Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/cd011bcd-5b47-3a26-a048-12e973e67b5f.roa
File:                     cd011bcd-5b47-3a26-a048-12e973e67b5f.roa (raw, json)
Hash identifier:          GNYzRtcpeU2I6QF9ZvxR02Jbn6R1p+lHlnTaZP+TE9s=
Subject key identifier:   45:45:08:49:C7:ED:45:87:BA:80:6D:14:8B:65:66:6F:1D:E8:BC:18
Certificate issuer:       /CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
Certificate serial:       010D0C9F4328584B4E7709D89180E79DA72B6500
Authority key identifier: 6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/cd011bcd-5b47-3a26-a048-12e973e67b5f.roa
Signing time:             Thu 25 Sep 2025 01:00:33 +0000
ROA not before:           Thu 25 Sep 2025 01:00:33 +0000
ROA not after:            Wed 24 Dec 2025 02:00:33 +0000
asID:                     53334
IP address blocks:        216.59.58.96/27 maxlen: 27
                          216.59.58.128/27 maxlen: 27
                          216.59.58.160/27 maxlen: 27
                          216.59.58.192/28 maxlen: 28
                          216.59.58.208/28 maxlen: 28
                          216.59.58.224/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4e:77:09:d8:91:80:e7:9d:a7:2b:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
        Validity
            Not Before: Sep 25 01:00:33 2025 GMT
            Not After : Dec 24 02:00:33 2025 GMT
        Subject: CN=85d02ff9-9864-4b5b-8eab-236591cde408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:66:12:b5:10:e8:ef:06:18:e6:6b:66:62:7a:
                    c1:d5:f3:46:e5:1c:9c:00:4e:7d:5d:c4:82:a2:49:
                    d0:b5:33:6d:64:2a:02:9e:26:ce:b9:c3:37:fb:2a:
                    5f:1c:79:9b:0f:fa:7c:e6:d7:2a:01:47:18:72:ff:
                    76:a8:6d:27:93:7d:1a:f8:73:e4:f2:c8:56:ac:45:
                    a5:fe:4a:bf:18:fa:0f:98:f1:ba:61:34:40:40:46:
                    3e:a0:ea:38:80:ab:22:aa:f4:89:71:7e:f3:ef:79:
                    e9:e0:f5:00:2b:03:9e:3a:1f:fa:cf:d8:6c:65:41:
                    cb:55:b4:94:3b:cb:70:a6:85:2c:46:51:db:9c:9e:
                    fa:3c:8c:76:17:1c:64:e0:7a:74:4b:e3:75:b8:bd:
                    53:9d:3c:33:8a:65:9c:55:3a:96:f1:f8:9c:14:be:
                    d1:79:7d:3f:62:bc:e2:17:f3:ad:08:44:7d:df:ef:
                    b3:8e:bf:57:18:56:2f:05:3f:98:11:e9:1d:d7:45:
                    fb:40:5d:d8:bf:e0:86:47:cb:88:2f:32:b2:b9:1a:
                    de:c3:c8:0f:2e:20:94:1c:a1:58:8f:70:89:85:2b:
                    ca:db:9e:b0:41:1b:b6:86:ca:17:b7:3b:c5:a1:1e:
                    1d:a8:bc:04:8c:c9:6e:7d:96:3c:58:f2:d5:2a:8d:
                    42:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:45:08:49:C7:ED:45:87:BA:80:6D:14:8B:65:66:6F:1D:E8:BC:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/cd011bcd-5b47-3a26-a048-12e973e67b5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl

            X509v3 Authority Key Identifier:
                keyid:6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.58.96-216.59.58.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:c9:2e:86:49:3f:31:40:cd:91:70:0e:bf:15:e1:17:88:78:
         4f:e2:cc:6e:ba:71:e6:fc:bc:92:cd:74:8e:a1:c6:60:41:69:
         41:59:39:cb:3a:2c:94:02:75:43:08:fa:b9:5a:46:44:2b:ae:
         cb:55:3c:46:c2:aa:89:25:6b:9a:31:25:95:2d:28:3c:03:88:
         b4:50:d6:45:1f:21:4b:93:b8:49:1e:c5:a9:12:96:6e:35:67:
         1c:b1:ac:69:b6:ce:ff:f2:47:66:da:a1:5f:49:37:8b:4a:dd:
         e1:02:cd:9b:18:10:dc:7f:7c:bc:9b:70:7b:eb:0d:81:76:ac:
         7c:44:e9:8e:f1:19:1f:be:b5:6b:6a:17:0f:70:b8:26:d0:c6:
         0e:58:14:aa:5d:8c:37:df:08:52:68:36:59:db:1a:02:5a:04:
         ad:8c:5c:a0:72:b5:9c:f0:fd:e2:2b:ba:f4:5d:f8:c3:f6:f1:
         d5:d6:fc:ae:96:1c:9a:3a:50:1d:f6:9b:be:6c:11:aa:4c:3e:
         d9:49:35:74:e4:6e:7d:13:6d:a5:4c:92:b9:83:3b:62:6d:56:
         2b:fd:b8:b8:c8:fd:79:9f:90:f0:cf:53:50:cc:29:89:36:bc:
         60:6e:2f:3d:52:80:64:7a:c3:38:0f:79:a1:1b:ec:25:ea:80:
         11:39:89:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 20:04:30 2025 by rpki-client