Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7e0cbff7-7487-3e7f-946d-d1e74349fc36.roa
File:                     7e0cbff7-7487-3e7f-946d-d1e74349fc36.roa (raw, json)
Hash identifier:          +bP2YXcKWbYY0r1ZDt33xgj4+tx9KVI2StPnghVg7/I=
Subject key identifier:   4D:2E:63:60:9F:C8:8A:99:83:16:EB:40:9E:E7:42:AD:5D:CA:43:4B
Certificate issuer:       /CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
Certificate serial:       010D0C9F4328584AC71121E5B9EB907091B895F0
Authority key identifier: F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7e0cbff7-7487-3e7f-946d-d1e74349fc36.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     22709
IP address blocks:        216.237.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:21:e5:b9:eb:90:70:91:b8:95:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=2116971e-4cc9-4997-a2ed-5a6091e568d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2f:67:da:a9:28:f5:7c:cb:87:f1:72:31:dd:
                    e6:4a:b5:03:5f:03:4d:ee:55:78:4c:f4:58:0e:da:
                    6c:0b:22:e4:c4:b5:ad:0f:dd:93:2b:93:2b:8b:ff:
                    e1:eb:b8:49:ad:f0:a5:b7:8b:e3:06:df:81:c3:f0:
                    7d:1b:ba:4a:2f:c3:62:ce:5d:6d:6e:fd:6b:63:57:
                    46:eb:a6:55:21:28:e1:15:8d:cd:65:06:79:d5:39:
                    6e:d1:70:48:4d:bc:da:77:c3:07:2e:96:e4:88:1e:
                    f7:86:af:ef:8e:71:18:db:60:f5:93:42:5e:90:55:
                    d3:37:38:24:9d:fc:4d:8a:7c:cd:7a:6a:fe:05:0e:
                    55:62:8d:ff:f9:43:14:74:4b:63:f8:94:2b:f9:36:
                    e0:b3:9d:64:39:e4:51:18:97:1c:14:b1:5f:71:17:
                    68:6c:3d:82:95:32:9e:7e:0b:86:4a:98:8b:54:e7:
                    20:57:61:03:90:53:7e:e5:c4:b9:46:2c:70:87:da:
                    4c:4a:08:9c:5c:59:b2:20:0c:c8:dc:1d:3e:f2:5d:
                    0a:64:46:51:35:85:72:ae:23:54:e9:e1:6d:17:b1:
                    2e:b4:86:c7:7c:85:be:3f:7c:d4:b3:cb:81:10:33:
                    dc:94:74:4c:3a:5c:f6:a7:70:ec:4a:23:c0:e8:fd:
                    9e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2E:63:60:9F:C8:8A:99:83:16:EB:40:9E:E7:42:AD:5D:CA:43:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/7e0cbff7-7487-3e7f-946d-d1e74349fc36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.crl

            X509v3 Authority Key Identifier:
                keyid:F0:72:8F:90:47:1D:B0:2A:06:1E:98:29:13:9A:46:03:BD:8C:58:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3e9a4c0-b88b-4cf5-8603-f2d09cfb5fa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.237.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:74:30:32:d7:c1:0d:e7:9b:84:b3:1b:19:19:1d:09:84:db:
         36:20:d0:45:e0:b2:53:b1:9b:04:01:e5:29:9e:57:01:8d:98:
         8e:00:c6:f3:e9:a3:d0:5f:5b:3d:29:5b:cf:1f:7b:d0:31:34:
         72:c3:84:e1:85:a7:95:1b:f3:fe:36:72:d4:b8:f0:d8:73:02:
         38:70:9c:45:77:6c:a2:b5:03:0a:79:3d:e2:1b:97:ca:dc:b1:
         26:3c:1e:59:d0:3f:68:ba:d8:58:b8:c5:df:4d:3a:40:16:9b:
         01:49:b5:e2:2c:8e:4e:fe:ac:e0:b4:63:1e:64:85:a1:15:41:
         f4:56:b7:65:e6:0d:50:02:da:9d:b2:bd:eb:27:81:0d:e7:fb:
         4d:a5:aa:dd:68:89:6c:d5:b7:cc:0d:94:78:6c:65:c4:fd:cb:
         86:fa:af:00:97:5f:0a:e3:01:be:61:ff:73:0e:0a:60:f7:43:
         24:9b:05:df:50:9d:f7:c2:c5:31:61:93:77:f6:e9:6b:87:49:
         a1:91:a9:36:50:51:c4:69:7f:72:56:95:c2:03:84:6c:a5:4f:
         19:85:75:31:89:af:ad:b8:41:ec:f7:c1:2a:d1:73:c5:29:6e:
         81:1e:49:f0:19:32:9b:bd:ab:a6:5f:f8:74:3f:55:41:75:7b:
         f5:eb:4c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:03:23 2025 by rpki-client