Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f12db169-8a5e-3b39-b763-848b626ee468.roa
File:                     f12db169-8a5e-3b39-b763-848b626ee468.roa (raw, json)
Hash identifier:          T3wEDRVD5JvgtIg8w0edI5nsb473yLxjs78Wodc7bp8=
Subject key identifier:   BC:BF:38:6E:DF:5F:03:F0:53:9E:DD:2D:31:FB:49:D2:D6:A9:16:9F
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B87B2182B343C87052B9FD600
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f12db169-8a5e-3b39-b763-848b626ee468.roa
Signing time:             Wed 15 Oct 2025 13:00:38 +0000
ROA not before:           Wed 15 Oct 2025 13:00:38 +0000
ROA not after:            Tue 13 Jan 2026 14:00:38 +0000
asID:                     5065
IP address blocks:        216.132.110.0/24 maxlen: 24
                          216.132.111.0/24 maxlen: 24
                          216.132.116.0/24 maxlen: 24
                          216.132.117.0/24 maxlen: 24
                          216.132.118.0/24 maxlen: 24
                          216.132.119.0/24 maxlen: 24
                          216.132.120.0/24 maxlen: 24
                          216.132.121.0/24 maxlen: 24
                          216.132.130.0/24 maxlen: 24
                          216.132.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:87:b2:18:2b:34:3c:87:05:2b:9f:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 15 13:00:38 2025 GMT
            Not After : Jan 13 14:00:38 2026 GMT
        Subject: CN=bb74f10c-7824-4ac9-97fb-42b599dbf40a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e9:91:60:19:42:32:43:35:00:8f:60:be:95:
                    50:f4:da:91:5d:6f:94:8d:10:62:5b:d7:e8:aa:1b:
                    53:b3:ea:90:57:10:8a:11:1a:2a:7c:34:d1:cf:fe:
                    d4:3e:76:b8:4f:2f:fe:82:12:dd:8d:e9:66:3e:ce:
                    51:e7:e5:ea:ba:1b:8f:80:cb:e5:ed:0a:43:37:2e:
                    d5:87:d5:e7:7f:e0:77:63:75:2e:6c:f4:64:f6:81:
                    12:bb:1d:e9:d4:ff:73:1a:65:aa:b7:13:c7:ed:1d:
                    cb:c8:09:17:0c:04:b5:c5:85:4d:db:a9:a0:a2:0c:
                    41:0b:7f:c9:a3:0d:f9:90:5d:57:f9:ce:6b:71:0f:
                    a5:c8:e6:72:e6:3d:a3:fb:62:a5:a4:20:a6:ad:f4:
                    86:21:9f:a0:a5:86:1e:79:01:c4:70:68:fa:49:1d:
                    83:39:aa:93:8d:dc:4a:00:27:fd:c3:35:3d:c7:2e:
                    c1:9c:67:a3:14:0e:ac:c1:1b:c3:2e:5f:a3:68:f9:
                    64:92:32:d3:ca:08:ce:d8:0d:51:1d:57:bf:f9:c4:
                    87:d1:42:17:6c:20:18:ab:56:66:b0:f1:a7:84:34:
                    45:b7:7a:27:87:5c:2a:de:1b:d1:3c:dc:e1:96:ad:
                    fb:61:bd:31:88:7c:a9:25:3f:06:0e:ce:ec:54:47:
                    ee:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BF:38:6E:DF:5F:03:F0:53:9E:DD:2D:31:FB:49:D2:D6:A9:16:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/f12db169-8a5e-3b39-b763-848b626ee468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.132.110.0/23
                  216.132.116.0-216.132.121.255
                  216.132.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:d1:82:95:48:bc:b5:36:b4:e8:8d:28:10:65:5a:ca:3e:90:
         ab:d8:d8:77:61:3f:9f:e9:35:41:c5:97:70:ae:43:ed:3b:49:
         b1:2d:59:f0:98:47:1d:80:ee:aa:b8:ad:79:e9:7f:be:3a:82:
         67:79:2e:46:6f:9a:25:12:1a:89:1d:5e:93:9d:b1:02:90:46:
         97:51:7f:9f:6e:5c:a5:db:14:37:ae:d8:a8:21:8f:dc:38:43:
         f9:77:70:5c:6d:44:8e:ad:eb:1a:10:e1:36:87:e5:d5:db:e9:
         2e:2f:de:5b:04:a1:5b:f5:9b:38:6d:82:f0:60:8b:88:cb:68:
         18:60:d8:aa:04:55:09:08:ec:f5:dc:d3:42:0f:42:38:7d:12:
         29:a8:ea:98:ef:de:c9:f0:c5:42:f7:ac:3e:59:ac:79:49:d0:
         9c:c2:5b:99:61:5b:eb:bf:fc:77:b5:37:6f:aa:71:2e:aa:ee:
         14:bc:29:63:c8:32:6c:61:cc:17:c5:61:9d:d4:a6:89:38:56:
         f8:86:f6:f9:69:ae:8f:da:6a:09:77:e3:68:c0:9b:01:2b:02:
         d4:24:79:c3:83:68:49:dc:2d:a5:b7:20:bf:c7:d2:f1:32:82:
         fa:5d:02:11:3f:0c:cb:a1:6b:ca:8b:d2:59:ba:3e:11:98:84:
         b1:bc:9a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:50 2025 by rpki-client