Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/e93944a7-cc71-3959-a656-1507834cb57c.roa
File:                     e93944a7-cc71-3959-a656-1507834cb57c.roa (raw, json)
Hash identifier:          jZ3Albw9KSuKUq1BxFqSli8aslDgG+tFluQR2aCVBZY=
Subject key identifier:   F6:4D:89:FF:55:EB:F4:73:28:BE:BF:87:5E:40:BB:52:FD:25:EC:E5
Certificate issuer:       /CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
Certificate serial:       010D0C9F4328584B153C1E092A07AEB872D79900
Authority key identifier: D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/e93944a7-cc71-3959-a656-1507834cb57c.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     4540
IP address blocks:        69.51.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:1e:09:2a:07:ae:b8:72:d7:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8511b8dc-74ba-47e5-af4a-7c4e6b777d92
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=5e083ac2-8013-4219-a5f3-9cc8d1b01791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2e:aa:6c:75:23:6f:fc:fc:a6:8b:00:23:ec:
                    8a:89:e0:f5:74:6b:45:21:dd:7c:60:1b:5b:2a:d8:
                    14:dd:61:e3:14:71:59:47:55:fd:0d:a1:a7:f3:8f:
                    c0:a9:81:e0:f0:3b:10:ca:b5:fa:c1:a2:79:83:43:
                    f1:4e:d0:14:52:f6:41:c2:ca:28:ec:0b:10:61:36:
                    81:8a:49:06:7f:b5:cc:c5:5b:2a:f6:19:3b:c6:a5:
                    bd:64:1a:33:29:bb:a5:1f:d1:cd:51:cd:af:90:49:
                    b7:8f:18:ed:af:2d:1d:ca:ab:07:e8:5e:3b:a0:48:
                    59:82:78:e9:4a:e6:dc:69:0b:cc:4b:0b:1a:7a:20:
                    ba:45:73:3b:70:5a:ec:fe:55:d4:2e:21:b3:59:2b:
                    fd:b0:74:9b:f3:94:db:40:2e:6b:50:63:b5:d7:a8:
                    6e:db:0f:12:d4:e5:36:cb:a4:65:aa:70:c9:34:87:
                    2e:c0:65:29:fc:46:14:ed:7a:56:34:b0:db:bb:d9:
                    95:6d:23:34:a2:b5:5d:93:74:7c:54:18:2b:08:72:
                    0d:c5:20:18:95:c5:1c:48:ba:47:2e:09:45:d0:dd:
                    09:68:da:aa:aa:42:92:df:77:7a:1a:77:9c:e3:7b:
                    0f:98:8c:1d:9a:06:13:7f:9f:73:a9:07:c2:dd:9c:
                    ca:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:4D:89:FF:55:EB:F4:73:28:BE:BF:87:5E:40:BB:52:FD:25:EC:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/e93944a7-cc71-3959-a656-1507834cb57c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.crl

            X509v3 Authority Key Identifier:
                keyid:D7:F3:DF:A9:F7:40:F0:2B:51:D8:42:27:F2:DC:C2:E1:DF:60:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8511b8dc-74ba-47e5-af4a-7c4e6b777d92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.51.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:dd:b9:8b:fc:06:ce:ae:3d:0a:f8:80:46:86:5c:46:59:e8:
         45:c5:17:2f:32:61:18:b4:90:9a:01:fe:a8:74:81:42:3d:8a:
         fc:07:42:76:43:2b:0e:ed:b4:26:83:d6:64:56:d1:4b:81:9a:
         dc:cc:29:1a:d4:91:1b:d7:eb:5d:68:3a:a5:4f:38:7e:0e:42:
         58:d5:31:39:ba:74:9f:af:ed:a7:fc:ee:fd:07:7e:8c:4a:8d:
         8a:54:54:47:d2:44:1a:6e:4f:c4:b0:bb:ef:35:1e:03:03:b7:
         e2:a4:c4:36:ba:c5:02:bd:fa:0a:18:df:2f:07:c2:6e:3a:29:
         13:23:38:95:48:de:b4:cb:20:0f:ca:5b:f6:40:78:73:bf:ab:
         43:cc:25:fc:77:a7:18:28:51:9b:f0:34:6d:7c:3b:da:7c:6d:
         a7:4a:64:92:c8:0c:7e:db:5b:3f:e6:62:02:89:6d:ac:60:b7:
         35:4f:ff:4b:ef:4c:77:97:16:f1:24:29:20:38:15:4b:52:98:
         72:8f:74:99:dd:ad:1d:7e:6c:1c:a5:dd:0d:63:53:8a:fc:d5:
         85:e1:32:86:1e:83:3b:3f:99:5a:5b:83:5d:6b:c3:97:eb:d3:
         d9:8d:8e:2d:4f:f4:76:58:db:46:be:16:36:30:78:d8:59:54:
         13:37:96:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:33:11 2025 by rpki-client