Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/bbbbf9a3-c9ee-31b9-ada5-4fdad4bcaa8f.roa
File:                     bbbbf9a3-c9ee-31b9-ada5-4fdad4bcaa8f.roa (raw, json)
Hash identifier:          fYiF6n0SjJtcUafAuQ2G0naZ9Tw8J5EK7BaOd8JVOrQ=
Subject key identifier:   41:93:3E:20:D0:69:96:EF:07:F4:1B:BB:A8:7D:BF:B4:A3:24:D4:3F
Certificate issuer:       /CN=21adcbb8-b500-460f-90cb-bca0525aabcb
Certificate serial:       010D0C9F4328584B2CF6DD6BCD5BBE8142D41080
Authority key identifier: 62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/bbbbf9a3-c9ee-31b9-ada5-4fdad4bcaa8f.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        170.176.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:dd:6b:cd:5b:be:81:42:d4:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21adcbb8-b500-460f-90cb-bca0525aabcb
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=285b679c-b1bb-4055-a0b0-e8bcfe90bf71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4e:6b:b9:8e:1c:c2:68:f0:f1:7e:26:d0:1e:
                    40:9a:d9:df:56:6d:2a:d7:80:3b:c1:cc:39:e4:5f:
                    9c:fc:c4:36:e6:dc:16:11:02:73:85:8a:5f:21:db:
                    9d:db:7b:ac:2b:95:ce:3c:bf:51:5c:b5:25:2d:7b:
                    7c:ad:97:e6:61:da:5b:9a:4b:0c:bf:6f:a1:d6:9f:
                    46:c0:f6:4f:2b:cf:f4:20:5d:0a:78:18:20:81:72:
                    0b:8b:ce:06:82:97:29:4b:08:e8:6d:32:7b:b5:b6:
                    af:a2:e5:97:64:81:64:39:93:18:97:ab:ee:d6:48:
                    e7:2e:4d:68:57:1f:73:6d:ba:89:d6:54:9c:e0:69:
                    26:50:48:f4:9a:49:b9:90:13:75:93:7a:51:6f:09:
                    1b:8f:43:26:d9:ce:94:e8:a4:34:c6:c8:df:7f:0e:
                    ee:17:bb:ce:f8:7b:d0:29:c7:0c:1d:2a:d7:4b:04:
                    06:f7:b8:5a:a6:42:94:d6:10:e3:8b:5f:4b:13:2b:
                    b4:ba:32:c7:d5:70:51:6f:38:1f:4e:1f:a9:f0:dc:
                    12:ac:bf:e6:04:61:67:a0:f3:a5:8f:ef:1c:6c:d1:
                    da:de:af:14:03:d5:ed:0c:b8:5b:03:38:34:28:a4:
                    76:6c:d9:a4:36:ed:83:8a:2f:ab:21:25:4d:f6:5d:
                    f8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:93:3E:20:D0:69:96:EF:07:F4:1B:BB:A8:7D:BF:B4:A3:24:D4:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/bbbbf9a3-c9ee-31b9-ada5-4fdad4bcaa8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb/21adcbb8-b500-460f-90cb-bca0525aabcb.crl

            X509v3 Authority Key Identifier:
                keyid:62:2B:0A:1E:7B:53:D2:E2:2B:6B:5A:FF:1D:C1:AA:ED:0A:06:69:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/21adcbb8-b500-460f-90cb-bca0525aabcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:5c:11:01:6f:31:59:a4:8c:79:be:1e:55:69:cf:cf:57:e0:
         d8:43:67:05:66:10:49:e6:e3:1a:54:b5:18:43:6b:ff:0f:e7:
         33:3d:f8:bc:c3:5c:5e:96:2f:61:a6:cd:71:11:c9:ee:ca:80:
         c3:ad:1b:c7:dc:df:e8:c8:d6:39:f7:68:82:ff:8e:10:38:67:
         cb:e8:47:f4:03:37:1e:2c:c1:ac:5c:97:11:38:ae:5f:eb:f7:
         88:b7:5a:08:dd:39:16:1e:89:6a:d1:a3:21:d8:bc:60:9e:1e:
         02:e7:e1:3c:b4:1a:54:35:0d:32:e6:b2:2e:08:6f:68:54:41:
         9a:d2:ad:e2:3b:cb:4e:ae:b7:b8:25:50:cb:7a:5d:ff:89:c0:
         95:f3:d5:c5:77:a2:8b:fa:2b:f1:9e:d1:c2:58:c5:c3:dd:2d:
         b8:55:d5:f7:27:ee:38:d2:7d:f5:09:10:bb:63:1d:f7:c4:b4:
         98:a8:be:82:44:c2:47:bf:17:2f:27:ef:b5:98:70:fd:f1:5f:
         f6:0a:1d:bd:57:01:70:86:53:db:28:fc:04:26:cf:c2:9b:6f:
         b9:c8:e7:d1:97:3f:e2:62:61:84:61:00:f8:2b:41:52:41:22:
         b7:be:de:68:0d:ee:d9:0d:a1:21:4b:8e:a1:a7:3d:ec:99:e8:
         bc:a7:7d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:13:16 2025 by rpki-client