Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/989513af-9113-348a-8d07-d2cf89c07f39.roa
File:                     989513af-9113-348a-8d07-d2cf89c07f39.roa (raw, json)
Hash identifier:          wCaRNsa5Nk7M/3tj9Q32DPPtCCX2M0L0Hj67JNv9bAE=
Subject key identifier:   00:4C:71:5F:2C:C0:F4:72:92:D9:12:77:7C:B3:F5:D2:CA:C5:C5:7A
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B79939423D96A58DD77B67380
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/989513af-9113-348a-8d07-d2cf89c07f39.roa
Signing time:             Fri 10 Oct 2025 11:37:52 +0000
ROA not before:           Fri 10 Oct 2025 11:37:52 +0000
ROA not after:            Thu 08 Jan 2026 12:37:52 +0000
asID:                     9304
IP address blocks:        216.132.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:93:94:23:d9:6a:58:dd:77:b6:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 10 11:37:52 2025 GMT
            Not After : Jan  8 12:37:52 2026 GMT
        Subject: CN=51d3b615-49eb-41b9-b3e0-9d8025bc4736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:12:97:cb:15:93:19:74:54:b5:56:db:86:42:
                    e9:cb:21:d7:7d:e8:bc:a0:cf:05:73:6d:39:03:eb:
                    59:8f:3f:77:d2:b6:b5:04:63:d6:32:8e:bb:96:01:
                    79:9f:ea:b9:ee:23:f8:71:8b:ee:68:0c:21:98:23:
                    77:a5:29:78:f7:35:4f:22:83:4e:4b:5d:cb:c9:8d:
                    45:e6:1e:e5:0b:65:14:95:a6:33:73:98:b9:76:df:
                    67:5b:7e:9d:3a:5b:47:6d:8b:b5:9e:cf:47:cc:7d:
                    0c:c0:4d:fb:e7:15:7b:6f:bc:bf:e4:bd:a5:9a:fd:
                    1d:2f:f5:a1:a7:32:7c:4c:e1:69:35:8e:3e:ce:4e:
                    fe:a8:34:92:cc:85:45:51:a0:b0:0b:10:6c:54:2f:
                    0b:26:db:09:d2:4a:8a:1b:f6:7f:cb:c8:fa:14:80:
                    00:7a:e7:37:57:87:0f:be:45:c4:8a:20:a3:bb:a9:
                    4e:4b:4e:7d:5f:b4:d9:87:cb:d8:73:5e:30:f8:49:
                    e1:a9:6b:1d:bd:35:2f:ee:33:c9:b4:84:22:56:1b:
                    a6:5f:0e:57:d4:c5:ed:f7:90:10:a2:e0:17:e1:4b:
                    23:32:2d:37:73:e9:57:35:f7:a1:65:34:5e:96:92:
                    40:2b:ea:ed:4e:09:c5:d3:5c:a5:db:23:9f:1a:51:
                    6c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4C:71:5F:2C:C0:F4:72:92:D9:12:77:7C:B3:F5:D2:CA:C5:C5:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/989513af-9113-348a-8d07-d2cf89c07f39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.132.81.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:c5:66:40:5c:99:96:7f:90:53:31:cd:15:28:56:2c:8e:92:
         81:f9:70:f8:47:66:af:e8:43:4c:4c:d2:53:2c:b7:eb:08:ee:
         93:32:7c:bb:ca:04:ef:59:c4:72:33:35:a6:5a:df:0a:78:82:
         90:82:93:5b:9c:9a:e4:3a:f4:f5:7a:7a:b2:01:1b:47:d6:43:
         a8:0f:bf:b6:6f:f4:ba:c0:4c:a4:08:7e:e6:ab:d0:ee:77:72:
         d3:b4:6b:6d:fc:bd:34:d5:13:14:9b:7e:53:b3:4e:f0:41:7e:
         1d:8b:a9:01:75:7e:4c:54:99:0a:c6:94:5b:41:41:48:a9:c2:
         38:71:d7:d4:10:03:89:42:af:03:55:2d:d4:53:7e:b2:a6:9e:
         92:99:ea:f4:02:b7:f6:bc:30:ec:84:86:bc:5e:7c:50:e6:0c:
         b6:c0:69:40:f8:ee:bd:4e:78:61:80:6e:61:1b:08:3a:f2:6c:
         13:4a:b2:f6:54:0b:42:1e:49:5d:ea:db:8c:df:ce:a7:86:03:
         59:83:1d:bf:04:fb:6e:d6:a5:0d:e4:51:6b:74:81:35:ab:db:
         0c:7e:49:a0:c4:bf:c4:99:80:b0:fb:f9:ee:a0:73:97:9d:12:
         fe:c6:11:da:2e:33:11:d9:1e:b6:c6:e6:10:57:c9:b1:48:32:
         a5:8f:ef:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:59:47 2025 by rpki-client