Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d8996fb7-cb02-3778-aba5-3987918169be.roa
File:                     d8996fb7-cb02-3778-aba5-3987918169be.roa (raw, json)
Hash identifier:          R9uQr9iCNGKxOmDWwu+XWzcMR0gXiH8ihAPdKgdGu0A=
Subject key identifier:   DE:3C:E3:04:F9:C6:90:E0:DF:19:97:B5:66:CA:42:1D:CC:10:84:4C
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584B3126ED2FCA605E7212FBD238
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d8996fb7-cb02-3778-aba5-3987918169be.roa
Signing time:             Sun 14 Sep 2025 13:00:42 +0000
ROA not before:           Sun 14 Sep 2025 13:00:42 +0000
ROA not after:            Sat 13 Dec 2025 14:00:42 +0000
asID:                     395075
IP address blocks:        216.113.68.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:31:26:ed:2f:ca:60:5e:72:12:fb:d2:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Sep 14 13:00:42 2025 GMT
            Not After : Dec 13 14:00:42 2025 GMT
        Subject: CN=20525bb3-1a5f-4351-be1e-11ba6b13ef61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:54:6a:05:5a:1b:7a:7f:73:7b:d6:12:09:15:
                    b0:58:33:4b:d9:f8:36:7c:cd:32:ea:1c:59:fa:e1:
                    59:22:38:ad:e0:bf:ad:77:da:28:61:20:2e:a1:99:
                    b1:f5:73:39:3d:5d:5a:dd:e8:42:1d:45:26:bf:c6:
                    22:64:6d:0e:75:8e:44:5e:19:90:6e:76:9c:02:e1:
                    87:04:7d:55:c0:43:11:81:74:1c:4e:5e:ab:50:1b:
                    5b:a5:49:99:3d:5f:df:20:1b:c1:81:26:fc:ae:23:
                    e8:28:36:af:9b:c4:d2:74:da:14:06:c7:a4:7e:00:
                    f6:bb:38:84:52:3c:e2:2f:73:78:f2:b0:8a:bc:3e:
                    a3:57:dd:4c:d2:25:21:d6:98:76:f8:18:9f:b4:a6:
                    5f:58:b7:38:a3:01:ac:25:be:77:4e:36:48:73:43:
                    71:c0:05:48:b2:de:11:be:75:df:6a:a9:e3:79:27:
                    29:3d:0f:11:27:5a:3d:c9:8f:fb:85:e9:7b:bb:1a:
                    67:d8:a7:9f:6a:5c:a7:eb:10:82:39:1f:0c:74:b1:
                    ea:6e:8f:1d:ee:50:81:0d:99:05:c0:c2:99:98:d0:
                    78:ce:86:d3:07:4b:12:1a:bd:a1:5d:9c:3f:b6:62:
                    c7:e8:c9:0a:68:55:a6:ae:7e:5d:46:7f:76:26:97:
                    b3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3C:E3:04:F9:C6:90:E0:DF:19:97:B5:66:CA:42:1D:CC:10:84:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/d8996fb7-cb02-3778-aba5-3987918169be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.113.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:e7:f8:dc:c0:71:aa:be:ba:7d:e3:a0:be:ac:e9:22:41:3d:
         32:3f:8b:31:ae:50:81:70:10:63:be:85:6a:63:65:be:72:88:
         ab:20:45:6c:4c:b9:03:9c:7f:1c:0e:d1:b7:2d:a8:39:10:4b:
         2a:3b:40:d7:86:a7:27:29:68:8b:ea:66:e9:1a:46:e1:46:d5:
         d3:be:52:4e:1a:ab:31:4f:55:f6:6a:b9:cd:1c:51:f4:39:03:
         8c:0e:30:aa:2f:d4:24:59:1f:84:9f:b6:08:65:02:c5:2c:86:
         cd:c1:23:ff:94:33:ff:bd:69:db:bc:21:df:14:fd:32:a2:61:
         8d:79:86:22:4e:19:3c:83:35:c5:bd:41:f6:ba:37:27:28:3e:
         df:1e:12:05:8a:2b:b7:24:8a:f5:56:82:57:b1:d8:03:f1:1d:
         7e:5c:21:42:65:ce:7f:d4:19:eb:7b:d3:fa:35:e6:1f:5a:c4:
         b5:f1:49:f9:e1:b8:c5:bd:e8:4a:e1:54:ff:cb:f1:2b:42:e2:
         d3:36:dc:15:16:ab:b1:4e:40:12:23:cf:8b:12:34:3d:00:d6:
         e2:b3:82:95:97:39:d1:50:a0:ba:51:c8:65:6d:bb:e7:a9:3e:
         40:3c:09:b5:8d:a6:30:cb:a8:aa:ba:fb:ce:12:47:b8:fd:d0:
         14:1b:85:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:26:07 2025 by rpki-client