Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/d0c29631-482b-382b-b214-497bb2a774cf.roa
File:                     d0c29631-482b-382b-b214-497bb2a774cf.roa (raw, json)
Hash identifier:          JYwb2sdgpeL+31LU1CJ6coOmSnZtqfb5oRPHYPaf6Xg=
Subject key identifier:   DF:02:61:3A:07:B4:DD:B9:03:EA:68:B4:42:F6:FF:59:39:BE:29:0F
Certificate issuer:       /CN=d27e1a94-34c3-4462-8f10-07b9ec5d8176
Certificate serial:       010D0C9F4328584B715CA7B441A076311EDBCC00
Authority key identifier: F3:53:03:D3:57:0E:31:CC:DD:F5:88:F3:83:5B:23:44:0A:F9:40:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/d0c29631-482b-382b-b214-497bb2a774cf.roa
Signing time:             Tue 07 Oct 2025 13:00:37 +0000
ROA not before:           Tue 07 Oct 2025 13:00:37 +0000
ROA not after:            Mon 05 Jan 2026 14:00:37 +0000
asID:                     14618
IP address blocks:        216.120.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/d27e1a94-34c3-4462-8f10-07b9ec5d8176.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/d27e1a94-34c3-4462-8f10-07b9ec5d8176.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:5c:a7:b4:41:a0:76:31:1e:db:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27e1a94-34c3-4462-8f10-07b9ec5d8176
        Validity
            Not Before: Oct  7 13:00:37 2025 GMT
            Not After : Jan  5 14:00:37 2026 GMT
        Subject: CN=4a9cb4d3-80c0-454d-b25b-34ae11cbd252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:aa:e8:a9:a0:fd:c7:17:2c:d9:89:a2:b1:4c:
                    37:77:df:f7:bb:a9:f9:d5:08:23:d7:79:61:c9:b6:
                    e8:16:1a:2f:12:73:4c:47:97:df:09:ff:e0:f7:c5:
                    9e:d3:7d:7a:fc:d7:18:ba:30:97:7f:92:61:6d:51:
                    78:fc:a6:b6:b0:0a:aa:ae:30:6e:9c:ff:c7:bc:35:
                    da:24:86:f9:30:42:9e:40:5d:81:c8:ae:46:08:58:
                    28:c3:12:80:bf:a9:21:cb:39:d3:ac:8f:d6:75:d1:
                    3b:ba:3e:bd:c7:e7:5b:d0:5e:7f:b6:54:ba:13:ff:
                    b9:cf:6f:06:57:72:67:30:4e:6b:ec:f1:41:1a:7b:
                    d1:aa:29:72:f1:cf:0a:e6:65:91:2d:8f:0d:7c:c5:
                    ff:14:67:bf:19:75:05:39:5f:28:ab:46:62:59:8e:
                    2c:c1:b2:bf:00:8e:d1:00:e9:64:6a:54:0c:cb:70:
                    d9:3c:3f:82:a6:b2:2a:41:e7:dd:f5:57:9a:16:5b:
                    45:e1:c0:23:2c:dd:8c:14:02:23:63:65:c3:df:86:
                    1a:a6:08:2e:12:44:21:6b:06:04:28:f9:2c:e4:ec:
                    49:3c:40:19:ff:a9:64:cf:46:b2:c7:b0:d4:0a:52:
                    a4:31:a3:70:4a:14:c6:0e:19:60:9b:ab:43:25:92:
                    ae:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:02:61:3A:07:B4:DD:B9:03:EA:68:B4:42:F6:FF:59:39:BE:29:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/d0c29631-482b-382b-b214-497bb2a774cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176/d27e1a94-34c3-4462-8f10-07b9ec5d8176.crl

            X509v3 Authority Key Identifier:
                keyid:F3:53:03:D3:57:0E:31:CC:DD:F5:88:F3:83:5B:23:44:0A:F9:40:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d27e1a94-34c3-4462-8f10-07b9ec5d8176.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:7d:f4:fe:a8:80:37:f1:2e:79:03:6f:e9:89:81:dd:f5:da:
         06:df:5c:ed:8a:84:51:20:7e:c1:c0:89:5c:66:7e:ac:ca:f8:
         82:00:9c:1d:43:cd:90:e8:0d:ca:93:1f:eb:1c:8a:07:a1:67:
         7f:69:9a:f9:c1:b7:a8:c7:b9:10:0a:b2:b3:ac:df:3f:87:6b:
         aa:1b:6f:ad:e7:e9:39:16:fc:43:90:6a:47:3c:21:67:d6:eb:
         50:5e:27:b6:4e:a6:67:4b:3d:96:1f:ba:13:10:6f:80:3d:74:
         a6:bb:e9:6a:d7:cc:83:f6:03:ef:b1:61:80:39:8f:81:0f:b7:
         56:be:07:34:0e:fa:1e:44:b7:2b:df:09:68:f6:2a:b9:0e:a8:
         7f:84:3f:d5:86:1b:01:d1:88:fd:92:90:77:5d:c3:81:1f:f9:
         50:2d:49:c6:c6:0b:64:2d:09:62:ba:86:7f:46:d7:59:6f:2f:
         c8:0a:4a:a9:2f:4f:b8:9c:ee:8e:da:ed:40:80:5f:64:71:c7:
         d7:a9:2d:2f:f3:0c:98:eb:06:34:c7:a2:57:66:c9:15:3a:de:
         58:26:82:52:bf:f9:49:39:15:1d:e7:81:49:19:6e:d7:ea:88:
         fe:49:a4:27:1e:81:d0:bc:31:e6:f6:a9:e7:04:3b:1e:c9:f4:
         0a:e1:43:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:33:50 2025 by rpki-client