Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f/8ddbb465-e1f6-326b-bf12-fc0993934d19.roa
File:                     8ddbb465-e1f6-326b-bf12-fc0993934d19.roa (raw, json)
Hash identifier:          YXUctLbc+vkCEKtllSqq4j8+d7oqVK8kI+LcslV4oTQ=
Subject key identifier:   78:C3:E0:FF:1B:6D:4A:63:78:20:26:4F:F3:31:5C:A6:21:F5:B4:2A
Certificate issuer:       /CN=15c06a4e-0bff-4d29-8219-f3995e34a55f
Certificate serial:       010D0C9F4328584AD9365F8C6204A16E321A9E00
Authority key identifier: 0C:EF:5B:7A:0A:2C:08:43:B3:19:9E:38:FD:C4:BA:3A:9E:4E:15:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f/8ddbb465-e1f6-326b-bf12-fc0993934d19.roa
Signing time:             Thu 14 Aug 2025 01:00:33 +0000
ROA not before:           Thu 14 Aug 2025 01:00:33 +0000
ROA not after:            Wed 12 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        209.196.215.0/24 maxlen: 24
                          209.196.216.0/24 maxlen: 24
                          209.196.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f/15c06a4e-0bff-4d29-8219-f3995e34a55f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f/15c06a4e-0bff-4d29-8219-f3995e34a55f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d9:36:5f:8c:62:04:a1:6e:32:1a:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c06a4e-0bff-4d29-8219-f3995e34a55f
        Validity
            Not Before: Aug 14 01:00:33 2025 GMT
            Not After : Nov 12 02:00:33 2025 GMT
        Subject: CN=5b17faab-0302-4018-be78-1e6b7a6686bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1e:e7:55:8c:e1:f5:e2:87:27:6a:9c:57:25:
                    f7:9c:40:6e:ff:c0:55:47:62:8a:9d:72:ad:97:9d:
                    93:4f:37:9d:41:17:d2:2b:12:e3:bf:72:a4:09:e2:
                    c4:72:6a:a2:c1:60:a4:38:2a:da:b2:5a:4f:e1:6b:
                    12:7f:bb:cc:24:ae:98:2c:ec:75:ba:f9:19:cf:04:
                    da:2a:4c:7b:7c:28:fc:67:11:92:db:34:c7:88:8a:
                    3e:80:9d:19:76:c2:49:4d:f5:79:7f:69:39:58:ad:
                    50:9f:6a:7b:3c:4d:47:9f:cc:01:c2:5b:ec:d2:33:
                    f9:4a:10:a9:88:1a:86:8c:0c:3c:38:50:05:07:d0:
                    95:9d:6c:19:54:12:69:6b:c5:72:5a:6f:d7:61:e0:
                    29:eb:a3:41:2d:d6:cb:8a:74:a9:6b:4a:41:a1:0a:
                    cb:a6:ec:b0:6e:d4:2f:53:74:9d:b6:70:15:2b:d8:
                    e6:3a:a1:86:d9:aa:a4:c9:3d:d7:d2:fd:92:04:16:
                    a2:0d:82:db:c1:3e:78:59:d2:84:26:39:33:b5:0b:
                    e7:61:e5:a4:da:e0:91:e5:81:55:4b:3b:a1:c4:09:
                    fd:0a:7a:6d:17:1a:07:50:b5:c5:e1:85:d8:1f:3b:
                    53:21:bd:34:67:71:b3:6f:9d:97:ba:a7:94:b2:a9:
                    a5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C3:E0:FF:1B:6D:4A:63:78:20:26:4F:F3:31:5C:A6:21:F5:B4:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f/8ddbb465-e1f6-326b-bf12-fc0993934d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f/15c06a4e-0bff-4d29-8219-f3995e34a55f.crl

            X509v3 Authority Key Identifier:
                keyid:0C:EF:5B:7A:0A:2C:08:43:B3:19:9E:38:FD:C4:BA:3A:9E:4E:15:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.196.215.0-209.196.217.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:48:89:b2:c5:37:64:ca:94:cd:0a:05:36:80:1b:d9:ca:94:
         cb:73:39:88:9a:7a:aa:58:64:e9:3b:2c:39:ee:1e:e2:3a:f5:
         c6:b3:46:4c:27:bf:87:8a:3c:bc:5f:98:28:53:6e:c7:63:9f:
         b9:44:91:e9:ce:31:f4:f3:43:6f:de:1d:2f:ca:e1:1b:b3:34:
         f7:ea:c8:b0:c1:2e:be:a9:af:a9:bf:a1:63:c0:db:8f:20:6d:
         ba:45:9b:b6:6b:60:c7:e9:5c:2c:ed:e0:6c:2d:88:b5:a1:24:
         bb:3e:7b:8d:c9:6e:df:08:2e:ce:b2:90:ed:2d:46:9f:4c:1c:
         98:3f:ea:a9:4f:1e:7d:af:c2:75:77:c7:90:1a:1c:00:cf:71:
         87:bc:9d:73:e7:d1:93:70:bd:02:3d:27:b6:dc:8f:23:ed:0a:
         ce:af:45:18:ac:18:d6:66:92:83:8b:43:84:0d:78:cc:04:7c:
         1f:d3:88:9b:3f:b6:35:6f:90:fd:6c:bf:60:44:e9:b3:7a:a7:
         d4:3c:7e:e8:cc:a3:a4:fe:a2:80:3a:2c:e1:14:58:d0:e0:ab:
         37:16:f9:e2:7f:20:b3:91:14:92:f2:f6:4b:ac:6c:47:7b:b4:
         c0:78:a8:b3:b9:e5:cf:c6:46:f4:a0:29:1c:ff:51:e7:01:9b:
         cb:f5:4d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:42 2025 by rpki-client