Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/17a3fcba-33aa-3b78-a608-0eecf0c2eecd.roa
File:                     17a3fcba-33aa-3b78-a608-0eecf0c2eecd.roa (raw, json)
Hash identifier:          O7zvL4t/gsiEimAx6Quf2TIQSTWr9ATvs5nGX5ntRco=
Subject key identifier:   99:9E:A0:42:27:C1:06:E0:8A:CC:AA:37:A2:14:D4:C0:83:55:38:BD
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584ACB40EF95792EE217B1B0DBF8
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/17a3fcba-33aa-3b78-a608-0eecf0c2eecd.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        216.115.219.0/24 maxlen: 24
                          216.115.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:ef:95:79:2e:e2:17:b1:b0:db:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=8c94a3f5-fc32-4e9c-9af5-0aabef75686a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:12:45:bf:7f:a7:d0:09:6d:e1:47:33:f6:d7:
                    e1:1e:c6:5d:27:c9:ae:81:c7:f2:19:c9:49:d8:b1:
                    73:cf:f1:87:d8:b9:bc:5c:18:e3:69:a6:b4:3a:49:
                    1a:16:98:e9:dd:80:dc:91:f8:8a:30:f5:cb:2c:e4:
                    9e:7f:f5:40:6a:42:f4:9f:ad:f9:da:b9:41:90:91:
                    18:40:70:9f:63:2a:eb:c3:d8:1d:f1:cc:2c:2b:03:
                    f4:01:a4:03:c0:77:1e:82:12:3b:ea:fb:fc:e8:84:
                    1d:b2:7f:e5:61:89:6a:5b:39:b3:88:ad:b4:f6:00:
                    0e:47:a0:0f:57:9b:e5:c7:69:66:dc:bf:25:be:b5:
                    e1:6b:68:f9:50:72:16:e0:0a:53:bd:e0:15:3a:9e:
                    71:9e:8b:8f:5d:84:14:ab:ed:e3:9d:4a:e4:ce:d3:
                    38:89:3d:2b:5f:a7:20:96:b4:7d:ef:4c:f6:34:7f:
                    33:cd:ba:43:fa:d7:2b:a8:f7:b7:2e:86:55:bf:ab:
                    53:ef:64:43:ac:80:f9:01:a5:8a:fe:a2:64:b4:5c:
                    0a:47:5f:07:99:cb:23:e9:54:f0:c8:7b:99:93:6f:
                    13:bc:33:04:4e:2f:0b:2d:0a:a9:e8:25:5a:6f:cd:
                    74:3a:b5:a9:ac:ac:f6:f3:8c:4b:58:71:45:d3:ed:
                    bd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:9E:A0:42:27:C1:06:E0:8A:CC:AA:37:A2:14:D4:C0:83:55:38:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/17a3fcba-33aa-3b78-a608-0eecf0c2eecd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.115.219.0-216.115.220.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ef:ca:e2:71:ae:2a:34:23:95:74:c3:2d:a9:6b:9f:e9:77:
         99:18:9b:a5:89:4d:61:e6:51:75:4a:a6:40:45:99:cc:f4:ca:
         80:ad:58:57:ed:b8:c5:6a:a5:76:d5:aa:cd:61:28:70:eb:db:
         0c:6a:89:2d:2e:fc:59:90:3e:59:a2:90:d5:55:1a:b9:fc:49:
         51:fe:a7:cc:55:76:5f:3f:4c:95:fd:9d:f7:3e:f6:58:6c:68:
         c3:f8:10:14:3a:6e:86:1a:74:6c:6a:ba:ed:1e:1c:b3:5d:7c:
         ea:a5:03:58:25:8f:3e:c4:14:82:ff:4f:16:57:10:72:9f:f5:
         d4:42:cd:cb:1e:a7:e0:e2:6d:97:0c:c9:e5:87:e3:47:41:90:
         e0:a2:a3:76:59:96:3b:ca:12:20:58:2f:8f:cb:14:a5:98:ec:
         5b:30:91:2f:d3:a7:3c:86:99:fe:fc:f3:79:d0:ee:18:7c:b4:
         a5:67:37:f1:ed:a4:80:53:d0:85:70:d2:e9:d7:46:22:1f:e4:
         1f:9e:a8:fd:1c:63:f3:c4:5d:6b:83:e2:71:67:e2:ef:e6:99:
         0c:d8:e0:3a:63:e7:f4:27:66:8a:c3:6b:c8:8e:e2:e8:97:b0:
         22:d7:e4:00:ee:8b:8d:73:46:85:8a:96:89:69:95:f8:fe:0d:
         38:8b:53:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:04 2025 by rpki-client