Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/9e7d2dcc-6e4a-3aec-8b0f-14d0a72835ed.roa
File:                     9e7d2dcc-6e4a-3aec-8b0f-14d0a72835ed.roa (raw, json)
Hash identifier:          K+gX/lOApFFf8Nl2yxd+wcX8e2QMK+RjdJNIVWp78Xk=
Subject key identifier:   33:C7:97:CF:C1:44:2F:97:9A:3C:F7:B6:4C:A2:2A:38:F0:59:B7:82
Certificate issuer:       /CN=d91f505a-0b78-4bc4-a857-f86d34163202
Certificate serial:       010D0C9F4328584B2E5C4AF7554A57AF642B17A8
Authority key identifier: B4:AB:B9:C6:85:42:EB:2D:83:E8:01:5B:2F:4A:89:ED:EB:A7:19:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/9e7d2dcc-6e4a-3aec-8b0f-14d0a72835ed.roa
Signing time:             Sat 13 Sep 2025 13:00:41 +0000
ROA not before:           Sat 13 Sep 2025 13:00:41 +0000
ROA not after:            Fri 12 Dec 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        216.211.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/d91f505a-0b78-4bc4-a857-f86d34163202.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/d91f505a-0b78-4bc4-a857-f86d34163202.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2e:5c:4a:f7:55:4a:57:af:64:2b:17:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d91f505a-0b78-4bc4-a857-f86d34163202
        Validity
            Not Before: Sep 13 13:00:41 2025 GMT
            Not After : Dec 12 14:00:41 2025 GMT
        Subject: CN=21ffc605-f8af-4e82-90f3-012c0326e527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dd:5d:04:0d:c5:c8:f9:a5:10:a8:20:46:81:
                    33:49:e4:c9:5f:b4:10:18:32:fe:2c:a3:d9:fb:b7:
                    b5:06:83:80:a7:7a:9b:e5:e1:a6:67:5a:ce:d2:80:
                    be:a1:5d:c4:79:4a:6e:b6:c6:76:59:3d:53:01:0c:
                    f7:54:70:eb:e7:e0:9a:f2:65:b3:6c:97:9a:5b:de:
                    e2:6f:5d:32:1a:ed:ee:08:34:a2:9a:dd:48:aa:1b:
                    63:b7:2b:61:de:e4:21:19:d1:2b:56:e9:44:45:1c:
                    03:fb:fd:6a:79:d7:02:b9:d7:5b:b3:bb:e2:e9:61:
                    30:a9:cf:fd:6c:81:29:fe:40:17:63:7c:3c:34:78:
                    bc:8e:28:a7:73:85:b2:3c:89:dc:71:1c:e9:43:85:
                    8c:ab:0a:93:28:9c:5a:69:0c:b2:5d:53:2d:6c:25:
                    78:90:d5:0f:fc:18:b4:a2:5c:00:4f:84:aa:98:0a:
                    8a:44:82:86:b2:aa:bf:a9:f1:b4:db:6b:c7:dd:d3:
                    ec:61:a8:ec:88:13:9e:97:f6:50:15:a6:c9:05:2e:
                    d4:35:01:6d:1a:0a:58:29:08:8a:14:31:56:7f:5b:
                    64:30:f2:5e:9c:d0:36:cc:4a:21:27:88:8d:dd:1d:
                    ee:68:d6:48:82:e4:49:40:78:b8:e1:59:73:a6:b9:
                    1e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C7:97:CF:C1:44:2F:97:9A:3C:F7:B6:4C:A2:2A:38:F0:59:B7:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/9e7d2dcc-6e4a-3aec-8b0f-14d0a72835ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202/d91f505a-0b78-4bc4-a857-f86d34163202.crl

            X509v3 Authority Key Identifier:
                keyid:B4:AB:B9:C6:85:42:EB:2D:83:E8:01:5B:2F:4A:89:ED:EB:A7:19:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d91f505a-0b78-4bc4-a857-f86d34163202.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.211.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:52:57:7f:8c:ca:90:28:3b:6b:76:d6:29:c4:f0:4b:7c:4f:
         b1:19:76:c1:ae:b3:b1:94:1f:dc:7c:60:ad:84:62:50:2a:29:
         fd:34:28:3d:03:6b:c7:71:71:eb:d2:79:c7:33:4b:26:b0:65:
         e0:74:d4:2f:2d:ff:62:e8:e2:b3:b3:18:b0:c1:77:0e:28:b0:
         c3:91:0a:c4:fa:1b:be:24:41:e3:4a:31:3b:6b:6d:4d:4f:f1:
         d6:43:21:b1:6e:da:89:62:9c:c9:32:2a:5e:22:e5:8c:a7:89:
         8d:af:95:2a:2d:94:97:30:fe:e5:7c:f3:69:ad:5d:70:fe:a4:
         a5:74:1c:7e:cd:1d:88:b7:25:c3:eb:87:ea:0d:9f:fe:4a:4f:
         a0:fd:3a:5f:e2:7b:17:f9:80:e7:9a:35:32:c6:d6:a8:2a:cb:
         4a:68:9e:3a:f3:31:0f:8f:5f:21:ec:1f:6d:43:18:75:af:0a:
         ca:7e:b3:d5:7e:e3:27:54:b7:3a:20:dd:bc:49:df:8e:d2:ea:
         8a:73:8f:20:35:18:b0:e6:9c:ea:48:82:f1:7d:ab:d1:5e:6b:
         c0:ef:ed:f7:af:a5:3f:82:f5:a4:6d:83:a1:2d:5e:46:31:02:
         66:a5:54:77:50:b5:55:e2:97:d9:f1:ad:1a:5c:f0:df:e7:af:
         32:88:35:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:12:19 2025 by rpki-client