Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa
File:                     2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa (raw, json)
Hash identifier:          dfDh+8ngdP5YXCKLmUlMvUvoIUbbLKhZEYFpuIw4Pec=
Subject key identifier:   30:09:71:BE:CD:8A:C8:A5:72:3C:06:AF:01:36:9C:BE:ED:CB:8F:12
Certificate issuer:       /CN=0c71d09c-b853-44b9-8b34-8d5283774a5a
Certificate serial:       010D0C9F4328584B328C40B585C69B3435AD8700
Authority key identifier: 32:3A:C9:26:DD:08:FC:97:E4:9D:F6:2A:A4:C0:C0:FA:26:AB:40:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa
Signing time:             Mon 15 Sep 2025 01:00:33 +0000
ROA not before:           Mon 15 Sep 2025 01:00:33 +0000
ROA not after:            Sun 14 Dec 2025 02:00:33 +0000
asID:                     14721
IP address blocks:        208.86.116.0/22 maxlen: 24
                          208.91.152.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:32:8c:40:b5:85:c6:9b:34:35:ad:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c71d09c-b853-44b9-8b34-8d5283774a5a
        Validity
            Not Before: Sep 15 01:00:33 2025 GMT
            Not After : Dec 14 02:00:33 2025 GMT
        Subject: CN=154139a6-eee9-4fbb-8c29-130b291a48fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3b:c2:06:70:0e:46:fe:c7:d8:06:9e:47:ad:
                    f5:fb:95:a8:a0:5d:6c:9b:1c:32:58:27:45:ad:b4:
                    7a:6b:14:8a:9b:7c:60:06:38:b6:99:cd:7e:43:a0:
                    eb:2e:62:f5:9c:5f:04:a9:62:2f:f2:fd:dc:33:ef:
                    a1:9b:06:5d:c2:fb:e2:06:6a:b8:d6:f2:b4:15:fc:
                    17:b1:e6:9d:44:cf:94:16:88:b4:02:62:a7:00:e3:
                    55:28:0d:e5:70:6e:78:d1:c2:71:54:5a:62:6e:19:
                    b0:5e:0b:f7:8b:b7:78:81:bb:e1:9c:61:04:32:59:
                    d4:72:11:d3:ef:06:29:f2:6b:84:bd:cf:ef:b9:b1:
                    b7:22:27:54:1a:a1:0f:5d:fd:ed:bf:b4:c8:e1:58:
                    a4:9a:9d:b1:9f:94:10:1c:6b:0d:dd:bf:93:8f:44:
                    de:30:4e:e8:4c:fc:6f:84:73:bf:ea:a9:e2:e3:bd:
                    d8:da:31:6a:f8:f9:46:c9:47:d7:59:b8:9a:9c:a4:
                    42:52:0b:6d:79:30:19:f2:e4:b1:00:a7:24:2f:20:
                    d8:d7:65:ca:55:b3:22:2c:47:f7:23:ba:76:11:a6:
                    88:66:f6:6d:e3:4c:91:98:2a:11:f9:cf:e4:f9:9a:
                    d7:48:34:b2:6f:3a:b3:f6:c0:df:91:d4:36:1c:1b:
                    0d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:09:71:BE:CD:8A:C8:A5:72:3C:06:AF:01:36:9C:BE:ED:CB:8F:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/2a2f059d-e181-33bf-8bbd-2c4a5d090892.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a/0c71d09c-b853-44b9-8b34-8d5283774a5a.crl

            X509v3 Authority Key Identifier:
                keyid:32:3A:C9:26:DD:08:FC:97:E4:9D:F6:2A:A4:C0:C0:FA:26:AB:40:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c71d09c-b853-44b9-8b34-8d5283774a5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.86.116.0/22
                  208.91.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:05:ed:7b:33:52:f8:95:6c:7c:53:2f:88:64:d0:29:68:8b:
         36:cd:57:c1:82:49:f6:5c:25:57:64:6a:84:fc:2b:e7:f6:37:
         93:d6:74:9e:a2:7c:ea:be:21:42:56:23:ff:17:6f:c1:98:2a:
         16:b8:aa:d9:12:29:17:59:9a:e7:94:5a:40:99:5f:10:7b:ee:
         b2:f5:6e:bd:49:ec:50:24:25:1d:f9:7c:9e:77:0c:eb:3c:da:
         3b:6b:3f:62:22:d5:90:84:7b:64:f2:1f:2e:fe:a4:ca:cb:9d:
         e0:2a:56:b1:45:9b:d1:49:ee:17:2d:db:ee:ac:bb:56:32:fd:
         1f:8a:4d:ce:4e:3e:e2:bf:c6:42:ae:e5:df:ee:3a:bc:33:1a:
         26:1b:0c:50:74:6c:59:3f:4e:8b:50:21:aa:59:35:7b:9e:fd:
         b5:ae:0e:47:96:26:9d:71:e8:0a:f3:8c:9f:b4:33:fa:21:6c:
         d9:e0:ee:8c:53:ef:2b:6c:5d:4b:d9:28:3d:37:f2:fc:30:e8:
         5d:4a:82:e9:93:32:58:a8:9d:5d:16:5e:70:5c:3e:bd:33:0e:
         3a:89:8c:9b:52:c2:a0:51:f0:45:56:74:86:7e:17:e3:f0:77:
         ad:c7:56:56:6e:1e:b5:be:9f:5c:23:15:c8:47:93:dd:69:4e:
         ad:ce:b8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:28:28 2025 by rpki-client