Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/8bb765f5-2f2f-3c95-a33b-4630fea15bcf.roa
File:                     8bb765f5-2f2f-3c95-a33b-4630fea15bcf.roa (raw, json)
Hash identifier:          ZBohgeMhWNS/FSSaw8G1yBk3f7HnaTxLzVcKR7qPGYE=
Subject key identifier:   AA:80:9A:F4:6A:34:1F:B8:11:1A:08:EA:0F:B9:CD:06:60:90:D1:5F
Certificate issuer:       /CN=e175b8e9-bd62-4026-9a15-873e2b01713b
Certificate serial:       010D0C9F4328584B0CDC18ECEE7DFCCDD1194280
Authority key identifier: 2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/8bb765f5-2f2f-3c95-a33b-4630fea15bcf.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     3464
IP address blocks:        216.109.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:18:ec:ee:7d:fc:cd:d1:19:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e175b8e9-bd62-4026-9a15-873e2b01713b
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=f0200367-2d03-4f34-a604-214f3c5a72d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:44:8a:2a:7e:02:55:6a:da:e1:e5:00:c5:28:
                    6c:f8:e7:85:73:db:66:19:a3:7e:ff:c1:9e:e0:ec:
                    9a:ca:d0:40:30:57:c8:c4:34:25:d2:e6:e1:f6:38:
                    9c:3a:2c:1c:61:06:51:f8:d3:c5:83:9a:61:07:06:
                    6f:9d:3b:be:7f:93:04:9c:2b:38:30:de:54:ea:96:
                    9e:6b:80:b1:e8:f8:57:ef:f6:b0:18:a2:20:85:13:
                    12:47:da:40:ac:b9:ab:bf:5b:cf:ad:20:ca:77:49:
                    bd:21:8c:ff:97:09:96:67:31:62:bf:62:89:09:4e:
                    c5:ad:60:e6:14:88:46:d1:f4:aa:24:04:82:11:2b:
                    c0:e4:2b:6b:f4:89:48:72:88:0b:63:5a:7b:52:a1:
                    2d:d2:dd:29:1f:49:22:4f:f9:d3:9a:a6:04:cc:64:
                    3e:ec:10:a2:d6:2e:ad:aa:bb:2f:46:7f:ad:6b:a9:
                    0c:0e:d8:bc:f8:6d:6f:6f:c6:28:e2:d1:3d:1a:f9:
                    35:c5:06:af:97:2c:f7:f0:42:3a:12:f1:4f:30:72:
                    95:d3:eb:0e:90:78:89:e6:51:36:01:90:21:5d:c9:
                    74:da:9b:af:58:79:cf:b2:9e:06:da:07:0e:d3:0e:
                    b7:b8:2b:77:86:5a:5c:4a:04:69:ba:bc:b0:b8:8b:
                    99:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:80:9A:F4:6A:34:1F:B8:11:1A:08:EA:0F:B9:CD:06:60:90:D1:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/8bb765f5-2f2f-3c95-a33b-4630fea15bcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.crl

            X509v3 Authority Key Identifier:
                keyid:2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.109.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:14:7a:de:b2:2a:e6:e3:aa:b6:75:f7:1b:aa:3e:25:39:2f:
         d2:d0:bb:8e:b3:a1:00:90:a8:bf:92:39:43:c5:f0:c1:c7:4f:
         98:19:25:b5:35:4b:5f:26:b8:f7:fd:a9:46:9b:00:97:8c:32:
         ed:60:2a:bd:a8:4a:13:71:a9:df:85:99:85:98:ea:39:18:75:
         29:96:02:d2:fb:cc:c2:5d:eb:4a:4f:ed:7f:e0:e3:58:f2:59:
         38:63:d6:37:59:19:de:d1:58:99:2d:ea:b8:28:f2:43:75:b8:
         78:53:f1:53:47:32:32:71:51:d2:9f:7c:31:4f:32:0c:07:f6:
         64:f5:43:fc:f7:34:e3:ce:01:df:37:04:fe:74:46:f8:7e:a1:
         fb:d1:7d:fb:f1:05:7e:4a:4c:91:7d:12:d7:c6:13:8c:72:f1:
         f0:b2:58:ed:32:e0:73:85:8d:a1:7b:a9:6d:f6:fe:4c:00:ad:
         e3:b3:d2:30:17:ea:e1:d9:f1:de:79:a7:e8:71:72:4a:e6:37:
         ae:f9:53:d7:60:51:2a:81:75:1b:ce:e0:c9:4b:ae:6d:1a:b2:
         88:a2:eb:13:f8:a4:77:8b:78:3a:eb:84:f2:b8:b7:e0:f3:46:
         bd:1a:6d:e4:44:90:b2:97:ce:8a:3c:46:f9:33:d3:5e:d6:51:
         d7:73:f8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:55:00 2025 by rpki-client