Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/db249113-d187-3685-b1cd-e35d0bc9ece7.roa
File:                     db249113-d187-3685-b1cd-e35d0bc9ece7.roa (raw, json)
Hash identifier:          0tloFriPamBmhTdAnWsGapEYXN271TNgW1nIEYIwZL8=
Subject key identifier:   02:01:E7:0E:A6:23:DD:A4:8B:88:4A:C2:82:28:69:9F:B1:E3:EE:C4
Certificate issuer:       /CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
Certificate serial:       010D0C9F4328584AFEE6ABB75703B25C0133BC80
Authority key identifier: 54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/db249113-d187-3685-b1cd-e35d0bc9ece7.roa
Signing time:             Wed 27 Aug 2025 13:00:41 +0000
ROA not before:           Wed 27 Aug 2025 13:00:41 +0000
ROA not after:            Tue 25 Nov 2025 14:00:41 +0000
asID:                     715
IP address blocks:        216.21.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:fe:e6:ab:b7:57:03:b2:5c:01:33:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58fcef31-bc61-4217-a648-2d5bb00c93a9
        Validity
            Not Before: Aug 27 13:00:41 2025 GMT
            Not After : Nov 25 14:00:41 2025 GMT
        Subject: CN=6172d7d7-7bfe-4422-aa3d-a9d01f9313fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fa:5e:5c:02:f3:11:fb:b1:8d:94:2a:e5:b2:
                    76:c1:dd:32:11:bc:b2:01:63:91:bb:86:1d:bd:6a:
                    74:6b:d7:55:e0:b4:da:54:aa:93:ee:6e:6f:52:c1:
                    79:60:29:0a:2e:2d:4c:ae:ef:47:f3:67:58:45:52:
                    09:82:d6:e0:2d:ce:cb:7a:e1:8e:e5:da:17:5a:87:
                    60:21:c4:bc:f0:d8:d9:5a:87:8a:ce:20:5b:8a:da:
                    5a:5a:88:80:1e:4f:9f:89:fd:ba:9f:40:80:d3:35:
                    bb:d9:a0:ea:b0:e9:f9:07:da:d1:40:6d:9d:29:f4:
                    18:65:69:84:5d:7d:6f:37:8d:c8:12:25:3b:f3:e1:
                    22:dc:ef:af:76:dc:17:a4:50:4a:45:1f:eb:34:ec:
                    68:b6:ec:b0:af:d0:9a:fa:51:28:62:54:da:aa:cf:
                    f4:81:ed:cd:88:f1:10:18:9f:d0:65:6d:84:69:54:
                    75:b7:4e:f1:ba:65:0e:bb:68:7a:ab:6b:59:ac:0d:
                    8b:ca:11:0c:cb:b0:56:76:a8:6d:ca:5a:be:63:54:
                    61:96:ce:11:51:1b:07:ae:ea:78:37:f0:bd:82:f8:
                    ca:76:4d:33:a7:ca:50:8b:4a:f9:f8:2d:73:16:18:
                    28:c5:c9:67:92:c6:06:0e:b5:d4:c9:d3:24:4f:68:
                    17:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:01:E7:0E:A6:23:DD:A4:8B:88:4A:C2:82:28:69:9F:B1:E3:EE:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/db249113-d187-3685-b1cd-e35d0bc9ece7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9/58fcef31-bc61-4217-a648-2d5bb00c93a9.crl

            X509v3 Authority Key Identifier:
                keyid:54:B3:F9:45:79:D3:B8:73:D6:52:7F:58:F3:60:23:04:04:50:4B:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/58fcef31-bc61-4217-a648-2d5bb00c93a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.21.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:36:69:94:42:af:bb:f1:bc:b3:cf:01:45:15:c0:06:30:99:
         b2:40:7d:f4:eb:a0:a1:7e:c5:53:bb:69:9a:92:b6:1f:44:cd:
         3a:81:38:8a:cc:3b:cf:53:4e:cf:62:c2:bc:31:79:34:f6:c5:
         ce:51:28:92:21:5a:ee:c4:d9:de:d2:06:a3:e4:92:91:bd:60:
         46:5c:10:2e:c9:4a:a7:18:56:4a:cb:0c:4b:27:4b:eb:76:c7:
         16:35:57:f6:ae:47:be:1a:45:cb:1b:77:c9:10:c6:db:c0:17:
         ed:f5:10:7f:b1:00:22:00:cd:e9:3a:6d:6c:7e:f2:42:86:b6:
         21:a8:06:2b:20:5c:29:47:18:8b:0e:75:f6:e2:3f:ab:4a:26:
         4a:e6:29:8d:59:de:66:25:99:40:2b:da:1c:a4:fc:0e:30:18:
         c1:51:a0:b3:12:cd:56:51:67:7f:69:99:b4:db:1b:23:aa:70:
         0f:47:3b:bf:e1:cf:49:b6:4f:6b:58:2b:be:d3:43:30:b8:71:
         c8:8f:35:5a:bd:b9:d4:d2:0a:0c:67:af:cf:9b:05:f9:f8:d6:
         1c:fc:df:ad:50:4c:d0:34:7e:02:a4:8c:2a:3f:2e:af:30:8e:
         c2:3a:5e:39:06:62:fb:33:35:20:6a:ee:1b:f7:ba:09:b0:f1:
         ba:b5:ac:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:03:01 2025 by rpki-client