Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e9dfacb4-e20d-3fd4-b168-e08706ed9594.roa
File:                     e9dfacb4-e20d-3fd4-b168-e08706ed9594.roa (raw, json)
Hash identifier:          Trzji77fAv7RK6hcJI8CQ2AYBqDqvUktGUWfI7h5o2g=
Subject key identifier:   83:A7:CC:5B:EF:8B:BF:E5:2A:63:EB:22:23:5E:CB:B7:AF:61:66:7F
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584AEF8BC8374723A6090AEFF820
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e9dfacb4-e20d-3fd4-b168-e08706ed9594.roa
Signing time:             Fri 22 Aug 2025 01:00:33 +0000
ROA not before:           Fri 22 Aug 2025 01:00:33 +0000
ROA not after:            Thu 20 Nov 2025 02:00:33 +0000
asID:                     199527
IP address blocks:        216.27.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ef:8b:c8:37:47:23:a6:09:0a:ef:f8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Aug 22 01:00:33 2025 GMT
            Not After : Nov 20 02:00:33 2025 GMT
        Subject: CN=37b497de-0815-4ce0-bd4d-bd98de5dfc02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b6:c3:89:a0:13:a3:aa:6b:e8:a4:b7:64:da:
                    60:f7:6a:a9:6f:52:65:c6:63:a3:b4:8f:a8:02:0d:
                    af:7f:e4:1b:51:0b:42:5f:85:a9:55:6a:bb:7a:f0:
                    bb:6f:a8:8b:6c:38:3a:f5:fd:48:9c:3b:0f:4d:03:
                    01:e4:58:75:06:22:3f:c5:d2:65:16:1b:81:ff:8a:
                    37:31:0f:9a:74:08:44:61:d4:4b:da:6e:a5:49:37:
                    57:38:52:c9:38:b9:80:f9:08:68:8b:4c:f8:56:69:
                    bc:a5:df:13:0d:f4:07:dd:fd:24:b5:77:7c:a3:65:
                    20:28:89:ad:b6:de:37:a2:18:25:46:85:f4:97:8e:
                    65:e9:b3:6d:16:f5:c6:4d:8e:c2:e5:f2:c3:89:c6:
                    02:4b:7b:3f:90:e0:8d:3d:95:c5:8f:36:3f:0d:66:
                    31:98:42:ea:c3:b0:d7:bd:21:3a:75:5d:f6:38:be:
                    79:0f:b4:b9:1c:25:e2:98:e7:6b:52:af:fe:2c:3d:
                    e2:6f:d2:ca:38:2d:b4:3e:ac:4b:aa:2a:ed:77:b3:
                    e8:86:16:f4:2a:b1:21:5c:cf:4f:31:03:23:0e:ee:
                    45:7b:87:3c:d0:31:75:0c:59:16:4b:02:15:34:af:
                    69:78:06:e8:f5:ae:c1:8b:68:b9:27:02:54:cf:e2:
                    e7:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A7:CC:5B:EF:8B:BF:E5:2A:63:EB:22:23:5E:CB:B7:AF:61:66:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/e9dfacb4-e20d-3fd4-b168-e08706ed9594.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.27.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:03:45:1f:7b:26:47:6c:2d:10:df:0e:5a:65:d8:8a:a7:7f:
         d5:48:af:8d:e7:8a:37:95:f3:ff:5f:f2:ff:ac:85:de:40:21:
         ff:53:06:01:f7:34:e7:37:f4:88:3a:67:61:95:f6:bd:85:cc:
         fc:00:6e:30:1e:eb:5a:6a:ca:b8:74:d8:06:ab:e7:1b:15:78:
         30:83:79:d6:48:d6:fd:9e:23:99:ab:f9:d1:0f:50:cd:ae:61:
         42:e2:91:ba:45:fd:52:5a:da:71:2e:73:d3:d7:17:77:78:8a:
         8b:79:96:44:18:0a:6d:a8:91:92:54:17:39:cd:a8:f9:05:53:
         64:d7:c5:63:99:cf:4a:14:9a:95:e0:ce:da:f1:4d:38:d3:3d:
         a9:1f:d4:51:26:c1:3f:a3:86:86:23:8d:6f:90:71:41:af:17:
         97:86:ef:47:96:18:e4:63:e2:56:73:4f:44:90:cc:66:98:13:
         ba:d0:5d:bd:2a:e1:25:e6:8b:8b:bd:cb:17:16:ee:2d:0e:e4:
         e8:e9:11:e5:65:2a:25:a6:33:70:c1:c8:d0:08:67:5b:27:f0:
         13:10:58:9c:d0:ba:c1:39:44:b8:d1:4f:01:dd:8f:b8:1b:8b:
         ef:54:7d:66:bc:57:41:d9:42:36:2c:01:a9:20:50:57:28:19:
         bb:0f:70:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:34:09 2025 by rpki-client