Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b2cc91dd-c083-3f44-bb2e-3fe0332aeffb.roa
File:                     b2cc91dd-c083-3f44-bb2e-3fe0332aeffb.roa (raw, json)
Hash identifier:          TfNXmFj8FIIyk/M9NDxg4Ba8/ZW+38mZITzQJJ/bXfE=
Subject key identifier:   FB:94:F5:A2:D1:D5:88:69:E5:84:3B:42:1A:32:EB:F9:F8:D9:48:AF
Certificate issuer:       /CN=171c42a2-3dc6-43af-b734-e91956bdfe19
Certificate serial:       010D0C9F4328584AF0F137E805CA889A2F461E80
Authority key identifier: EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b2cc91dd-c083-3f44-bb2e-3fe0332aeffb.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     3356
IP address blocks:        216.168.136.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:37:e8:05:ca:88:9a:2f:46:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171c42a2-3dc6-43af-b734-e91956bdfe19
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=7c90b28d-1822-4573-92a8-dde13bba1475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8b:73:b3:7d:84:04:e7:e8:12:dd:5f:0f:2b:
                    9d:c1:12:40:b3:74:1f:21:2f:53:60:40:0e:72:6b:
                    a4:d8:f5:02:f4:3b:95:6d:ee:21:1f:af:3b:b2:8d:
                    c2:ae:97:bc:18:b3:88:67:ff:db:c6:e0:d4:4d:bf:
                    30:05:eb:5e:6d:3a:c0:99:3f:aa:aa:e3:c8:65:5c:
                    85:0b:c2:59:d9:38:40:b1:f7:5d:3d:f4:3a:7d:c4:
                    20:35:77:0d:f5:22:0b:ab:14:ea:76:df:d4:46:1d:
                    98:48:68:0f:1c:c6:99:49:d7:d1:b6:dc:5d:18:23:
                    81:d8:87:ce:ed:dd:af:36:4c:00:5a:8f:3f:3a:17:
                    dd:d3:ca:06:c7:e8:0d:aa:c3:bf:ac:24:11:ea:4f:
                    6c:42:bf:63:2b:63:ab:32:ea:d7:57:2f:84:7d:8e:
                    59:66:fd:a9:34:75:c5:1d:2b:8b:2b:a3:61:d9:97:
                    a6:9e:00:a9:5f:e3:c5:f0:61:43:4c:13:17:3a:ca:
                    f5:0d:ad:24:c6:b2:6d:26:62:1d:a2:a4:17:3b:b2:
                    a2:44:93:c0:95:c2:0b:93:9c:21:37:e9:3c:ea:24:
                    82:8d:32:2a:a2:fd:c1:b4:53:1f:99:2b:b5:d7:ff:
                    e2:b8:30:26:b4:44:96:aa:85:30:07:c8:4d:7e:a1:
                    b4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:94:F5:A2:D1:D5:88:69:E5:84:3B:42:1A:32:EB:F9:F8:D9:48:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/b2cc91dd-c083-3f44-bb2e-3fe0332aeffb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19/171c42a2-3dc6-43af-b734-e91956bdfe19.crl

            X509v3 Authority Key Identifier:
                keyid:EB:B0:D5:3C:A6:56:F6:56:4F:C5:16:70:B8:ED:89:90:DE:0F:26:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/171c42a2-3dc6-43af-b734-e91956bdfe19.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:2a:b5:8f:5f:75:0b:8b:25:4d:37:4e:97:93:a5:0c:67:70:
         63:84:44:a3:0c:5f:df:f7:aa:09:34:48:50:9b:31:5d:23:99:
         e9:33:45:fb:a4:0f:0d:e3:80:93:70:cb:3a:f9:06:dd:3a:2a:
         9b:bb:47:9c:ef:7c:e6:c3:3f:57:cb:7a:6f:71:82:dd:8a:c2:
         b2:89:89:75:91:d5:03:fd:7d:09:70:11:12:36:a6:ed:b8:fb:
         0c:65:b3:e7:6a:a3:3f:5b:ca:45:f0:b6:49:f4:ca:c7:1d:75:
         c0:fe:7e:fc:c2:e7:38:ef:86:8a:f9:25:78:3a:a0:c6:79:e8:
         99:c1:32:0a:01:7f:d2:0c:4f:2a:8a:7d:e4:58:73:bb:f5:dd:
         31:20:6c:e3:62:b8:10:3e:8e:9d:cc:ea:5f:1d:67:02:49:93:
         69:a4:60:f3:cf:97:dc:5c:ac:56:ba:61:ec:8e:ad:1e:44:77:
         8e:83:b5:2b:ea:dd:c4:24:d0:a6:e3:99:ae:25:88:15:83:4d:
         86:c7:65:cb:ea:04:2f:55:02:f4:23:40:67:96:fd:e1:93:8e:
         3e:a0:7f:ad:c0:07:86:0a:f7:3f:dd:67:bf:41:10:cf:83:b9:
         4d:7d:67:87:0d:5f:c2:62:00:f4:a0:2c:9f:b9:fb:23:95:a3:
         38:53:08:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:38:18 2025 by rpki-client