Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/da08dc59-eeac-3d2c-9062-732b60f711ce.roa
File:                     da08dc59-eeac-3d2c-9062-732b60f711ce.roa (raw, json)
Hash identifier:          oi5D9GUJ1XKLqR5r62LJPas7pzTdrK1C9HAFdKyKL+k=
Subject key identifier:   9F:63:78:31:CB:85:FD:E1:81:4F:55:3F:6B:5F:04:52:81:13:F2:21
Certificate issuer:       /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial:       010D0C9F4328584B0FECE607154BBE8AECA24F00
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/da08dc59-eeac-3d2c-9062-732b60f711ce.roa
Signing time:             Tue 02 Sep 2025 15:22:09 +0000
ROA not before:           Tue 02 Sep 2025 15:22:09 +0000
ROA not after:            Mon 01 Dec 2025 16:22:09 +0000
asID:                     396356
IP address blocks:        216.105.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:ec:e6:07:15:4b:be:8a:ec:a2:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
        Validity
            Not Before: Sep  2 15:22:09 2025 GMT
            Not After : Dec  1 16:22:09 2025 GMT
        Subject: CN=2bb958c1-3b2e-4bea-bc6d-283b28084e56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9f:59:e0:8b:e8:00:ed:16:a0:4b:6f:dc:a9:
                    aa:64:7e:d3:20:0b:80:2e:63:26:b1:33:93:b2:6c:
                    9f:86:dc:0a:f7:87:9a:d8:e5:6f:5c:89:3d:d7:71:
                    dc:51:04:6a:d2:ef:b5:58:c3:08:20:47:5c:a0:28:
                    4e:d5:85:97:b6:95:74:16:2c:e4:dc:5a:6e:9e:72:
                    a9:22:52:41:1d:7c:5c:59:b0:0c:ac:a5:c8:7c:34:
                    23:67:60:25:73:de:88:4c:fb:7a:96:4c:d3:77:87:
                    a6:61:0a:e5:33:38:c6:8d:e4:d2:9b:9e:4e:9f:fa:
                    bf:df:7a:d7:65:62:04:f7:22:95:dc:e4:46:b1:bc:
                    c3:cd:ee:3a:ce:08:25:8b:3f:5d:dc:84:25:c1:9f:
                    9c:1a:91:8a:22:21:ec:52:1e:f8:c8:ef:9f:5f:6d:
                    23:09:cc:7f:c2:1c:a1:64:c8:4e:57:cd:2b:08:d0:
                    49:9d:74:6d:14:3f:25:ba:b8:4b:49:07:1b:ba:b1:
                    9b:fd:5c:89:3c:ad:93:28:fb:0d:bd:7b:0c:0b:37:
                    5b:01:80:2a:d8:10:ec:c7:4f:16:d1:79:9c:99:c0:
                    5c:7e:0b:2c:5f:90:f8:92:d4:b3:00:fc:77:f6:34:
                    37:ef:42:f7:10:db:39:d4:4d:4e:04:6f:00:8b:2a:
                    ce:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:63:78:31:CB:85:FD:E1:81:4F:55:3F:6B:5F:04:52:81:13:F2:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/da08dc59-eeac-3d2c-9062-732b60f711ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.105.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:c7:9b:80:fe:82:f6:16:98:bd:58:65:c4:87:e6:27:6a:29:
         2c:c3:23:9d:e1:f6:b0:c6:7f:ec:fc:fe:58:33:2b:46:0b:fa:
         2e:97:c2:29:4c:2a:18:a4:38:a7:82:3e:be:21:01:b7:ee:80:
         1d:1d:1b:48:01:f6:f9:36:87:c1:71:71:2f:9b:40:5a:b6:f1:
         a3:c1:98:99:6e:0e:ae:8e:c8:41:44:1f:af:1f:1b:d0:4b:dc:
         3f:89:cc:98:69:bf:25:63:3c:7b:70:7f:08:71:e4:db:ae:1c:
         b4:26:13:b1:f8:c1:76:8a:92:76:21:54:14:be:ba:c6:5f:6b:
         50:bf:a9:3e:15:1a:b3:e1:97:d1:a6:4a:56:cd:09:36:90:94:
         11:22:5a:61:3e:d8:8b:b4:b3:91:61:aa:62:5a:ef:f9:4b:b8:
         29:71:65:fe:67:b1:4e:39:af:3b:c8:ee:c7:fd:c4:bc:20:a1:
         12:f2:a4:ff:47:84:c4:ed:1c:98:67:84:5f:4a:77:ac:03:8d:
         3e:5f:24:15:ea:0d:69:db:44:49:f0:62:41:97:fe:e2:65:f5:
         e1:77:e0:9e:f7:78:48:ea:cc:83:a7:9d:c4:e7:33:65:b1:05:
         49:e3:7d:da:21:2d:51:75:85:8b:7a:f2:ba:d5:c0:56:2f:af:
         01:72:f4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 22:59:36 2025 by rpki-client