Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c8516651-6d0b-32c2-a5fb-1fb6d889e203.roa
File:                     c8516651-6d0b-32c2-a5fb-1fb6d889e203.roa (raw, json)
Hash identifier:          CW2AmQl0BsFjMj9uyCOgZF2DqBMH7bjypqr4RCsewCU=
Subject key identifier:   39:B4:1D:B7:2E:00:BE:57:FA:14:A7:C5:4A:17:0A:CD:EA:0A:C5:C9
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584B1AD1839A2A096BB1B45D5600
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c8516651-6d0b-32c2-a5fb-1fb6d889e203.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     3561
IP address blocks:        208.166.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:83:9a:2a:09:6b:b1:b4:5d:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=7edbb147-3fb5-4d64-ad07-d566b1a8db1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9a:df:ea:de:ec:94:bb:b1:4d:13:1e:85:13:
                    ca:09:0b:65:4a:ce:d9:43:44:9d:12:19:26:27:0b:
                    a4:25:69:b7:5d:6b:db:87:80:d7:f3:f4:66:f9:d4:
                    a0:2c:a8:1f:79:04:08:f9:eb:06:65:6d:8d:e0:5e:
                    dc:1f:aa:43:3f:60:a3:31:97:ca:e9:0d:fd:51:51:
                    9a:a8:a7:b8:73:46:ad:60:2a:4c:b5:07:aa:86:62:
                    88:c6:d7:72:7a:be:b4:3c:09:a0:bb:2b:cf:81:b8:
                    1b:c1:e9:16:71:46:1e:d7:f1:0d:c1:78:19:95:c8:
                    e0:09:39:ee:ff:64:6a:08:55:7a:77:b3:87:17:b1:
                    01:ac:78:26:65:98:fc:54:87:ee:14:b8:47:40:3b:
                    69:cd:d9:d2:17:3c:19:c7:19:f8:e2:b6:5b:1d:e5:
                    e4:57:1c:bc:cf:46:c2:44:fa:50:82:a4:ea:bb:c1:
                    38:c3:da:fd:f2:17:e1:52:f3:b2:3c:70:d5:3b:e5:
                    98:a2:aa:70:b8:68:65:4d:af:59:85:53:d2:6b:db:
                    0a:ab:d2:e2:bf:69:3e:30:23:a7:d8:78:9e:7d:bc:
                    da:79:b9:f7:a3:d2:91:7a:aa:db:fc:d7:28:a2:9e:
                    83:c0:5f:3c:bc:10:d2:c8:38:07:fe:29:4e:c7:c5:
                    5c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B4:1D:B7:2E:00:BE:57:FA:14:A7:C5:4A:17:0A:CD:EA:0A:C5:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c8516651-6d0b-32c2-a5fb-1fb6d889e203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.166.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:9b:27:38:35:6b:0a:d7:4f:72:a2:b1:1d:36:1b:6d:b2:99:
         09:53:e3:9e:67:70:25:12:f2:72:60:4d:41:2d:a9:25:7e:06:
         bc:26:e9:58:12:80:4d:aa:c6:ae:f1:9f:36:99:4d:60:57:0e:
         b9:46:64:ac:cf:33:c4:ba:58:8a:8c:b8:4b:66:b0:89:50:4b:
         53:98:7a:66:4c:24:98:61:03:7f:5e:fb:48:9a:8e:84:02:03:
         e7:d4:d6:0d:63:f4:ca:57:c9:37:72:d1:df:19:2f:2f:c5:1b:
         0a:c4:cc:77:56:51:f6:48:3b:64:f6:84:89:1c:3a:41:6e:aa:
         7d:fa:69:72:28:b8:00:d3:4a:f7:5c:51:76:5e:ca:7c:ae:85:
         ba:b4:47:be:78:c1:00:e1:7f:40:3b:52:b6:6b:ce:f2:d9:09:
         b7:a8:91:dd:1c:58:d7:6e:9f:52:bf:25:30:c4:d3:a0:71:ee:
         dd:a0:47:c4:a5:eb:9f:78:d4:47:40:96:8c:2a:31:56:8b:f8:
         37:40:42:ce:34:93:e1:c6:26:bb:e8:27:81:2c:ae:97:27:54:
         aa:02:4c:1c:2b:29:7e:94:12:4f:91:c4:c5:79:22:fb:8b:bf:
         0b:e4:c6:94:1f:40:8d:97:d1:8e:34:f8:ec:dc:31:6a:70:fb:
         32:c0:94:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:28:57 2025 by rpki-client