Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/6740c892-d540-3efa-a786-63007c9c57ce.roa
File:                     6740c892-d540-3efa-a786-63007c9c57ce.roa (raw, json)
Hash identifier:          Rr71P/taHXfjevP6cNeqJrLes8q+22AW2i4ozHnqpjI=
Subject key identifier:   AE:B7:FF:4B:6D:55:7C:E5:2D:3F:0F:68:17:19:C8:FE:38:C4:38:D1
Certificate issuer:       /CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21
Certificate serial:       010D0C9F4328584B0B76AE87FD67070779E38240
Authority key identifier: E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/6740c892-d540-3efa-a786-63007c9c57ce.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        216.250.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:ae:87:fd:67:07:07:79:e3:82:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=f33b3822-c983-450a-8ce4-cdd4a22b2b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fa:4e:a1:c8:8f:01:bd:24:c7:62:f0:65:a3:
                    0c:35:6d:ec:5b:24:43:fc:d0:00:3d:05:4d:67:33:
                    ba:d2:b9:f3:59:cd:cf:e2:e4:6c:bf:b3:43:ab:39:
                    28:cf:d6:f3:1a:6f:0b:42:fc:28:41:bf:ae:c0:32:
                    df:1a:9f:b2:ec:d0:6b:02:6f:6f:b1:53:70:44:5c:
                    31:b4:06:9a:50:46:7c:44:94:5a:a2:ad:96:11:a8:
                    bf:31:b2:d2:b9:83:e3:fa:db:86:fc:92:cc:6b:33:
                    ba:bc:8e:d3:54:cd:b6:af:16:b1:2c:2c:73:c5:dd:
                    26:ef:50:9e:f3:8e:13:07:f1:ed:4a:ca:2b:b6:07:
                    f6:62:b9:c7:c0:93:1d:8a:a3:43:ff:29:7a:0e:04:
                    43:d1:df:ed:48:b8:e1:78:02:22:57:02:15:71:24:
                    53:95:f8:78:54:bf:be:c1:25:d8:bb:2b:af:28:df:
                    4b:9f:e8:6a:ad:05:c8:64:37:87:f3:88:a1:eb:d6:
                    87:6d:a8:c3:ed:fc:32:a0:f3:d9:e3:7a:de:71:b6:
                    e5:84:54:f6:35:64:17:5f:b6:e1:f1:d6:2f:ff:29:
                    e7:42:89:e4:44:83:05:66:36:90:35:6c:88:03:0a:
                    8f:e1:36:33:3a:8d:e6:58:42:63:cb:8f:a2:6c:4f:
                    69:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B7:FF:4B:6D:55:7C:E5:2D:3F:0F:68:17:19:C8:FE:38:C4:38:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/6740c892-d540-3efa-a786-63007c9c57ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.crl

            X509v3 Authority Key Identifier:
                keyid:E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.250.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:de:7d:a9:eb:61:77:33:14:bf:ff:59:53:ec:69:bf:0b:45:
         dc:ca:f0:3e:72:a0:66:da:ac:22:e4:49:e7:16:41:d2:1e:9d:
         a1:79:c1:6b:6c:06:49:1c:43:4d:da:58:22:cc:c5:92:0c:fe:
         57:e0:58:05:db:6f:1f:a8:42:e7:5e:17:8a:bc:1d:a0:bf:c2:
         12:62:f2:25:b3:e5:30:4a:5b:06:d0:da:51:3f:85:ea:3f:74:
         e4:d8:ce:6c:bf:cb:f0:7a:3b:aa:97:31:52:1a:be:ae:83:ef:
         43:2f:61:7f:18:51:f0:a1:d3:05:84:68:45:80:5c:45:e4:d9:
         11:e7:89:24:03:43:89:bc:14:10:54:c8:44:d7:e4:3c:71:d4:
         f6:a6:74:36:d8:c6:1d:01:c7:c0:ef:94:bd:d5:9c:c0:ba:d1:
         36:a1:e6:a4:89:5e:38:0d:3a:a6:d5:20:65:fc:97:27:bf:b2:
         b5:a5:c3:13:4b:24:03:96:22:a2:24:0d:97:b1:ca:50:03:cf:
         e8:1e:8b:71:5d:49:34:d7:71:06:8b:e0:34:32:5d:19:a6:ff:
         32:f3:a3:c9:26:73:b5:84:cf:12:fd:53:0b:81:39:21:f4:af:
         a2:6e:a9:51:82:d1:1f:dc:dc:db:6f:94:11:db:62:40:69:d8:
         dc:b2:b5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:18:55 2025 by rpki-client