Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da1c77da-37f9-38f2-818a-c7e7fd2ecacc.roa
File:                     da1c77da-37f9-38f2-818a-c7e7fd2ecacc.roa (raw, json)
Hash identifier:          AtmF/CmL0nyBDDsZLAshezYpOAGVjUZfp3BBaqt9ZdI=
Subject key identifier:   D7:C2:DC:E9:28:30:34:32:F6:A7:6D:77:AD:FA:43:C5:FD:D2:FE:FD
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584B477C679A121FC5BB0415A0C4
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da1c77da-37f9-38f2-818a-c7e7fd2ecacc.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        216.115.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:67:9a:12:1f:c5:bb:04:15:a0:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=c4f045a0-3df5-48cc-a284-2044d0b82027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8b:8f:69:4f:4b:3f:a8:c6:85:33:e3:0c:79:
                    80:f2:e5:36:8e:49:b4:a9:94:5f:85:c8:54:36:b9:
                    00:af:01:3b:47:98:be:15:d5:38:89:4d:08:e5:8f:
                    e6:72:1b:86:9b:0c:6a:c0:e0:d1:73:13:db:61:02:
                    88:3c:08:4f:50:79:43:69:6f:d8:36:3a:1a:29:fb:
                    a6:8a:e6:0c:b6:6a:0f:41:8b:c2:17:b1:73:01:f3:
                    b5:dc:8a:f6:0d:d0:a5:0e:82:b5:eb:e5:89:23:92:
                    9f:8f:36:a1:f4:7c:64:a7:69:68:5a:a8:17:a2:18:
                    f7:fb:92:ac:b6:27:eb:4e:eb:fb:9a:7e:31:83:5a:
                    d1:1e:b4:19:03:97:31:b4:c2:b9:00:be:e3:b8:a9:
                    eb:9f:fa:39:c1:01:6d:74:e1:1a:9a:fa:1e:0c:e4:
                    91:f4:cc:dd:12:7e:66:bf:18:f1:1d:cd:9a:41:6a:
                    17:f5:54:7a:67:b0:45:94:3a:8d:89:c8:84:68:e0:
                    53:69:a0:a6:13:1a:dc:af:1e:d0:b8:e7:02:89:45:
                    d0:00:d0:30:1f:81:be:78:cd:53:09:e4:89:e8:5d:
                    ce:96:41:59:eb:5a:2b:a9:ac:97:44:40:c8:95:66:
                    d2:0c:0e:69:c2:29:c2:95:f6:b7:dc:8e:e3:d9:2d:
                    e0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C2:DC:E9:28:30:34:32:F6:A7:6D:77:AD:FA:43:C5:FD:D2:FE:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da1c77da-37f9-38f2-818a-c7e7fd2ecacc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.115.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:c3:09:6e:0d:8e:5e:7d:ea:dd:04:80:88:cc:ce:83:8b:24:
         08:01:ec:76:95:7a:4b:cf:ea:a4:4f:c3:04:8c:49:60:e6:7b:
         5f:a6:40:41:1f:12:2a:a4:1a:50:f2:01:87:eb:81:3d:e7:0d:
         4b:04:98:98:a8:50:ea:8c:91:1a:3f:f7:77:05:b6:6e:19:b1:
         c7:ad:52:84:69:b1:f3:dd:b5:56:d9:99:80:13:71:aa:49:0a:
         a1:e3:6f:5f:b9:2b:50:84:b8:57:f2:20:47:55:51:07:66:be:
         2e:86:77:de:a6:52:68:7c:5b:08:dd:72:79:ac:d0:0a:df:d5:
         12:30:c2:4c:3b:40:77:47:87:67:28:32:85:ad:50:7e:8b:87:
         c8:cd:22:5f:50:01:6c:a1:b7:f1:96:b1:1b:cb:2e:5b:f8:6f:
         94:85:a7:09:de:fe:9a:64:68:9f:74:4a:5d:86:97:10:24:1f:
         bd:2c:1b:78:42:6f:48:2e:04:cc:78:16:32:fc:b1:24:6c:f8:
         eb:fc:d7:01:b1:3d:91:82:3d:52:3d:5e:c6:20:c7:5a:f1:35:
         50:6f:0e:5b:24:56:b5:d6:6c:00:a7:a4:2b:4d:6f:2e:f4:0b:
         b7:82:18:97:04:d9:78:1f:c1:01:9e:d3:d0:47:5b:cd:ef:bb:
         47:13:6b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:02:24 2025 by rpki-client