Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/51b519b5-04df-4fc1-a74c-71916cb8041b/888e9877-b1e4-32ee-9b1c-2332e28930b0.roa
File:                     888e9877-b1e4-32ee-9b1c-2332e28930b0.roa (raw, json)
Hash identifier:          p/FzqP8NavhnNv6HHlExucHW+wcPcaUXMVNIEb/cfAs=
Subject key identifier:   35:33:E1:13:B6:9C:EC:8E:B1:14:4A:3E:D9:54:C7:0F:F4:25:7D:FF
Certificate issuer:       /CN=51b519b5-04df-4fc1-a74c-71916cb8041b
Certificate serial:       010D0C9F4328584B609C8DDC283CA826B5C10680
Authority key identifier: 26:4D:3E:D1:56:36:D5:28:38:E0:26:F1:20:C6:05:8F:47:9E:6F:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/51b519b5-04df-4fc1-a74c-71916cb8041b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/51b519b5-04df-4fc1-a74c-71916cb8041b/888e9877-b1e4-32ee-9b1c-2332e28930b0.roa
Signing time:             Wed 01 Oct 2025 13:00:41 +0000
ROA not before:           Wed 01 Oct 2025 13:00:41 +0000
ROA not after:            Tue 30 Dec 2025 14:00:41 +0000
asID:                     54323
IP address blocks:        216.134.176.0/22 maxlen: 24
                          216.134.180.0/22 maxlen: 24
                          216.134.184.0/22 maxlen: 24
                          216.134.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/51b519b5-04df-4fc1-a74c-71916cb8041b/51b519b5-04df-4fc1-a74c-71916cb8041b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/51b519b5-04df-4fc1-a74c-71916cb8041b/51b519b5-04df-4fc1-a74c-71916cb8041b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/51b519b5-04df-4fc1-a74c-71916cb8041b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:9c:8d:dc:28:3c:a8:26:b5:c1:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51b519b5-04df-4fc1-a74c-71916cb8041b
        Validity
            Not Before: Oct  1 13:00:41 2025 GMT
            Not After : Dec 30 14:00:41 2025 GMT
        Subject: CN=cd36f19e-6f20-4d81-a966-f49d546ab907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b1:60:e0:00:7b:82:00:ef:52:40:da:9a:f2:
                    8e:b2:ff:66:af:7e:37:fb:6e:d1:71:ee:e1:49:6d:
                    76:f6:71:ef:d9:af:d4:ed:a9:4c:06:cf:d6:8e:21:
                    b7:bf:83:01:23:9a:56:2d:7f:88:60:59:43:74:14:
                    a6:ee:68:bc:48:5a:66:58:63:07:bd:23:64:81:bf:
                    c0:4c:7d:73:d1:78:c3:9a:85:15:19:a7:f1:cf:76:
                    eb:ec:16:76:0b:9d:11:b7:00:cf:06:ce:43:d9:b5:
                    2e:aa:0b:6b:56:c5:fb:ea:6e:07:83:20:36:50:e8:
                    b0:e5:5a:fa:79:3e:41:d2:95:a8:58:85:e7:ac:b1:
                    db:bc:1a:00:c3:89:f4:92:fa:93:de:47:38:20:38:
                    e6:25:19:b3:cf:f4:20:6e:3e:6b:c5:77:ed:37:29:
                    72:4c:c2:af:fe:e9:a2:e4:b0:1b:df:74:60:7f:a0:
                    36:89:36:4b:7d:95:69:d1:7e:00:0c:31:77:50:f7:
                    d9:bb:40:2e:57:12:a5:f0:a7:e2:c1:f8:f2:c1:b1:
                    58:34:02:64:51:6a:0a:2c:ae:02:f3:8f:00:78:c4:
                    4b:34:32:17:f3:1f:d3:11:0f:25:80:ce:66:37:32:
                    2e:55:31:d9:15:59:a1:fa:36:8d:38:44:a4:04:51:
                    19:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:33:E1:13:B6:9C:EC:8E:B1:14:4A:3E:D9:54:C7:0F:F4:25:7D:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/51b519b5-04df-4fc1-a74c-71916cb8041b/888e9877-b1e4-32ee-9b1c-2332e28930b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/51b519b5-04df-4fc1-a74c-71916cb8041b/51b519b5-04df-4fc1-a74c-71916cb8041b.crl

            X509v3 Authority Key Identifier:
                keyid:26:4D:3E:D1:56:36:D5:28:38:E0:26:F1:20:C6:05:8F:47:9E:6F:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/51b519b5-04df-4fc1-a74c-71916cb8041b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.134.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:d5:74:ee:77:a4:0e:14:c8:4e:17:b4:ab:20:9e:ed:71:f1:
         2e:81:8b:96:c4:39:a9:a4:4b:b9:da:3d:a8:25:a3:1d:cd:59:
         5d:8f:a2:74:db:47:83:b4:2e:9a:7f:f6:16:25:0c:06:f5:0c:
         97:b2:87:d8:24:a0:76:21:37:42:cb:89:44:48:1b:66:e0:ae:
         7d:44:10:4d:6b:44:65:d7:53:9d:e3:79:09:c5:a1:52:41:c9:
         04:64:60:60:ce:5d:e9:3a:e5:39:c7:1c:38:24:5c:74:79:ed:
         fc:1e:93:04:a8:e7:9c:a4:aa:ea:ee:c1:07:a9:a8:f3:1a:42:
         ce:dc:ce:37:22:36:bf:a8:f1:ad:79:b2:f2:e8:c8:fc:af:21:
         59:dd:6d:10:4a:d6:9c:31:1a:66:3a:d5:60:10:82:e7:19:17:
         7b:7c:46:64:b0:cc:ac:97:6a:d8:d8:94:73:22:a4:9b:d2:d2:
         68:ad:87:cf:00:83:47:60:8e:35:d0:77:61:6f:e9:b7:80:6b:
         b2:46:b6:56:12:14:55:cb:46:10:2e:7b:c3:20:f4:5f:da:db:
         8d:a7:df:d2:80:1b:59:9a:c7:9d:37:91:81:12:fc:dc:e1:69:
         10:d4:2c:45:70:0e:95:89:41:64:99:d5:4d:82:13:9c:cf:08:
         2e:62:39:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:27:00 2025 by rpki-client