Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/f6f15528-f682-3246-ab0d-089e62b4ea94.roa
File:                     f6f15528-f682-3246-ab0d-089e62b4ea94.roa (raw, json)
Hash identifier:          aHbFD5H93877hTh/NVCe+pz+wjr0w4Peov4O7M6PD6U=
Subject key identifier:   66:37:B9:74:38:D8:7C:E1:6E:03:DD:AF:61:E7:00:D1:FE:72:81:12
Certificate issuer:       /CN=16ef9480-24de-4ac2-bd6e-b8d3d5320b5d
Certificate serial:       010D0C9F4328584B1806C58546CB669F77E7BB40
Authority key identifier: 9E:40:FB:15:1B:25:50:97:6E:71:50:4B:D8:A5:E9:6A:9E:5E:9D:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/f6f15528-f682-3246-ab0d-089e62b4ea94.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     46253
IP address blocks:        208.94.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:c5:85:46:cb:66:9f:77:e7:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16ef9480-24de-4ac2-bd6e-b8d3d5320b5d
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=684acb2e-a814-43cd-a51c-3a537a08112d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:58:96:12:2d:df:7e:6d:2c:d1:c0:29:28:ae:
                    26:bb:63:8b:90:1e:9a:94:12:3d:71:5c:6f:b8:33:
                    5d:8b:a2:98:3f:02:fd:f4:3d:ee:f9:c6:80:cb:cf:
                    ac:0d:20:60:3d:73:80:5d:fd:52:71:67:ad:a6:96:
                    47:92:ad:f9:59:17:2d:e9:72:ef:46:d1:9b:57:e3:
                    13:da:85:9c:72:95:4b:6d:f5:cc:ea:a2:37:c9:91:
                    37:c2:7f:09:72:40:f7:e9:29:ad:d7:76:d4:6b:ae:
                    7f:75:68:4b:d3:94:65:fa:9a:fc:b3:6e:18:88:6b:
                    dd:8b:10:29:c5:3a:4b:9d:0c:4d:88:e2:96:ff:26:
                    00:dd:25:aa:27:25:54:db:35:a3:48:ca:67:5c:24:
                    e3:15:d2:40:ae:7c:b1:49:c7:85:7a:88:6f:27:f3:
                    c9:69:57:9a:87:17:46:37:be:b2:ed:8f:5b:84:e9:
                    3f:49:b7:a5:df:dd:bf:d2:f5:1d:7f:a8:88:7f:77:
                    fd:03:97:74:82:ab:4c:fe:d5:2d:27:ab:73:01:55:
                    4c:03:20:f7:3b:5f:32:8e:11:95:86:61:1c:e6:9d:
                    ce:3d:29:ef:7b:13:d9:59:b9:37:ed:d9:5a:31:1f:
                    c7:eb:49:0d:54:f5:ae:a8:2b:2f:77:c2:8e:44:da:
                    79:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:37:B9:74:38:D8:7C:E1:6E:03:DD:AF:61:E7:00:D1:FE:72:81:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/f6f15528-f682-3246-ab0d-089e62b4ea94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.crl

            X509v3 Authority Key Identifier:
                keyid:9E:40:FB:15:1B:25:50:97:6E:71:50:4B:D8:A5:E9:6A:9E:5E:9D:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:92:29:91:35:3f:01:89:0e:52:fe:a4:d8:c3:ee:e8:93:f6:
         03:3e:b6:bc:63:4a:9a:21:d1:84:4a:a0:4a:7a:46:b6:47:bd:
         5d:11:60:0f:62:f7:d0:c5:41:bb:f9:41:47:d0:3d:e3:99:06:
         1c:79:14:3e:dc:a5:1b:c9:cd:92:b6:75:96:6b:93:bd:c5:55:
         c1:4d:b9:8b:1b:4b:8f:80:39:47:07:a3:5b:5e:68:89:7e:57:
         2e:81:c8:4b:92:95:5a:07:3a:be:e0:a2:88:9d:3d:bd:21:f3:
         d5:2f:6f:0c:2d:6b:ac:5c:6d:cd:9a:45:b9:75:1f:08:fd:15:
         e9:44:4a:ef:8b:c3:9f:23:0c:b5:c3:77:a7:44:49:bb:15:a5:
         cd:f4:db:0d:c2:b3:ff:81:e7:9b:95:61:bd:6a:da:fe:d0:d9:
         b2:84:2c:0c:83:e3:04:6d:71:de:58:b0:52:05:59:3e:76:d4:
         65:f7:e4:4e:9d:cc:b6:6c:59:96:cd:c9:d5:e4:c2:69:4d:10:
         f1:58:4b:a8:df:11:c3:63:55:60:f7:31:c5:ef:7c:ef:3b:5b:
         8e:c0:a5:c8:a4:1a:6c:3d:1a:56:db:8c:18:87:a5:11:26:47:
         05:b3:49:e6:ab:02:9d:70:2b:b1:e5:8a:57:35:d5:98:c8:cd:
         33:2d:13:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:15:42 2025 by rpki-client