Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ee65b3a5-f123-3c4c-a05f-4510816011bf.roa
File:                     ee65b3a5-f123-3c4c-a05f-4510816011bf.roa (raw, json)
Hash identifier:          wFiTWahttcO5NLTH3K/RTxoutk+hDrYeJOFgpsFzmXc=
Subject key identifier:   B1:7B:0E:08:12:9D:CB:A1:D2:7D:09:1F:64:69:16:8D:28:36:89:AE
Certificate issuer:       /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial:       010D0C9F4328584AF5215579F993535C9A1A3840
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ee65b3a5-f123-3c4c-a05f-4510816011bf.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     13576
IP address blocks:        216.106.200.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:55:79:f9:93:53:5c:9a:1a:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=2aaec6dd-97fa-47fd-a076-e79c5cb71428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6f:e2:78:f7:f2:b1:3c:6c:ae:98:af:cb:f4:
                    dc:c8:68:06:fa:5a:3f:e4:65:fd:19:f7:c2:b1:c7:
                    74:c6:d4:f8:88:99:86:fd:d0:fb:0e:df:0a:bf:46:
                    da:03:6c:69:3e:bf:ef:c9:37:d7:4e:4a:c6:43:dc:
                    7b:b2:2f:98:09:b8:6a:f4:46:a0:bc:f7:ee:95:8e:
                    8c:82:b1:bf:59:73:66:40:4f:17:4d:de:c5:c0:ef:
                    cf:f7:f6:db:70:82:33:6c:1a:1b:65:79:30:2a:8f:
                    1e:3b:f1:70:eb:2b:7f:84:45:90:39:7e:fc:97:d5:
                    a6:a4:35:fb:49:4f:49:24:85:ed:1c:cf:3d:05:2e:
                    c4:0b:2d:81:75:a0:81:68:f7:89:ea:40:f9:41:49:
                    69:c0:4a:d9:dd:89:80:a2:e4:01:7a:6d:13:2c:58:
                    55:ed:e1:66:8a:02:fa:c4:c3:34:09:db:78:0f:c7:
                    2b:09:92:61:35:c4:99:29:53:8b:58:e6:a3:be:d1:
                    e5:8b:c2:d5:aa:f6:b7:b0:10:af:a5:b9:91:e2:de:
                    97:d2:99:53:a3:36:aa:f2:22:72:cc:5d:41:65:03:
                    ea:4f:0f:fa:40:8c:9e:64:27:71:2e:c1:1a:95:e4:
                    0f:82:34:3f:44:a6:33:60:c3:47:12:16:46:80:33:
                    d7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:7B:0E:08:12:9D:CB:A1:D2:7D:09:1F:64:69:16:8D:28:36:89:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/ee65b3a5-f123-3c4c-a05f-4510816011bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl

            X509v3 Authority Key Identifier:
                keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.106.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:8e:11:77:7c:bf:03:95:c6:8f:fb:fd:8a:75:ed:a7:a6:be:
         55:6a:10:88:a4:0f:5b:b7:66:c6:1f:54:09:9b:4f:15:9b:85:
         9e:4c:12:f5:40:ee:76:08:b8:03:e8:ca:6e:7b:f4:ee:83:a1:
         8a:bf:18:cf:a1:74:f3:a0:82:ba:8d:1c:53:0f:cf:0d:77:06:
         9e:94:1e:c5:76:3d:62:5b:55:78:d5:68:bf:d4:1b:2d:f0:07:
         82:5e:e8:c5:37:45:22:d6:16:4d:0c:32:3d:7b:31:e7:15:27:
         0f:96:0c:76:ac:e3:f2:c1:db:ef:b4:1b:52:a6:13:b4:82:4e:
         2a:80:e1:2f:11:60:66:01:50:ca:8a:43:e7:d0:27:9e:f8:b9:
         89:42:1a:f8:a9:0c:6c:2e:e7:0b:71:87:c7:2c:e9:62:ef:d5:
         c4:05:1e:1f:23:4c:96:9d:7e:9a:b3:7f:ab:8b:a7:a3:b9:92:
         75:af:ed:77:56:2e:63:5c:39:81:16:51:fa:6f:61:01:8d:be:
         c4:05:f2:f2:06:2d:8f:71:1f:51:9a:b9:7f:e4:2d:75:9f:77:
         00:dc:4b:bb:d4:27:9c:fe:bc:b7:ca:f5:38:13:7d:80:88:b2:
         b6:8a:cd:9f:ac:62:12:34:42:72:b9:43:5d:4c:02:93:75:07:
         c3:cb:ae:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:46:33 2025 by rpki-client