Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/5e61b1e9-0bc1-3f1b-8892-603a81e585eb.roa
File:                     5e61b1e9-0bc1-3f1b-8892-603a81e585eb.roa (raw, json)
Hash identifier:          L4x1dfe2OlTOEnGSKcOkDAg0/UYjdh/968LOkh8+2yI=
Subject key identifier:   2F:17:CA:02:2C:06:BB:0C:9B:FD:4F:9F:5E:A2:6A:D1:F6:2D:9F:7E
Certificate issuer:       /CN=3f607d23-8c92-4ffc-9c54-90418a4c4544
Certificate serial:       010D0C9F4328584AA85BBB113A2B2AF65D84D080
Authority key identifier: 69:38:CC:91:AF:7C:EB:E6:E4:1C:20:81:87:F1:6A:12:91:62:40:F1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/5e61b1e9-0bc1-3f1b-8892-603a81e585eb.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     10466
IP address blocks:        216.27.98.0/23 maxlen: 23
                          216.27.100.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/3f607d23-8c92-4ffc-9c54-90418a4c4544.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/3f607d23-8c92-4ffc-9c54-90418a4c4544.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:bb:11:3a:2b:2a:f6:5d:84:d0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f607d23-8c92-4ffc-9c54-90418a4c4544
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=b7e435ac-4ef4-4a9e-837c-6304404fa65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f8:bf:38:48:94:4a:4d:a5:6f:16:50:52:be:
                    2d:0b:f9:6f:5b:d8:22:bc:73:79:89:75:7f:26:80:
                    01:03:6f:cc:8b:b2:54:e5:4e:3f:f5:3d:e1:92:7c:
                    94:05:35:c2:78:ab:39:1c:b4:f9:ae:c9:be:0b:0e:
                    55:ab:7b:bd:66:b6:7e:d5:28:b2:07:49:26:75:a1:
                    a3:3d:5c:56:a1:9c:e1:59:ed:ac:32:a1:d9:3e:c3:
                    e9:7d:73:f5:cf:0d:43:68:00:a0:9b:b2:9c:7b:ab:
                    be:84:6f:01:61:d4:51:5e:7b:b7:0a:12:dd:4c:cd:
                    59:47:cc:f0:d5:05:a8:b5:5f:30:5f:74:db:71:c8:
                    41:2d:20:55:fc:b0:f0:24:df:e3:64:24:1b:19:6a:
                    6f:f3:36:00:6b:40:f3:dd:c9:25:c4:db:bd:ac:ca:
                    e2:61:0f:74:94:59:34:f1:f6:f9:ed:10:ba:4e:84:
                    c1:b7:b0:a4:17:16:4f:b7:23:37:25:6c:3a:66:a3:
                    fb:b9:47:fb:98:f2:e2:d7:ff:3d:53:c7:da:dc:70:
                    83:a9:56:5e:73:e7:b7:1d:ea:22:d1:9a:00:0e:e0:
                    a2:14:e2:30:b0:ec:ce:81:a1:52:a4:9d:aa:8f:5a:
                    63:a4:b7:24:43:d2:93:c0:46:56:34:2b:9c:e3:b5:
                    94:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:17:CA:02:2C:06:BB:0C:9B:FD:4F:9F:5E:A2:6A:D1:F6:2D:9F:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/5e61b1e9-0bc1-3f1b-8892-603a81e585eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544/3f607d23-8c92-4ffc-9c54-90418a4c4544.crl

            X509v3 Authority Key Identifier:
                keyid:69:38:CC:91:AF:7C:EB:E6:E4:1C:20:81:87:F1:6A:12:91:62:40:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f607d23-8c92-4ffc-9c54-90418a4c4544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.27.98.0-216.27.101.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:9d:11:15:4e:0f:09:09:6a:65:a5:9c:c7:40:ef:96:1e:d6:
         4c:ff:6b:49:a0:6c:26:6c:55:fd:39:8a:16:f7:4f:d8:82:45:
         f0:40:59:18:28:cc:a0:78:23:50:5f:1c:33:2a:14:05:f8:b6:
         e2:eb:59:13:04:ca:7b:8c:f9:e7:6f:6c:22:bb:41:76:a0:4e:
         33:31:80:f7:f2:f2:43:a8:9f:f9:97:52:d6:8b:f1:dd:fc:8e:
         30:2d:eb:63:c0:50:ed:6c:2e:b8:63:fd:32:fb:cb:e7:7b:e0:
         4e:91:56:95:00:b2:07:7b:6a:46:71:ca:90:8c:b7:77:74:21:
         7e:e1:fd:f6:ef:4c:cc:81:93:b2:1c:64:7e:d4:43:82:7f:d2:
         9c:de:50:ef:f6:a9:aa:97:1e:db:4e:72:35:20:06:b2:41:4b:
         d5:ba:20:40:c8:d3:f3:aa:46:7a:97:92:c0:61:54:cb:d8:0c:
         d8:d1:7a:6b:45:b3:f9:e8:20:47:46:e8:41:44:2c:b5:92:4b:
         7e:ad:32:18:ec:cc:80:47:a2:5d:e4:1c:33:18:70:36:43:61:
         a5:09:6d:16:fe:57:d4:42:7f:0e:af:96:64:a9:fe:ce:a9:b2:
         1a:6f:6a:b6:c0:da:c2:72:0d:97:1f:6e:6c:0f:1f:d7:56:bf:
         bf:6c:64:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 18:58:28 2025 by rpki-client