Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/937a15a8-1753-3ab4-a7e6-aa7086698147.roa
File:                     937a15a8-1753-3ab4-a7e6-aa7086698147.roa (raw, json)
Hash identifier:          RUfqremjBspQs0KaXb2w+Sp2KmGrni0XGMDCD2vvH4k=
Subject key identifier:   6E:AC:52:7F:C7:EA:CE:49:8F:A6:53:F8:8B:F9:04:4C:D0:05:2C:15
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A8C62EED9FEEFD0D0D5332A00
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/937a15a8-1753-3ab4-a7e6-aa7086698147.roa
Signing time:             Thu 17 Jul 2025 12:33:16 +0000
ROA not before:           Thu 17 Jul 2025 12:33:16 +0000
ROA not after:            Wed 15 Oct 2025 12:33:16 +0000
asID:                     10515
IP address blocks:        216.168.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:62:ee:d9:fe:ef:d0:d0:d5:33:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 17 12:33:16 2025 GMT
            Not After : Oct 15 12:33:16 2025 GMT
        Subject: CN=f7525671-bd71-41a3-b5ef-ff0b17799b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:20:32:6d:77:a5:f2:75:32:36:3d:fc:7d:b4:
                    4e:50:dc:dd:92:54:09:a1:26:fe:73:8c:b9:45:ae:
                    69:48:d4:1f:4e:aa:3a:bb:38:e8:2f:32:40:6c:d7:
                    9a:7c:a9:9a:5f:6d:94:e8:7e:88:0c:61:c9:f6:a2:
                    65:f2:2d:7e:b0:dd:7a:6e:85:7c:f0:72:4a:0b:d6:
                    bf:be:2c:8b:50:5f:d0:a0:18:b6:5f:36:53:03:52:
                    46:74:5a:7d:c8:a0:8a:29:9f:6e:ea:2d:ae:fa:de:
                    e5:d1:0e:22:3a:d3:e9:71:b6:d7:98:f2:4b:8f:96:
                    1c:16:02:9f:72:72:66:5e:2d:54:9e:46:e4:8f:45:
                    70:1b:99:71:43:18:e8:b9:2c:7b:8e:f7:29:a1:4f:
                    ea:c9:c1:e4:1d:30:ed:b5:c3:bc:ad:5f:3e:22:15:
                    36:ef:50:17:9b:d9:fe:3a:7c:f7:ed:56:98:ef:d1:
                    0e:38:de:4d:1c:b4:ca:24:24:af:dc:8b:bc:43:09:
                    01:fd:29:93:51:ba:a8:df:f2:f7:23:58:45:69:4e:
                    ad:ed:2b:c7:97:af:f3:4b:21:c6:67:d2:49:0b:52:
                    c6:c9:e8:68:5c:36:e7:12:d1:7b:91:b9:3d:ac:8b:
                    61:b8:58:37:00:c1:13:26:af:2b:78:bd:30:5f:c3:
                    96:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AC:52:7F:C7:EA:CE:49:8F:A6:53:F8:8B:F9:04:4C:D0:05:2C:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/937a15a8-1753-3ab4-a7e6-aa7086698147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.168.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:97:9c:17:51:53:64:31:ce:1f:58:31:f9:40:3e:7b:dc:27:
         78:f4:51:9e:72:cd:03:d9:b0:f1:e7:8d:27:d8:19:0e:5a:98:
         06:1d:70:2c:b6:b3:7d:ae:f0:c1:73:c9:3b:7a:35:0a:36:5a:
         b0:88:88:53:0b:ad:13:6f:90:09:ca:88:95:0c:0a:1b:02:6f:
         2d:f4:d9:80:7b:27:77:a9:72:3d:0f:00:7d:32:d7:8a:d9:79:
         f1:09:86:de:36:20:43:5c:a2:22:d2:f4:cb:aa:95:67:60:76:
         66:56:f2:e7:2f:be:21:54:e6:b8:a5:7a:28:04:25:88:94:5c:
         48:1a:aa:b5:4e:c7:46:24:6b:37:05:cb:40:75:04:84:95:4e:
         99:b5:c0:73:6a:5c:4d:df:57:30:f8:39:65:3f:40:42:6e:da:
         2f:ee:97:37:65:ef:39:57:e8:d8:fb:e1:fa:ab:20:27:51:42:
         80:ad:36:51:6b:dc:31:ed:00:6a:8f:09:71:5d:c9:74:d0:a2:
         e9:42:6d:3a:71:90:5d:76:c2:75:28:9f:56:13:08:16:a7:a8:
         28:c6:d8:c6:c2:a2:23:5b:bf:20:42:e3:1a:ee:1e:71:9a:00:
         52:3e:3f:7e:55:48:a3:ab:93:0a:ae:f0:59:08:16:8b:9e:ef:
         7c:91:d4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:41:59 2025 by rpki-client