Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9e3ce93b-3de2-32ad-a590-311eb96ebb20.roa
File:                     9e3ce93b-3de2-32ad-a590-311eb96ebb20.roa (raw, json)
Hash identifier:          8o1qqJN4VaaQKhKqL3Zbld1VUle6xUJyNZAJKppTeUY=
Subject key identifier:   B9:04:6A:19:55:C4:F3:8A:86:DB:D8:DB:19:B5:FD:2D:63:90:65:A1
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B36BC47E1AE115BEC5D7E3980
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9e3ce93b-3de2-32ad-a590-311eb96ebb20.roa
Signing time:             Tue 16 Sep 2025 13:00:41 +0000
ROA not before:           Tue 16 Sep 2025 13:00:41 +0000
ROA not after:            Mon 15 Dec 2025 14:00:41 +0000
asID:                     23473
IP address blocks:        216.171.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:bc:47:e1:ae:11:5b:ec:5d:7e:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 16 13:00:41 2025 GMT
            Not After : Dec 15 14:00:41 2025 GMT
        Subject: CN=820dd0c6-f8a0-49fc-9c0e-8e7100bb2bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cf:43:0c:54:d1:18:96:f3:99:45:f0:3b:1a:
                    18:64:c2:95:40:fe:29:9b:fa:c4:3d:91:d1:8f:d3:
                    c0:aa:a7:e3:0c:89:8a:70:47:d5:4e:9d:f0:b1:ae:
                    93:53:ce:12:b9:5e:a6:58:95:93:7c:f7:d6:f1:e6:
                    68:4f:50:d8:03:36:d6:48:a7:0d:c6:8f:67:7b:90:
                    1b:c6:e5:f2:b0:30:fd:c9:1a:3c:d5:04:e9:bf:2d:
                    ce:7c:5a:b8:b9:cf:ce:e5:0d:1d:e5:08:b1:3f:26:
                    03:2f:a3:dd:05:a8:14:e3:67:2c:91:76:bb:39:a2:
                    4f:96:ed:a8:35:ff:78:64:e1:30:1f:83:a1:52:c6:
                    81:33:1a:85:35:9a:e4:a7:e6:be:fb:27:9a:cd:2f:
                    79:8e:0e:c6:49:1c:88:3e:49:7b:d2:f4:60:76:df:
                    6a:38:f5:86:f3:87:1f:bb:a6:fb:df:04:fa:61:57:
                    db:02:93:b4:d2:bf:a7:5e:3e:9a:ca:c5:cd:89:b1:
                    cf:9d:28:6b:09:e7:94:16:27:53:19:ed:6a:6c:f2:
                    80:68:15:56:d6:d3:89:88:5a:26:97:29:e3:d4:b3:
                    a0:87:bb:8a:2f:44:9a:3a:3e:e4:19:91:05:17:e6:
                    35:68:3d:f9:e8:63:05:3d:aa:17:89:ff:c6:60:fc:
                    7c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:04:6A:19:55:C4:F3:8A:86:DB:D8:DB:19:B5:FD:2D:63:90:65:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/9e3ce93b-3de2-32ad-a590-311eb96ebb20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.171.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:b3:d1:0c:8a:34:36:f2:01:64:7d:2b:2d:7c:59:d7:b6:58:
         89:57:22:43:4b:c1:fd:bf:41:a5:b7:6d:ca:2b:89:b2:da:64:
         a7:b1:74:3a:33:d9:5d:ff:c9:11:11:67:1f:72:fc:27:9c:ec:
         29:ea:ac:a8:59:60:23:13:10:be:8c:0a:9c:02:00:23:a1:1c:
         f5:e7:87:6e:4f:67:fd:86:20:6b:17:97:ca:62:f5:26:0d:a0:
         8f:37:ed:80:cf:70:b5:62:b8:e5:6c:fa:2d:59:0c:c8:ac:ea:
         89:75:0a:af:d4:f4:58:19:47:d4:6d:e5:a1:5c:3d:be:d3:b6:
         57:78:75:59:84:a8:ab:65:7d:5d:e5:4f:17:9e:6d:c9:22:72:
         69:3e:f9:64:9d:5a:b0:20:29:37:05:84:40:d3:08:19:a1:55:
         7a:58:53:26:e7:d0:a5:70:1e:65:84:2c:96:ce:e0:01:09:90:
         98:6d:66:d9:fc:18:45:26:1f:8a:4e:72:54:9b:53:01:3b:da:
         79:35:72:03:9c:e5:e1:85:b5:18:b0:57:66:2f:72:c1:e6:6b:
         b1:88:45:6f:68:1d:de:96:83:38:ba:f2:8a:25:e4:9f:90:46:
         c4:dd:30:37:36:40:2c:78:0a:0a:80:1e:41:eb:95:67:af:cf:
         d8:d9:a4:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:57:03 2025 by rpki-client