Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/81cc69f6-3395-35b3-9df7-3be9373d6008.roa
File:                     81cc69f6-3395-35b3-9df7-3be9373d6008.roa (raw, json)
Hash identifier:          6IfZtquVs8aOVLyKZ+eFYKgkEJ3poWyJY3MY4MJj5Es=
Subject key identifier:   95:84:C2:58:87:2D:58:F6:90:1C:BE:96:1C:79:91:91:22:D1:20:F3
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328584B5B074B75D587BE598F958C00
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/81cc69f6-3395-35b3-9df7-3be9373d6008.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     400304
IP address blocks:        216.126.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:4b:75:d5:87:be:59:8f:95:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=71203478-8f14-44d5-b90c-95c087117bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:e7:b1:50:41:eb:34:ec:4a:35:02:c1:5d:
                    5a:3d:bc:a3:cb:23:c3:7e:eb:92:77:65:ee:6d:58:
                    98:a8:90:a4:a8:f8:dc:2e:4b:a6:5e:a1:b1:21:2a:
                    bf:f4:6d:e7:bd:30:08:e7:b7:69:84:4d:54:b6:f3:
                    e7:90:24:ad:86:17:18:d8:a8:54:81:f5:6f:96:61:
                    fe:02:23:bc:2c:34:96:94:48:ea:4c:7d:d5:fd:6f:
                    8a:7f:60:b8:07:e8:99:40:4e:98:4e:87:f5:12:03:
                    31:be:c0:f8:f0:b1:03:01:2b:6c:0e:e8:d4:92:f1:
                    f5:f6:b2:6e:a5:60:43:77:b3:15:42:39:2c:5c:a6:
                    12:8c:1f:ab:13:b1:8e:a6:00:7e:d4:ee:a5:5b:ae:
                    29:78:4d:65:60:6c:c5:bd:82:22:67:99:1f:d9:87:
                    bb:b2:d8:98:ad:60:2c:02:34:8d:49:c2:a4:f6:75:
                    e8:54:af:19:69:d8:1c:a1:e9:d9:68:46:c6:ff:96:
                    f2:90:8f:1f:4d:23:07:29:07:cb:05:f7:db:9b:22:
                    26:d4:c8:bb:07:9f:77:5c:90:98:d0:fa:f8:d8:4c:
                    05:e6:2d:f7:bb:0f:b2:ff:21:2a:03:f8:98:27:4f:
                    2e:d8:35:a2:a9:b5:38:24:66:e9:0a:12:36:a5:8c:
                    31:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:84:C2:58:87:2D:58:F6:90:1C:BE:96:1C:79:91:91:22:D1:20:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/81cc69f6-3395-35b3-9df7-3be9373d6008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:c5:cd:1e:69:16:51:ee:a5:d8:2c:5c:5e:fc:fc:05:29:91:
         31:9d:b7:ce:15:5d:a7:72:ea:7a:9d:aa:a9:c3:f2:5a:47:07:
         f9:f1:60:9b:5c:44:b1:e4:7f:22:96:1c:4f:76:e9:71:4b:97:
         ca:86:b7:3d:9a:ab:64:8e:08:29:35:40:6f:f0:3c:8e:2a:0d:
         31:8c:10:72:41:41:6d:a7:95:31:19:ed:9d:ff:d7:34:2b:22:
         9d:5f:10:be:de:90:26:4d:a3:16:e3:56:ac:9c:9c:0d:c6:77:
         36:06:41:73:77:2d:11:a3:66:5d:41:2f:d8:bf:3a:ca:c3:2e:
         be:65:70:9c:1f:e8:d4:40:3d:1b:2e:af:7b:6d:63:33:e1:36:
         d7:82:b2:39:58:8d:5a:98:25:22:c7:80:52:ae:fb:fc:58:cc:
         21:66:d7:4d:d3:d3:f4:63:5b:b0:41:6b:8f:5e:f6:39:5b:69:
         e0:08:00:1c:75:7a:f1:67:3a:f4:bb:59:0a:09:91:b0:f8:72:
         46:f7:ee:fd:f7:84:1f:0d:3b:d1:63:03:e1:f5:d8:79:77:25:
         f1:82:ca:29:78:d0:67:87:4f:b4:73:6a:97:b6:cb:4e:00:16:
         6b:c3:23:0b:78:17:7d:de:20:93:49:e8:96:19:ce:75:bb:be:
         92:b4:22:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:55:30 2025 by rpki-client