Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/d0350d6c-8bbc-34f7-af69-67b04fcf8be6.roa
File:                     d0350d6c-8bbc-34f7-af69-67b04fcf8be6.roa (raw, json)
Hash identifier:          2adnBPHuKU1lQ8ywq79RR22YuI4Eisa44JAomoIl50c=
Subject key identifier:   C1:B0:84:95:D1:A4:BB:30:92:CE:D1:AB:0B:8B:92:E7:4E:E6:6A:3B
Certificate issuer:       /CN=0b8b20ca-2a1e-4742-b63c-4b3b1d151f15
Certificate serial:       010D0C9F4328584B36BC4E3D9B071C58CEF75A00
Authority key identifier: F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/d0350d6c-8bbc-34f7-af69-67b04fcf8be6.roa
Signing time:             Tue 16 Sep 2025 13:00:41 +0000
ROA not before:           Tue 16 Sep 2025 13:00:41 +0000
ROA not after:            Mon 15 Dec 2025 14:00:41 +0000
asID:                     14702
IP address blocks:        141.221.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:bc:4e:3d:9b:07:1c:58:ce:f7:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b8b20ca-2a1e-4742-b63c-4b3b1d151f15
        Validity
            Not Before: Sep 16 13:00:41 2025 GMT
            Not After : Dec 15 14:00:41 2025 GMT
        Subject: CN=5bab0835-1a23-46c2-a35a-a776e579f5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d4:02:b3:80:9a:e8:15:f5:ec:4e:a0:40:2c:
                    82:c9:62:d1:a5:26:88:a5:fd:e1:5d:42:04:ee:97:
                    49:78:8d:26:6c:b4:7b:62:d3:3b:4a:b9:fa:f2:b6:
                    26:5b:e6:c8:52:28:79:21:e4:9f:3d:8f:27:3d:b1:
                    e5:0c:11:88:e8:1d:46:a6:cd:6e:11:92:8b:3b:6b:
                    f8:21:32:6a:e1:3b:c4:ef:1b:f1:c4:9e:80:cd:d1:
                    52:32:48:4a:bd:59:3b:43:db:f8:df:d1:42:9d:48:
                    4a:8f:d5:d3:d1:f5:70:79:b1:1e:de:29:a6:21:bc:
                    a9:f4:73:49:71:e0:7c:70:ab:20:e7:b5:85:14:49:
                    6d:c7:16:61:d6:84:cf:c1:42:ab:8b:8d:5a:2a:db:
                    0a:b6:cc:70:63:6d:29:fa:99:f5:21:64:05:fc:37:
                    d8:af:3f:43:5e:1e:13:8d:16:6d:7b:96:2f:96:57:
                    8c:a3:41:7d:30:69:c0:36:1d:17:1a:da:1e:a4:a8:
                    25:dc:1a:14:af:f0:e1:70:42:a9:e2:cf:bb:af:87:
                    88:8e:8e:1d:00:61:55:a3:13:c2:6d:5f:08:74:86:
                    ad:e4:fe:53:02:c0:d0:43:d9:29:c3:78:74:2d:da:
                    6b:22:00:5b:eb:79:67:a7:32:73:45:04:ec:5e:12:
                    11:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B0:84:95:D1:A4:BB:30:92:CE:D1:AB:0B:8B:92:E7:4E:E6:6A:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/d0350d6c-8bbc-34f7-af69-67b04fcf8be6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.crl

            X509v3 Authority Key Identifier:
                keyid:F3:FF:58:AA:40:01:5E:1D:D0:5D:10:B7:78:A8:F8:65:D2:9D:42:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0b8b20ca-2a1e-4742-b63c-4b3b1d151f15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.221.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:e6:f6:1c:4f:41:03:af:13:a7:4b:4e:19:6e:1c:55:d3:1b:
         90:4e:2c:bf:69:9a:cf:d9:ac:07:cb:22:40:6c:98:c8:fd:21:
         dc:b8:d8:06:52:27:a5:ad:2f:42:f1:62:85:5a:7d:83:9a:a6:
         b0:cb:ab:a0:b6:2f:cb:7e:95:18:01:57:f2:1b:f5:e0:8f:ad:
         4f:60:f5:ef:9d:f4:7b:9f:e6:87:7e:fa:b7:ae:e8:08:6b:1a:
         aa:d9:34:c1:7e:14:dd:f0:7d:36:8b:84:53:3a:06:b4:48:87:
         22:06:ce:88:1b:3d:f9:24:38:80:02:31:8e:cb:8e:2d:ae:e4:
         b0:25:12:d1:49:8b:c1:b4:e0:06:1a:09:d3:76:67:ad:cd:2f:
         24:12:3b:ad:f2:41:33:ca:e1:b4:47:75:1c:cd:ba:04:b4:3f:
         cc:50:0f:37:69:b6:6b:cf:31:51:01:7d:66:ce:4a:0a:9b:59:
         c5:3a:bc:94:86:54:0e:0b:69:55:d6:8d:75:5c:d7:05:fb:b9:
         67:4f:ce:0f:ab:ba:f3:9a:40:47:c6:99:7c:6c:05:1f:fb:93:
         a0:d1:51:b1:d0:a3:f1:0a:64:ce:22:84:f7:5b:54:1d:42:1f:
         b6:8f:9b:dc:ff:f6:b5:96:ee:85:53:f7:e9:2a:e4:55:bf:c7:
         51:f6:e2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:55:31 2025 by rpki-client