Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/424a4b66-c0c2-3a0a-9530-9aca474b01a9.roa
File:                     424a4b66-c0c2-3a0a-9530-9aca474b01a9.roa (raw, json)
Hash identifier:          0fWWIJaZJ7+reRCbSFlJSaZJEVc+VQyTHM5HvgX+83E=
Subject key identifier:   CC:FD:3D:11:6F:D5:93:FF:C7:2C:DB:D2:55:DF:E4:EF:A3:48:A4:97
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F4328584AA85BB8CC9DAD11752B409540
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/424a4b66-c0c2-3a0a-9530-9aca474b01a9.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     393231
IP address blocks:        216.68.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 31 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:b8:cc:9d:ad:11:75:2b:40:95:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=f3f42375-7ca7-405a-9270-f0797d6c7206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5e:26:aa:af:1e:de:27:a0:ed:9a:77:91:b3:
                    65:1c:53:c6:64:81:8e:4b:9c:0d:4c:63:11:f4:86:
                    83:1a:03:6f:c2:1d:34:3c:77:d3:fd:48:25:2a:c8:
                    80:6d:6d:bd:2e:2d:85:dc:70:e7:07:04:73:8b:3e:
                    8d:63:e8:1e:16:3e:e8:5f:6d:b5:0f:31:a4:66:f4:
                    5c:84:84:92:5d:c7:3f:88:9e:ec:74:c6:6b:14:a3:
                    b6:00:3a:be:c9:91:c3:37:ea:3f:03:a0:83:ba:18:
                    5f:73:2b:3f:bb:2b:a0:53:cc:05:24:92:a7:c8:32:
                    7f:2a:62:6f:65:73:2c:4c:1a:34:4d:f2:b4:56:e6:
                    c1:0c:06:38:c5:5f:a3:34:7d:c8:66:d4:10:96:46:
                    92:ed:04:66:8e:d6:52:23:47:c9:0c:d7:10:35:f4:
                    9a:71:b5:18:44:7f:ad:57:66:c7:a4:7d:85:6a:09:
                    1d:47:d2:be:e2:0d:2a:98:1d:82:87:c5:2b:07:54:
                    8a:7c:62:62:45:e3:85:2c:31:ce:29:7a:10:4d:77:
                    b5:94:a6:ea:9a:6a:70:c6:6f:1f:63:00:a0:3e:aa:
                    e1:eb:af:25:01:4a:af:77:bd:e1:96:7a:75:03:8d:
                    1c:9b:52:11:5f:90:84:da:3f:fd:4b:33:2c:17:58:
                    cb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FD:3D:11:6F:D5:93:FF:C7:2C:DB:D2:55:DF:E4:EF:A3:48:A4:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/424a4b66-c0c2-3a0a-9530-9aca474b01a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.68.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:cd:69:24:c8:65:e0:b7:23:65:47:90:14:b9:21:33:80:30:
         7d:2a:1e:19:6a:a3:5a:10:45:90:c1:29:1b:86:b7:b3:20:bf:
         b2:a6:11:b6:56:bb:a4:4e:e7:cc:c0:42:2f:a9:91:6b:8b:de:
         0a:df:a0:bb:6e:b4:b1:d6:32:22:09:15:53:3b:db:f6:cd:12:
         6c:75:e8:97:fd:f4:6e:47:b1:df:ae:8b:73:60:0d:22:db:ce:
         e9:57:e4:b3:96:bb:35:2b:86:a6:af:4d:ca:66:ab:05:1b:c9:
         66:c1:c5:87:40:2f:d2:6a:84:11:a4:44:5b:71:f1:0c:c6:a0:
         ca:ee:9f:0e:e1:72:10:49:4c:54:48:83:fa:46:d3:0a:f0:ab:
         53:48:59:63:88:05:12:0c:fb:d7:d8:13:57:02:8c:64:2b:3a:
         9f:9d:c5:f8:65:fe:f1:86:27:23:db:e3:8a:c5:02:35:7f:66:
         86:b6:a0:fd:fc:f2:9e:0b:55:f0:d0:25:85:b0:69:a8:cf:4d:
         76:07:04:69:f7:34:72:8b:08:27:5b:81:63:ee:57:9b:16:c1:
         02:36:44:c5:54:e1:29:8b:d5:4c:80:53:d9:33:aa:16:f6:bc:
         12:b7:92:34:b4:cd:a3:e1:88:7f:4f:47:b0:6e:6f:0e:48:22:
         9b:f0:46:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 13:19:07 2025 by rpki-client