Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/34d3497e-f5b7-366d-a095-53a322d49a0c.roa
File:                     34d3497e-f5b7-366d-a095-53a322d49a0c.roa (raw, json)
Hash identifier:          Hbov2PnPZ5XisNTCALu8p9b7z2BOrJs1EXlTEBQQ1cA=
Subject key identifier:   75:D7:7C:6E:3B:0B:9D:7D:25:35:40:DA:4F:22:DC:60:C7:F8:05:64
Certificate issuer:       /CN=70057aa1-544d-4237-b549-304fd45324ba
Certificate serial:       010D0C9F4328584B4081B2F4384D4DD507C5CD00
Authority key identifier: DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/34d3497e-f5b7-366d-a095-53a322d49a0c.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     30039
IP address blocks:        216.222.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:b2:f4:38:4d:4d:d5:07:c5:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70057aa1-544d-4237-b549-304fd45324ba
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=3196d77f-5f17-4107-9b2b-3b9cb4b43472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:82:6a:6e:e8:a1:33:6a:3e:c6:85:ac:b4:a5:
                    b3:d7:f0:78:a2:bc:3f:e7:ec:3a:8a:f4:d4:62:42:
                    36:48:f9:d2:64:36:55:b0:38:2c:a7:9a:84:97:b9:
                    1a:78:e1:d5:d2:88:aa:f1:76:2d:fa:37:59:40:2b:
                    54:57:cc:72:d1:99:09:65:a1:28:0c:96:53:9e:c2:
                    5d:ce:87:c2:0b:a6:21:a9:e2:84:14:78:85:69:14:
                    4f:e5:eb:05:76:ed:31:6e:a4:50:f9:ed:89:62:ec:
                    30:21:f8:18:fe:87:29:7b:cd:38:9c:6e:5a:11:58:
                    ef:f4:75:fa:18:07:c5:ae:91:a8:cb:6a:ad:9f:56:
                    48:5b:ee:51:e5:7e:76:e6:48:9b:a5:9d:e4:d6:4f:
                    ea:bb:25:35:c8:8c:0c:5c:6f:87:e6:26:4f:e5:f9:
                    01:8c:b8:2c:2a:3b:e5:bf:82:38:a3:7a:98:a9:f1:
                    b7:15:f1:e2:1f:a1:3d:22:7b:47:5a:0d:db:ee:19:
                    c0:3c:c8:8f:88:56:a2:c3:00:c0:ea:bc:df:cf:6c:
                    65:00:a2:94:a4:b3:7b:8a:54:19:d6:84:6d:1d:9a:
                    f2:94:0f:08:bd:2b:bf:0c:4d:8b:a9:17:c6:30:52:
                    b0:39:4b:10:f0:66:94:6b:3e:6f:60:28:f7:2b:40:
                    e2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D7:7C:6E:3B:0B:9D:7D:25:35:40:DA:4F:22:DC:60:C7:F8:05:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/34d3497e-f5b7-366d-a095-53a322d49a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba/70057aa1-544d-4237-b549-304fd45324ba.crl

            X509v3 Authority Key Identifier:
                keyid:DE:4A:A5:D1:33:5C:FD:87:EF:30:91:0B:66:AF:F0:CE:61:36:64:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70057aa1-544d-4237-b549-304fd45324ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.222.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:a4:77:7c:11:65:ee:ef:2e:4b:1d:20:e2:b6:8f:8f:cd:11:
         77:cd:03:49:be:17:79:4e:a5:ec:d0:53:bd:33:8f:b7:c8:a0:
         d0:6a:61:55:ed:85:3b:1d:d3:79:83:f5:10:b9:a6:86:95:2f:
         de:6f:50:55:87:aa:d3:14:0f:f2:be:96:92:52:39:65:2b:41:
         fd:be:ab:91:af:c6:21:0d:a3:92:66:1a:04:7e:3b:58:be:b8:
         71:1c:76:3c:ee:f1:b8:be:61:a8:a3:2b:17:b4:60:76:9e:11:
         da:d9:34:64:24:d1:4b:f3:0e:b1:8b:61:9d:8f:df:8d:9c:21:
         00:0a:c2:ce:57:3a:c8:21:0e:3f:e2:99:17:26:d1:d6:9b:6d:
         fc:06:32:b3:37:56:92:47:8c:80:98:ae:c9:9b:2e:95:77:a6:
         e7:85:a1:fc:2b:fc:9e:9d:c1:79:84:fc:d8:8a:2f:1c:09:71:
         21:98:f6:c2:b3:fa:2c:34:d4:6b:0e:c3:74:d7:67:d2:65:0f:
         c0:56:09:fc:9e:0a:9f:b8:49:e8:95:30:19:ea:5b:a5:a0:a8:
         cf:6e:6b:66:88:b9:37:b2:31:40:a4:a8:d0:aa:23:79:1d:a1:
         ff:fb:a2:5c:4a:7e:06:23:8f:e1:04:74:05:be:27:35:bf:56:
         b8:35:f5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:42:17 2025 by rpki-client