Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/3f46fd98-d9f0-37be-a70b-3ee8def1bf2d.roa
File:                     3f46fd98-d9f0-37be-a70b-3ee8def1bf2d.roa (raw, json)
Hash identifier:          HT13Lz3G3U/d01g7x2rFKNgLjw7KXihOVAsYarMxHDQ=
Subject key identifier:   0E:06:6B:F7:CB:64:61:1C:FA:A9:4E:C0:4C:14:83:55:A3:08:FD:C2
Certificate issuer:       /CN=f78a234f-9553-446a-965d-0bfffa402f1b
Certificate serial:       010D0C9F4328584AD3A11649A04325DC05397480
Authority key identifier: C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/3f46fd98-d9f0-37be-a70b-3ee8def1bf2d.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     22925
IP address blocks:        216.59.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:16:49:a0:43:25:dc:05:39:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78a234f-9553-446a-965d-0bfffa402f1b
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=ceb3e54d-68aa-4a5a-a1e5-ead0cb9f85a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e9:69:17:74:7e:7b:a9:8e:e7:a9:a8:7b:03:
                    b2:61:92:bc:5c:a3:74:3c:49:ab:05:f3:85:83:28:
                    95:58:04:94:ee:b3:98:2e:b7:51:e8:66:dc:51:68:
                    b2:d7:1b:cc:f5:f4:7a:ab:1e:38:8a:62:78:cf:92:
                    65:67:61:46:7b:f9:dd:a0:5b:7d:69:fe:14:3c:53:
                    27:85:15:1c:da:49:b1:08:cd:80:f8:2c:bb:5e:1b:
                    26:fe:29:bd:07:ea:eb:7d:00:00:73:6b:5c:02:6b:
                    97:bf:77:2d:05:31:68:af:f3:08:05:c8:91:88:e5:
                    c2:34:2a:3a:b9:9c:3b:d3:a5:bb:a3:5c:c0:e3:4c:
                    b2:9b:00:78:3e:f0:c2:cb:87:0e:e5:40:0c:1a:bc:
                    c9:3b:d9:fc:c8:04:28:67:7f:b6:7d:b1:e7:12:8f:
                    57:ad:bc:27:59:e4:96:31:3b:d0:44:56:2a:16:66:
                    7a:ea:d3:f2:be:f1:9a:cb:fd:8d:68:9f:0c:ba:81:
                    2b:6d:b1:cf:3e:db:11:6b:22:e0:34:9a:80:ae:2c:
                    8d:f6:1c:ea:b1:cb:c7:9f:9c:86:31:d5:36:75:51:
                    02:0c:7e:73:b2:91:c2:85:18:cf:8a:4a:27:d7:16:
                    66:2c:15:f6:29:70:7b:e1:5a:af:80:0f:b9:d4:2e:
                    ad:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:06:6B:F7:CB:64:61:1C:FA:A9:4E:C0:4C:14:83:55:A3:08:FD:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/3f46fd98-d9f0-37be-a70b-3ee8def1bf2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b/f78a234f-9553-446a-965d-0bfffa402f1b.crl

            X509v3 Authority Key Identifier:
                keyid:C9:22:F5:AC:BD:3B:ED:BC:CE:66:DE:78:24:E8:5A:3D:C9:0A:8E:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f78a234f-9553-446a-965d-0bfffa402f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:a0:cd:e9:81:79:57:60:01:11:18:3a:96:03:1e:96:40:c3:
         69:a2:26:8f:a5:3c:bb:93:eb:03:3b:b5:72:91:b1:dd:59:b2:
         a4:0f:d2:3c:99:7e:af:4b:f3:98:24:93:19:47:f1:56:a5:4d:
         72:56:b3:fb:5f:f7:74:d9:e0:14:ba:96:f9:0f:48:1c:87:ca:
         8f:9f:a9:7d:1d:95:05:49:d4:7a:28:ab:e4:e3:bb:5a:f8:45:
         84:c5:6b:4d:11:14:18:25:55:f8:a6:19:f8:0a:7d:98:fe:04:
         4b:f1:9c:ca:8e:b2:4e:50:c9:ca:66:7d:ec:72:34:72:8e:73:
         83:a4:6f:c1:dd:91:e8:75:8b:94:94:9f:9e:ac:21:ad:eb:e0:
         be:c7:a4:80:93:cd:45:10:22:e3:3e:bc:f7:58:f9:ac:1c:b1:
         95:73:39:dc:c2:ed:22:8b:0e:25:a2:9e:0b:de:a6:f2:e5:65:
         f6:b0:1a:86:93:70:33:0e:5f:b8:6a:d0:51:75:8c:54:3d:37:
         a9:4a:44:b9:f0:ce:f4:f2:ac:e4:19:36:b9:73:58:a4:95:9e:
         cb:45:32:ac:18:00:5f:b0:f0:78:a4:d9:56:23:fd:e8:fb:b9:
         ce:6e:d8:c0:9a:ff:22:8f:ec:b3:ad:47:ac:c1:8c:4e:e6:cc:
         df:0a:77:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 23:07:15 2025 by rpki-client