Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/7b4c53ed-fd1d-3730-a7d6-6db3425127e1.roa
File:                     7b4c53ed-fd1d-3730-a7d6-6db3425127e1.roa (raw, json)
Hash identifier:          A5Ho2SZK3LlqtcIhWDIi2Q4i3arU1Fg6wY1ys+8536Y=
Subject key identifier:   86:5E:70:B9:C1:B6:9C:C2:74:FA:43:D5:95:3B:73:72:53:70:8A:CC
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584B2A2C2C3F0744D3F37C2DBC40
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/7b4c53ed-fd1d-3730-a7d6-6db3425127e1.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     13760
IP address blocks:        216.170.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:2c:3f:07:44:d3:f3:7c:2d:bc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=f39ff6d8-a2b1-477e-8c29-55fa66f77975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d6:bf:be:c2:b3:25:f8:c4:1c:b4:55:a7:d9:
                    ff:c4:cc:87:fc:03:20:96:50:2e:4a:d4:a8:9f:b5:
                    45:3f:86:e1:30:43:c6:98:18:a6:08:ee:8d:34:c7:
                    db:16:4b:3a:1e:cd:59:87:73:ac:6a:e1:dd:8b:96:
                    d6:e1:d0:dd:1d:ba:47:9d:f1:43:93:b9:86:19:c7:
                    3b:81:a8:76:85:ed:c9:cb:a6:b6:1b:0a:0c:4b:d4:
                    55:6e:5d:81:f3:03:11:0f:20:d2:8f:ed:0c:3e:f7:
                    61:4d:e8:7d:c7:1f:b5:e3:e4:93:77:65:ad:18:73:
                    75:c3:22:40:6d:0d:05:20:3d:e8:85:f1:2e:f7:31:
                    93:a6:e5:c8:0c:71:1b:6c:d4:db:7b:30:cc:9d:c4:
                    1e:0b:d6:19:49:ab:c3:53:0c:0d:f5:2d:8e:d1:1c:
                    fa:72:b6:6c:65:56:c6:55:c3:15:9d:4e:35:fd:78:
                    43:5f:f0:26:31:a7:2b:1c:2e:b1:ca:3d:cc:20:4c:
                    fe:c5:f1:fb:87:c9:3a:25:49:e5:84:ab:39:17:51:
                    fe:a5:0c:42:8a:b9:46:05:ff:09:b5:51:b8:12:29:
                    2b:84:bd:d7:44:20:b5:9b:fa:c8:3e:c7:f8:ce:99:
                    86:7a:82:74:20:27:3c:c7:4a:94:f9:3e:e1:c6:8b:
                    83:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:5E:70:B9:C1:B6:9C:C2:74:FA:43:D5:95:3B:73:72:53:70:8A:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/7b4c53ed-fd1d-3730-a7d6-6db3425127e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.170.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:da:fa:91:a3:86:96:fa:c8:5f:62:30:5e:df:a8:c1:72:c2:
         fc:1b:28:79:e6:d7:11:4f:e9:3f:f1:e1:06:3e:8b:17:b5:d1:
         10:27:6b:92:63:7d:53:70:9a:15:09:20:b5:5d:4a:a7:7f:cc:
         8e:75:c9:7f:da:d0:37:28:87:db:ae:32:b2:8a:58:c5:2b:c2:
         a9:6e:21:16:49:99:f5:b9:b5:a4:9a:91:e1:d2:ce:15:e6:25:
         c5:a0:15:9a:9b:3a:dc:05:9f:14:c9:e0:be:cc:6c:75:64:f2:
         4e:42:15:65:10:59:31:5c:17:37:cd:50:40:db:80:db:0a:00:
         18:d8:b9:a1:53:e7:b2:d5:75:19:19:3b:9f:e5:f4:ec:fa:92:
         02:ea:6f:d6:80:65:22:1e:d0:33:aa:34:23:6e:ae:ec:62:de:
         34:b7:2d:a2:87:fc:9d:f3:64:51:64:29:85:9e:5e:35:d6:b6:
         21:64:92:47:72:37:87:3c:1f:04:94:1d:4b:71:3a:f9:4c:eb:
         fb:2d:19:e5:9b:49:17:b1:9b:e4:f5:d3:20:76:1d:2c:70:ac:
         17:20:b3:4c:3c:a3:be:a8:fd:cb:5b:2d:07:80:39:ca:81:f0:
         c2:2d:90:bb:ed:b8:bc:69:fc:29:81:67:af:5f:bb:b7:2b:e9:
         ab:4b:1d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:06:46 2025 by rpki-client