Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/ab32e215-2622-38a5-9feb-f902b70e4b88.roa
File:                     ab32e215-2622-38a5-9feb-f902b70e4b88.roa (raw, json)
Hash identifier:          ny6X5WVMhv4aTCz9CTUe6kyqdwEUR50SJEniWhwFr1E=
Subject key identifier:   8B:B2:CD:77:8D:C5:48:CA:7C:12:20:98:E8:14:D4:37:76:3E:98:19
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584B36BC5190B3A21AA09FB1E800
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/ab32e215-2622-38a5-9feb-f902b70e4b88.roa
Signing time:             Tue 16 Sep 2025 13:00:41 +0000
ROA not before:           Tue 16 Sep 2025 13:00:41 +0000
ROA not after:            Mon 15 Dec 2025 14:00:41 +0000
asID:                     13768
IP address blocks:        216.187.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:bc:51:90:b3:a2:1a:a0:9f:b1:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Sep 16 13:00:41 2025 GMT
            Not After : Dec 15 14:00:41 2025 GMT
        Subject: CN=641dd08a-9dfb-44bb-922b-95cabee1c993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:38:eb:d3:2d:78:13:7e:0b:a5:14:29:fe:a0:
                    04:8c:78:d4:c8:de:14:03:e8:52:e9:1f:4f:ef:0a:
                    a3:06:96:e4:03:c8:3a:2d:c0:5b:68:52:33:90:95:
                    a9:b9:f0:17:d6:d1:23:0c:01:01:b2:77:4a:91:d2:
                    f2:d0:0c:0d:fd:64:e1:18:19:e1:9e:1c:0d:41:e2:
                    a5:46:56:7f:ff:81:02:d9:a1:ea:88:65:b3:f0:be:
                    fb:54:a9:08:1a:74:7f:1d:74:7f:a0:aa:40:a1:7c:
                    ab:79:40:ec:03:2e:c9:35:da:dd:29:63:19:9e:71:
                    d9:cb:4b:73:0f:43:61:ef:1f:3d:7b:ab:4f:64:54:
                    52:c1:15:82:be:c2:0a:09:14:5a:f3:30:70:3c:dd:
                    f5:25:bc:41:54:79:74:09:12:7d:89:69:c9:65:d8:
                    e8:e9:4a:73:95:95:52:0e:96:81:20:8d:18:cc:51:
                    c8:b3:39:54:c3:80:23:50:57:10:08:6f:a1:57:db:
                    4c:cb:f0:3a:cb:b7:07:1d:94:4f:be:9a:48:cc:bd:
                    2e:da:83:7b:e6:6f:be:b8:dd:3f:7b:35:8d:3a:6f:
                    1b:23:48:68:c0:59:d4:e6:e6:4d:b5:44:aa:cd:2c:
                    2c:1a:e2:81:98:8d:3d:8d:c4:ed:b6:74:f9:43:b7:
                    3e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B2:CD:77:8D:C5:48:CA:7C:12:20:98:E8:14:D4:37:76:3E:98:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/ab32e215-2622-38a5-9feb-f902b70e4b88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.187.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:aa:13:dd:b9:8b:0d:21:85:db:ab:61:c3:9a:ad:09:a6:a2:
         60:39:ea:6e:64:2e:9f:6d:22:d4:c6:49:49:2e:07:5d:f1:a8:
         a4:50:0a:8f:1c:c8:36:a3:39:f7:86:1e:ea:66:77:42:b5:53:
         48:01:d0:cb:0c:74:cd:a7:d7:27:02:20:ae:cd:5a:c3:f3:2d:
         6d:2a:dd:d9:ac:f7:13:86:0c:df:4e:84:a9:05:9b:b5:a2:c3:
         82:46:03:e5:f0:aa:87:f2:3b:66:df:95:8e:0c:a7:33:e7:e0:
         c9:e1:6a:cd:00:eb:18:cb:69:b4:5c:1a:f0:13:07:20:05:3d:
         b7:82:2c:d2:75:d8:9f:27:f0:b7:bd:af:8a:e8:ee:8c:51:8f:
         7e:21:fe:90:ac:a5:01:b3:f9:ea:12:28:8a:74:43:f7:c0:6f:
         a2:41:77:0b:f6:e6:0b:de:50:ef:dc:25:69:a9:ba:91:44:ac:
         2e:0d:57:3f:70:22:3c:26:8e:25:54:7a:4b:e3:ad:f5:27:d4:
         1c:90:cb:01:6c:c7:51:14:cf:cb:5c:f2:38:a2:ee:43:7f:d0:
         83:69:46:8b:5f:3a:c8:97:f6:7a:fc:0d:73:eb:1a:57:32:62:
         95:ef:66:d6:27:63:61:83:53:00:96:b0:37:68:36:02:af:de:
         cc:64:54:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:36:38 2025 by rpki-client