Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/6d58a1d7-ccd8-3df5-8770-939b25a6b67c.roa
File:                     6d58a1d7-ccd8-3df5-8770-939b25a6b67c.roa (raw, json)
Hash identifier:          qUO79vKEwVRXvgEUdEcJjvb8oBy2N0gtL8OqFnQl5Fs=
Subject key identifier:   F4:14:AE:B4:D2:ED:52:26:19:BD:E1:4B:A4:B7:17:50:96:BB:F4:D9
Certificate issuer:       /CN=ee195698-fb60-40ef-a454-85fcbf3381b9
Certificate serial:       010D0C9F4328584B0B76A218C47CA6B5A87E9A80
Authority key identifier: 3D:17:25:F1:DB:02:A8:AF:CC:73:D4:E1:BF:81:5A:F6:F9:8C:08:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/6d58a1d7-ccd8-3df5-8770-939b25a6b67c.roa
Signing time:             Mon 01 Sep 2025 01:00:33 +0000
ROA not before:           Mon 01 Sep 2025 01:00:33 +0000
ROA not after:            Sun 30 Nov 2025 02:00:33 +0000
asID:                     11607
IP address blocks:        137.216.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ee195698-fb60-40ef-a454-85fcbf3381b9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ee195698-fb60-40ef-a454-85fcbf3381b9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Oct 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0b:76:a2:18:c4:7c:a6:b5:a8:7e:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee195698-fb60-40ef-a454-85fcbf3381b9
        Validity
            Not Before: Sep  1 01:00:33 2025 GMT
            Not After : Nov 30 02:00:33 2025 GMT
        Subject: CN=54d785f1-470c-442f-a5f9-cff724a059fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:50:31:de:d6:1e:cc:4c:28:cd:09:8a:c5:01:
                    bc:79:96:9a:03:af:08:52:95:fd:b9:a1:16:27:81:
                    56:e3:d0:ec:b8:a6:88:f1:b3:d2:ce:f6:1e:28:9c:
                    74:ec:92:d3:7b:f7:ae:5d:86:f4:d3:b1:97:39:bb:
                    21:10:54:ea:72:e8:3e:de:1c:9c:04:1d:c4:03:66:
                    aa:9d:ac:ad:6b:f9:3b:0d:4a:cd:e8:15:86:de:96:
                    31:fe:91:ce:69:bd:10:11:29:c7:e7:c6:ad:44:aa:
                    48:7f:ae:cb:05:0a:cd:ef:01:08:79:c6:31:95:64:
                    61:97:5c:be:35:82:16:56:bb:ab:a9:13:c1:3b:f1:
                    a9:78:2a:ac:78:08:3e:5b:e0:db:a3:26:96:ad:20:
                    59:13:91:86:e3:a1:41:2f:cb:ac:c5:0a:43:fc:5d:
                    12:c8:05:1c:0c:14:61:c7:df:ea:a9:aa:80:e5:27:
                    8c:b4:79:94:e8:05:11:01:2d:34:db:54:fb:3e:0b:
                    8b:d0:bf:dc:ad:63:4e:15:63:da:b2:b2:c0:51:a0:
                    de:2d:3a:a7:53:cc:a3:5f:01:54:a6:26:38:88:56:
                    f3:b7:6d:08:dc:68:7e:d4:71:ef:a4:46:29:24:87:
                    2c:70:3a:db:d4:63:82:cf:05:f0:ad:78:d3:21:96:
                    a4:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:14:AE:B4:D2:ED:52:26:19:BD:E1:4B:A4:B7:17:50:96:BB:F4:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/6d58a1d7-ccd8-3df5-8770-939b25a6b67c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9/ee195698-fb60-40ef-a454-85fcbf3381b9.crl

            X509v3 Authority Key Identifier:
                keyid:3D:17:25:F1:DB:02:A8:AF:CC:73:D4:E1:BF:81:5A:F6:F9:8C:08:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ee195698-fb60-40ef-a454-85fcbf3381b9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.216.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:91:0a:6d:c3:36:d9:d0:3c:8f:ed:18:1d:ab:db:da:a0:17:
         2b:52:d6:b6:13:5f:7d:97:5a:0d:c8:3c:ed:86:b3:28:27:aa:
         00:b4:3e:03:1a:1f:67:8a:ca:d0:3f:55:88:43:18:ce:02:75:
         fe:c9:3f:0c:eb:d3:2b:3a:f5:b7:80:f0:58:1b:4e:e5:71:7a:
         3f:7b:72:06:e2:8b:20:a2:e3:8c:54:cb:76:48:eb:eb:43:bf:
         c3:06:63:e6:df:95:d1:bd:1f:11:ad:33:d8:72:80:55:d2:e3:
         96:be:f7:aa:ff:71:bb:94:8c:f9:08:13:b1:50:65:c3:92:83:
         bc:f7:44:da:9c:26:43:f0:82:69:1a:1c:e6:d2:48:44:81:62:
         de:89:6b:b8:2a:e3:67:6f:ef:d9:29:50:e8:97:2a:f4:63:85:
         a2:ee:19:82:a7:0c:79:91:f4:b5:d9:2e:e3:7a:48:b1:e3:27:
         15:41:40:09:a0:24:ed:55:57:a8:57:c4:ef:75:b2:d8:bd:d3:
         d5:46:60:4f:c1:f7:6b:c0:ff:b4:2f:5e:3d:9e:26:3e:21:d3:
         6f:91:c1:fc:37:06:ab:b4:cc:24:08:dc:4c:65:a6:a3:be:88:
         3b:a0:8b:f9:70:c6:df:ef:b1:0b:1c:11:c1:0f:23:0f:38:d4:
         70:30:60:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 17 11:36:42 2025 by rpki-client