Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/277eb1c3-60b6-356f-8f50-4a218545ae52.roa
File:                     277eb1c3-60b6-356f-8f50-4a218545ae52.roa (raw, json)
Hash identifier:          /2tgICo1CmGauklD2f05LJ6wNpv8IOmg6NVM2hiI4Ag=
Subject key identifier:   45:F7:EB:85:E6:FF:E6:ED:22:EA:93:68:FC:D3:E7:09:A0:C8:60:67
Certificate issuer:       /CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
Certificate serial:       010D0C9F4328584B44B1B81F022F1DEEAC523C80
Authority key identifier: 7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/277eb1c3-60b6-356f-8f50-4a218545ae52.roa
Signing time:             Sun 21 Sep 2025 13:00:42 +0000
ROA not before:           Sun 21 Sep 2025 13:00:42 +0000
ROA not after:            Sat 20 Dec 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        208.70.136.0/24 maxlen: 24
                          208.70.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:44:b1:b8:1f:02:2f:1d:ee:ac:52:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213e5365-5be3-42f4-a3d1-7f74bb44df13
        Validity
            Not Before: Sep 21 13:00:42 2025 GMT
            Not After : Dec 20 14:00:42 2025 GMT
        Subject: CN=46a8971c-670a-4933-a009-964bfa14f865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f5:b4:a8:24:49:e2:1d:d9:78:25:56:2c:a0:
                    5c:7d:84:0a:3d:73:94:88:40:8b:3c:2c:39:cd:5a:
                    d5:d5:8e:e7:44:bf:62:a0:fe:58:0c:47:d0:a3:98:
                    a2:cf:b7:d4:99:03:7d:21:19:99:3d:23:50:61:a4:
                    f8:cc:9e:ef:a6:a8:1c:84:31:23:d5:d6:ef:49:50:
                    62:52:de:08:a2:d4:3f:13:1a:eb:d2:bb:c4:b3:f9:
                    76:91:d9:b3:31:e8:b1:36:90:d7:1e:dc:73:ee:c4:
                    e6:00:d3:21:e0:4f:ab:be:64:96:05:48:ca:89:c8:
                    e1:17:51:f6:f3:00:59:69:c7:a5:36:86:59:a9:d1:
                    83:2d:54:69:13:b3:5c:c9:67:00:37:2e:a5:a5:0e:
                    dd:3b:2c:9e:55:64:a2:cc:e1:5e:f9:0b:da:87:86:
                    c1:0c:7f:0c:9e:21:f0:03:d4:2e:28:6a:5c:a0:38:
                    ba:2c:fb:86:29:32:d8:9d:09:6f:3e:1a:55:94:21:
                    b8:9d:71:35:71:7b:0b:7d:d8:50:83:75:91:3e:3d:
                    42:50:ba:ba:3f:4c:ef:e1:81:62:d6:aa:23:36:98:
                    61:1d:7f:75:5e:0e:6c:a9:04:ec:00:0c:86:b1:37:
                    2f:0b:83:39:d0:a7:dc:b7:bd:22:19:23:99:4a:19:
                    d4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F7:EB:85:E6:FF:E6:ED:22:EA:93:68:FC:D3:E7:09:A0:C8:60:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/277eb1c3-60b6-356f-8f50-4a218545ae52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13/213e5365-5be3-42f4-a3d1-7f74bb44df13.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C1:C6:0D:0F:85:20:1F:B9:B4:4F:6C:D6:94:4C:4B:D1:88:FC:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/213e5365-5be3-42f4-a3d1-7f74bb44df13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.70.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:30:75:aa:af:b1:37:a1:2d:58:ff:0e:9f:3e:b0:3b:9f:ca:
         f3:6b:9a:34:f2:87:09:eb:21:d0:46:0b:58:c1:b5:2e:b7:4c:
         27:61:da:0b:34:0c:82:cb:24:39:8c:21:90:42:72:2b:2b:29:
         e5:99:96:06:80:51:fe:71:38:0a:66:b6:34:82:83:a4:c7:bc:
         79:4f:c7:a9:7d:7a:f1:4a:24:c2:3b:1a:87:16:89:a3:87:a7:
         08:24:27:18:24:aa:ae:dc:aa:42:e5:94:cb:f1:d5:61:db:64:
         54:ce:ef:a7:71:dd:c1:11:88:23:eb:bc:ae:18:9c:ae:34:0a:
         77:86:8d:c2:34:95:f4:74:c0:dc:ea:a5:05:4f:0b:f0:3b:c7:
         3c:05:ce:a8:86:ba:5d:16:97:ee:e1:6c:16:f9:fe:d3:40:65:
         42:43:63:4d:98:45:39:89:34:21:c8:7e:9c:5e:94:f3:aa:67:
         56:44:29:93:e6:f7:f5:7d:2d:53:f3:a5:6d:7d:55:8e:81:e9:
         95:77:11:74:f0:8f:e2:76:d9:5d:8e:5d:4c:4c:36:97:ce:93:
         51:7f:ed:fa:42:4f:f4:50:d6:c6:74:1e:49:3d:5a:24:01:f2:
         5f:72:cc:0e:86:60:5c:dd:fc:a8:b2:ff:0a:c0:af:f5:b0:bb:
         f2:6d:18:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:33:18 2025 by rpki-client