Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/82d04256-69e2-330e-8e16-321e8a747b4e.roa
File:                     82d04256-69e2-330e-8e16-321e8a747b4e.roa (raw, json)
Hash identifier:          uYrH+7vIrrp2Mc27vppPVc3aaf4kz0A+DVTrmnMeE1E=
Subject key identifier:   4D:BF:71:C0:A2:D9:6D:3E:B5:3C:28:9D:A9:BF:75:25:4D:FA:EA:B7
Certificate issuer:       /CN=8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810
Certificate serial:       010D0C9F4328584B5141BC36024089AEE83E07E0
Authority key identifier: FF:C4:B2:E8:4F:33:E8:04:B2:61:B3:8D:82:01:03:6B:BE:73:CE:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/82d04256-69e2-330e-8e16-321e8a747b4e.roa
Signing time:             Fri 26 Sep 2025 01:00:33 +0000
ROA not before:           Fri 26 Sep 2025 01:00:33 +0000
ROA not after:            Thu 25 Dec 2025 02:00:33 +0000
asID:                     63213
IP address blocks:        23.83.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:51:41:bc:36:02:40:89:ae:e8:3e:07:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810
        Validity
            Not Before: Sep 26 01:00:33 2025 GMT
            Not After : Dec 25 02:00:33 2025 GMT
        Subject: CN=db500db4-6cc2-4230-a7d3-b8d7b8c39450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2b:29:61:cf:b8:d0:2c:9b:6c:77:62:ab:d5:
                    86:ad:79:ef:d4:2c:17:ab:df:59:9d:56:5f:46:58:
                    ef:c7:6f:ba:84:64:80:11:5d:fb:63:ca:b5:7a:82:
                    fc:b5:35:47:b8:52:6c:ee:48:4b:f5:1c:cd:d3:73:
                    d6:2a:a6:aa:95:9b:c9:1f:51:5b:4a:e6:c7:85:54:
                    1f:40:e3:50:3b:ec:77:c6:e8:97:c2:9c:c8:4d:78:
                    f6:be:a3:da:5e:27:2c:3d:27:fa:3c:0b:b0:fc:9f:
                    94:52:26:05:f7:a8:ab:8e:06:c7:8f:f2:59:67:9d:
                    f2:cc:b4:88:c5:28:41:7e:5c:7c:0e:ea:29:55:12:
                    a6:69:ef:86:4e:63:a3:86:86:15:7a:06:7d:5d:26:
                    38:84:7f:38:6d:f9:34:0c:eb:17:9b:a8:a1:c8:1e:
                    0f:13:c8:27:32:bd:3f:d9:7f:96:3c:a1:a2:ea:34:
                    26:f2:b2:a9:21:ab:16:8d:48:ac:d8:63:e2:71:3f:
                    86:10:eb:2a:49:2b:28:99:d5:3d:a6:c2:51:16:65:
                    1c:4b:0c:69:9c:36:77:68:46:6d:ae:fa:c2:fe:b5:
                    c7:d5:c0:1b:4b:a2:84:96:1a:ec:67:d8:18:82:a3:
                    66:c9:a4:a3:f2:e9:4e:ba:ff:06:52:dc:9c:89:24:
                    1a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BF:71:C0:A2:D9:6D:3E:B5:3C:28:9D:A9:BF:75:25:4D:FA:EA:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/82d04256-69e2-330e-8e16-321e8a747b4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.crl

            X509v3 Authority Key Identifier:
                keyid:FF:C4:B2:E8:4F:33:E8:04:B2:61:B3:8D:82:01:03:6B:BE:73:CE:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.83.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:34:38:3a:f7:f1:33:80:c2:da:3a:c8:51:86:80:58:14:ef:
         a3:a7:e8:75:f9:1d:9d:0e:dd:11:ca:14:ce:1f:64:20:87:f9:
         79:d6:8c:c1:71:7d:58:6b:16:01:56:f7:97:a9:42:30:cc:88:
         40:7b:0e:b3:6b:12:aa:7e:6a:8a:4f:b9:96:d4:03:88:d3:6a:
         99:37:55:b0:94:98:9a:2b:86:8a:c2:e0:2b:23:18:2f:6e:a8:
         2d:8d:63:b4:93:46:83:73:e9:bc:38:69:d4:ee:62:3d:46:78:
         2c:dc:63:a8:1c:7e:7d:5c:66:03:c4:1b:62:85:e1:91:31:05:
         a8:e6:6a:fc:ee:94:b3:d8:39:47:2a:f4:f1:3f:94:2f:63:92:
         e1:35:91:e2:5b:d9:11:71:64:01:a6:e6:5c:a6:d9:e8:11:2a:
         0c:87:a2:d5:5f:df:4a:a9:55:d4:36:b7:61:29:24:21:63:cb:
         87:ab:c8:a8:88:f9:13:76:ce:c2:b0:08:06:a3:f3:89:08:d7:
         73:5d:ec:34:64:ef:c5:2c:4d:68:9c:3c:19:db:c3:d7:e8:1d:
         73:54:04:73:1e:25:de:a6:98:5f:97:83:aa:55:5b:cd:20:47:
         3c:29:e3:bf:9d:74:34:00:be:79:bd:e5:c6:45:a3:52:bd:1f:
         09:57:df:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:03:06 2025 by rpki-client