Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/84e8903d-ec5b-3551-96bd-d419dbc97d32.roa
File:                     84e8903d-ec5b-3551-96bd-d419dbc97d32.roa (raw, json)
Hash identifier:          MpUVmOrn6UojCRkw8RcdDCMK+nBjO00i5ilQsaDwMk0=
Subject key identifier:   13:D4:22:6C:C3:92:D2:BB:47:16:65:B2:AF:F4:FA:88:B1:B4:0A:C3
Certificate issuer:       /CN=71e68809-5436-4288-ad80-0df35fa0b945
Certificate serial:       010D0C9F4328584ACE0BA4C35D0F043368EF10E0
Authority key identifier: 10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/84e8903d-ec5b-3551-96bd-d419dbc97d32.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     14618
IP address blocks:        192.28.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:a4:c3:5d:0f:04:33:68:ef:10:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71e68809-5436-4288-ad80-0df35fa0b945
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=8ef70e06-a21c-4f54-a90c-a94a42192aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7d:35:95:6c:63:c2:26:0c:c3:87:3d:2d:b7:
                    1f:11:48:91:7b:7d:71:8e:fd:d7:03:dd:27:5e:3b:
                    3c:70:ce:fe:77:c3:de:12:de:90:e1:db:29:17:fe:
                    68:a6:85:7b:6c:d7:cb:d0:0b:33:72:9a:cc:05:89:
                    ac:7d:9b:a0:79:a5:7b:cf:a3:d2:e3:08:7a:83:60:
                    01:ec:b9:40:ec:02:83:ca:82:d1:8b:32:de:52:02:
                    24:0f:34:56:e5:5f:92:73:a0:1e:56:f0:fb:5f:6f:
                    a6:80:81:3f:c8:f5:61:c3:db:7a:81:04:a3:4e:c0:
                    16:3f:10:58:87:2c:1c:cf:57:99:52:66:7e:67:dc:
                    01:63:2b:a2:0c:4f:a4:ca:bc:00:64:65:a9:1b:c9:
                    46:19:48:0f:56:4a:b9:79:67:da:0c:4a:6b:b3:1d:
                    04:3e:f5:3e:55:fb:97:a8:3a:8c:cf:53:7c:cf:03:
                    19:44:22:fd:fb:cb:08:29:a8:03:18:9e:92:17:f9:
                    6a:00:9f:51:1f:a5:a0:71:b7:f5:0e:83:50:70:a9:
                    36:36:d3:da:a2:66:cb:b4:c1:1c:0c:1d:be:ce:fe:
                    df:e2:c6:c2:87:b8:82:1b:48:41:c9:d9:1c:90:62:
                    bf:32:66:f5:6e:d0:48:0d:58:1a:bc:ed:3e:51:11:
                    00:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D4:22:6C:C3:92:D2:BB:47:16:65:B2:AF:F4:FA:88:B1:B4:0A:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/84e8903d-ec5b-3551-96bd-d419dbc97d32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945/71e68809-5436-4288-ad80-0df35fa0b945.crl

            X509v3 Authority Key Identifier:
                keyid:10:50:00:5F:86:30:2A:B9:1E:85:F6:50:F6:72:D3:32:A5:BB:54:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/71e68809-5436-4288-ad80-0df35fa0b945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.28.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:b5:4c:93:dc:f5:57:64:38:3d:5d:63:47:cd:ef:b6:c2:40:
         2c:dd:c3:40:ae:00:e6:0a:96:10:94:f6:b9:f6:de:61:38:0d:
         e1:16:bf:4c:44:97:8c:0d:17:f9:a0:1b:33:22:6e:ff:c9:03:
         f5:0e:d3:0b:6b:56:24:a7:b9:46:dc:d7:39:18:ed:6d:25:b1:
         6f:8c:e2:01:b2:d4:68:25:bf:6a:aa:94:aa:74:d8:2f:d2:0f:
         81:a4:d4:ae:1d:2a:de:52:ce:0d:ad:1f:67:7b:51:11:05:62:
         b8:76:86:1d:c4:86:da:a2:25:aa:78:4b:d4:8b:fe:88:e0:6e:
         ee:1a:62:50:f9:7a:7e:66:e9:c7:1a:a3:47:69:62:6a:15:2a:
         62:d1:3e:b2:81:a3:fd:6e:01:9c:b6:ad:30:81:b4:42:87:97:
         30:07:6d:c9:55:8c:a7:34:38:b3:72:60:b0:6c:fb:82:16:76:
         c0:95:8e:0c:23:9e:28:e0:dc:26:63:96:42:b7:fc:37:5f:3c:
         35:e2:80:0b:ac:10:ac:d5:cf:e1:d7:92:55:31:df:a5:24:56:
         5b:d6:0c:2f:7b:c5:7d:59:a7:bf:5e:74:5c:01:a9:30:52:6f:
         f5:96:3c:63:ef:df:94:96:81:48:92:c1:d4:16:d9:f3:eb:39:
         b4:44:2c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:10:16 2025 by rpki-client