Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/a9541167-98b4-33eb-878c-b28dab1cbe50.roa
File:                     a9541167-98b4-33eb-878c-b28dab1cbe50.roa (raw, json)
Hash identifier:          30gVbpyZvN2e8TmNEzFPEuQJEntaGnO0MJgmzU/+oxI=
Subject key identifier:   5F:7B:79:38:EF:35:C1:12:22:3C:9D:74:FC:58:DB:5B:CD:F6:5F:34
Certificate issuer:       /CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21
Certificate serial:       010D0C9F4328584B1C36C66BB9F70A78EEF79480
Authority key identifier: E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/a9541167-98b4-33eb-878c-b28dab1cbe50.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        216.250.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:c6:6b:b9:f7:0a:78:ee:f7:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=f8a7c1e5-b3e4-4bbc-b9a3-480f6e34bc70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ea:c1:71:95:24:00:62:dc:38:84:4a:9c:ea:
                    ad:ca:84:31:d6:e7:32:84:1e:46:55:fe:14:b9:03:
                    b2:8d:50:be:ce:24:4b:7e:47:2b:45:f4:a1:3f:16:
                    80:a4:6b:ae:57:ef:95:14:53:46:24:26:30:c8:dc:
                    e1:2b:e0:50:08:a8:e4:aa:5d:dc:d8:a7:31:61:c9:
                    4d:70:01:6e:b6:c3:cd:eb:87:aa:5a:7a:36:1c:68:
                    da:8b:96:dc:dc:5e:7a:2a:cf:8f:0e:4e:14:fb:bf:
                    c7:94:f1:81:6b:21:4a:b3:4d:70:47:61:24:9b:a2:
                    07:93:97:6e:00:f4:cb:fd:7e:e1:33:4f:57:05:17:
                    a8:3f:09:2b:0a:2c:4e:d3:81:37:c9:7c:88:8c:f8:
                    7d:e1:d9:96:b2:db:7c:42:f4:e1:2b:eb:73:ae:a0:
                    58:26:fa:6a:6a:42:53:15:6c:81:11:37:c6:43:1f:
                    6a:7c:a6:ac:d4:ba:45:2d:61:71:d6:c5:f4:74:31:
                    a7:e3:fe:b3:db:54:94:3c:ae:36:0b:a0:4b:cb:fb:
                    e6:8b:37:aa:c1:fd:4f:96:8b:79:55:64:b3:94:57:
                    f4:aa:a7:0a:78:2a:b3:93:0e:60:4d:d4:6e:15:13:
                    4f:3d:04:69:8a:54:28:7c:05:74:99:24:2a:29:21:
                    7c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7B:79:38:EF:35:C1:12:22:3C:9D:74:FC:58:DB:5B:CD:F6:5F:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/a9541167-98b4-33eb-878c-b28dab1cbe50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.crl

            X509v3 Authority Key Identifier:
                keyid:E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.250.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e6:08:e1:ee:f3:b7:7e:3a:21:2d:68:44:66:69:4b:3a:f3:3b:
         fe:f4:45:1a:ed:ac:eb:00:04:3e:07:29:64:cc:51:9c:ad:bb:
         af:d0:b6:fe:70:2d:5c:6e:bb:d8:e3:68:55:c6:24:cd:c6:37:
         d9:fe:85:65:5d:a9:f2:cf:e1:63:4b:01:dd:69:68:df:86:a8:
         8e:cb:b8:a1:fc:e6:70:f9:37:82:2c:7d:93:b4:a8:d8:3e:b9:
         aa:8b:25:f7:af:ef:08:3e:10:84:a2:8a:17:b7:5e:cd:d9:ea:
         71:1a:ef:18:53:eb:cf:e8:f3:95:fd:18:0c:14:2d:c8:dd:85:
         a2:30:10:c7:cc:a6:c8:a7:a3:d0:62:28:93:92:76:03:cf:68:
         8c:d8:bc:27:36:5f:68:16:65:02:fd:a3:90:a7:1a:44:b0:7d:
         14:15:e5:b6:9e:a1:40:1c:ea:78:60:0f:fc:45:61:9a:59:21:
         36:79:88:53:65:82:99:e2:81:77:68:0e:3a:8f:5b:71:2b:73:
         6c:88:53:b1:36:9e:d1:34:9f:6f:63:86:04:66:f0:f3:6f:21:
         b1:60:3e:c1:82:cb:0a:a3:fc:36:5a:ed:8a:99:7f:fb:a9:eb:
         13:4c:b9:5b:b5:70:65:f3:58:16:b0:1f:2a:e2:fb:be:47:a2:
         c0:a4:51:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:10:27 2025 by rpki-client