Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3ae99ff-9739-38d9-a512-80b53f72df7c.roa
File:                     a3ae99ff-9739-38d9-a512-80b53f72df7c.roa (raw, json)
Hash identifier:          MXKeJp+lbcKy4VFQQklNX2Da+1HPOCT2JqTyDwTjw+g=
Subject key identifier:   A2:13:8B:7E:20:0D:E5:E3:50:4E:85:EF:96:F5:A5:0D:28:B5:51:8D
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584AEF8BC8219DB8AFD0BFF7C600
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3ae99ff-9739-38d9-a512-80b53f72df7c.roa
Signing time:             Fri 22 Aug 2025 01:00:33 +0000
ROA not before:           Fri 22 Aug 2025 01:00:33 +0000
ROA not after:            Thu 20 Nov 2025 02:00:33 +0000
asID:                     199527
IP address blocks:        216.27.160.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ef:8b:c8:21:9d:b8:af:d0:bf:f7:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 22 01:00:33 2025 GMT
            Not After : Nov 20 02:00:33 2025 GMT
        Subject: CN=3ee7b7ea-dfa8-4b38-ac72-dae2570a1aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6d:38:0c:85:15:56:38:a4:2e:f9:32:84:b5:
                    84:06:37:85:8c:75:bc:78:e2:53:da:10:80:1e:69:
                    f9:77:af:1f:7c:ea:9b:8f:92:88:67:32:7f:47:db:
                    08:4a:35:50:97:f8:56:de:0d:0d:27:2a:dc:0b:e2:
                    b4:2d:9c:b1:2f:e2:64:46:ae:31:40:15:9f:88:92:
                    23:73:6e:09:ce:1f:1e:71:9c:a6:d2:15:86:ae:b5:
                    b7:e9:91:41:a8:89:f3:8c:94:00:0c:7b:ba:5d:cb:
                    bf:23:15:89:78:0a:24:93:0b:73:86:71:2a:19:4d:
                    44:92:44:21:74:99:51:36:c4:ef:14:3c:b0:71:35:
                    00:1b:7b:13:9a:1b:91:a8:9a:30:fb:5d:db:99:f4:
                    fe:6c:30:a9:59:97:20:f0:7d:fd:b9:2a:0d:18:a8:
                    69:61:eb:90:06:af:e7:1e:6a:0b:63:56:e6:73:1e:
                    91:4b:e7:fe:5b:e3:6b:22:d0:73:d9:7e:21:ca:bc:
                    86:1f:5e:00:12:f8:ac:5d:84:e6:08:c7:2d:7e:13:
                    9e:6a:9e:42:df:bc:9d:ac:39:22:a8:b7:10:44:f8:
                    db:ba:7c:cc:89:eb:0d:ba:2e:78:c8:34:6f:c7:59:
                    d6:47:cc:8b:f6:7b:99:3b:48:c0:88:02:f4:8c:a8:
                    d5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:13:8B:7E:20:0D:E5:E3:50:4E:85:EF:96:F5:A5:0D:28:B5:51:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a3ae99ff-9739-38d9-a512-80b53f72df7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.27.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:d3:f7:89:57:23:ce:93:0a:49:03:ff:ac:2f:62:7a:f2:21:
         3e:26:f1:11:19:a3:aa:6d:4a:34:e2:c1:94:02:34:af:84:80:
         67:d6:07:e6:25:9a:a9:1a:98:9e:5e:3b:ff:54:d7:a5:3f:b9:
         8c:b5:b3:47:d2:52:6a:bb:f2:64:52:2a:3c:3f:90:ba:9f:9b:
         d0:a2:9b:f5:35:da:12:f6:e6:66:88:ad:a4:0a:25:c8:a0:b5:
         e2:f3:a5:65:c6:c6:2c:26:0e:60:cc:b4:4c:33:bc:35:83:8b:
         31:1a:18:51:ec:27:41:6b:82:5b:a9:78:4b:9f:57:ff:c1:0d:
         44:ae:e4:12:20:a9:b6:fc:f7:ce:c9:f2:b2:bf:cb:bf:5e:d3:
         1c:38:f5:bc:ba:94:11:d0:be:6a:19:8c:b6:75:02:b4:79:28:
         86:dc:47:d7:d1:c8:40:0e:7d:82:4a:2f:37:8d:cf:86:2b:37:
         73:e0:8b:71:40:6f:65:5a:d6:24:62:4c:42:63:90:c3:73:f9:
         6c:d1:12:3f:8d:7e:64:3e:b8:80:e0:7e:35:20:49:ce:59:d4:
         45:cd:da:72:a1:96:8e:85:2c:08:7d:b7:bc:90:9f:56:2a:8a:
         0a:eb:60:08:1c:7c:8a:6b:01:8b:e6:df:f7:c4:44:b5:33:e1:
         67:e8:ec:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:21:38 2025 by rpki-client