7f:3e:8b:c9:13:ba:d7:53:12:f3:8d:86:ae:c1:f5:
                    a4:2f:4b:56:be:6f:2a:4a:2a:10:9e:01:16:be:03:
                    7f:41:be:3d:43:5a:d3:77:b6:27:da:f4:d9:8a:3e:
                    3d:42:01:82:52:0b:38:03:4b:53:04:d6:6b:4d:fc:
                    33:f4:74:de:92:f0:9e:51:3e:f1:5f:2a:68:bb:e4:
                    82:5a:4f:5a:0a:39:6f:ab:51:58:87:e1:7d:ac:b5:
                    28:c1:9d:f0:0e:c9:cc:7b:62:6e:71:84:a5:9c:f8:
                    0c:11:65:cb:91:0c:de:e7:5c:07:e9:1f:9f:ad:93:
                    98:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7D:F7:8A:7D:30:B8:06:CB:2E:CB:B7:8C:E9:78:05:85:A0:95:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/f87456cf-08c3-304e-bc3e-9b21713eff7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:9e:c8:59:17:29:13:ea:f1:1e:7e:7f:e0:80:50:49:d3:0a:
         ea:cc:e9:8a:f6:46:62:f6:46:98:b9:a1:31:33:57:88:e6:11:
         cd:0c:3d:6b:dc:49:e0:ac:d7:23:8a:2c:9d:16:57:59:97:aa:
         19:7b:b3:80:3f:d3:b9:2a:ae:88:64:7b:86:e7:73:96:b8:4b:
         e3:60:81:77:bd:60:f1:ec:cc:28:b3:33:25:be:a8:64:d5:88:
         37:b3:bb:9c:41:67:c6:e9:1d:af:50:6b:8f:4b:4e:1d:50:8a:
         4b:14:90:10:19:59:45:62:a8:e4:ca:a4:cb:df:a5:8b:03:8b:
         c2:98:57:c7:7c:21:28:c6:f1:00:26:bc:07:b3:8b:68:3a:60:
         5c:1b:9d:97:8a:73:a6:fc:8e:a3:24:92:10:61:e1:5c:bb:58:
         2b:d8:42:41:50:dd:71:76:a0:69:dd:64:db:88:1a:b2:92:8f:
         02:87:34:36:8d:5e:9e:81:de:a2:f1:30:80:26:0b:d5:5f:c4:
         91:ea:5e:58:a8:2f:18:17:10:e9:ff:9a:20:7e:bf:a5:27:78:
         9f:25:1e:8e:ad:a6:66:89:ca:e6:79:1f:8c:f6:e7:d0:78:7d:
         8f:90:b1:80:e4:83:95:51:2c:58:2d:e6:0e:a4:4b:f5:5a:97:
         44:8d:2c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:54:00 2025 by rpki-client