Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/5b0ddb67-4290-3846-ac72-b1a3c945414a.roa
File:                     5b0ddb67-4290-3846-ac72-b1a3c945414a.roa (raw, json)
Hash identifier:          svWbW7YOSMZ2/DdjGqmCRc/SuPOPJxM3E64z/22TfNk=
Subject key identifier:   96:AF:1B:7A:E5:39:4F:14:69:C3:F4:BB:2D:72:65:C4:C2:22:66:20
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584AF951460425C2404E6BDA5AE0
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/5b0ddb67-4290-3846-ac72-b1a3c945414a.roa
Signing time:             Mon 25 Aug 2025 13:00:39 +0000
ROA not before:           Mon 25 Aug 2025 13:00:39 +0000
ROA not after:            Sun 23 Nov 2025 14:00:39 +0000
asID:                     26554
IP address blocks:        216.224.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:51:46:04:25:c2:40:4e:6b:da:5a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Aug 25 13:00:39 2025 GMT
            Not After : Nov 23 14:00:39 2025 GMT
        Subject: CN=36d3aa08-50f8-4fe0-9172-1a60a1ab41cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:36:2a:3c:d8:93:73:fc:20:cd:27:29:8a:69:
                    ec:e2:67:e6:a4:4f:2b:87:8e:3f:e0:72:46:2a:47:
                    7f:39:be:0d:25:82:d5:ba:fb:cc:b8:8a:af:4a:d9:
                    77:a5:c4:9e:fb:16:86:76:48:2d:9a:6f:cb:5a:81:
                    6d:84:ec:23:6a:47:7d:e6:ab:17:5b:69:8e:a2:76:
                    90:a0:00:21:41:88:19:0a:7e:40:f9:2b:ba:64:28:
                    39:f0:21:64:e8:c8:74:60:c8:0b:1e:ab:5d:48:3f:
                    d9:dc:84:45:75:b0:1e:b3:f9:dd:54:39:9d:4d:08:
                    8c:11:71:4b:7a:bb:6d:9f:fd:87:39:2b:8c:ba:4f:
                    ab:7f:44:48:d1:01:47:3e:46:af:ad:90:21:b2:47:
                    58:bf:c6:7b:09:c0:61:3a:85:54:0a:82:2f:7f:01:
                    cf:3c:78:7c:03:5f:ac:b5:3c:f1:08:d4:39:c4:0e:
                    b7:8b:e5:c5:4e:d3:39:f6:24:cd:13:c8:ae:62:61:
                    b3:9e:2b:9f:b8:10:c6:94:64:3b:fb:75:5f:7d:b3:
                    ac:14:06:df:c7:f5:df:23:d6:df:99:61:4b:d7:3f:
                    6c:b4:de:13:44:53:7f:09:28:cf:01:d9:d7:b6:bc:
                    c2:c9:c3:18:a6:18:4d:62:40:2e:0a:ef:06:3b:e5:
                    01:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AF:1B:7A:E5:39:4F:14:69:C3:F4:BB:2D:72:65:C4:C2:22:66:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/5b0ddb67-4290-3846-ac72-b1a3c945414a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.224.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ed:4b:9f:11:af:ce:73:b3:a0:86:1a:ce:bc:ef:2f:f8:80:
         4c:b9:1d:bd:cb:41:19:92:ef:04:08:14:06:fd:b1:ec:18:64:
         84:d3:32:0c:b4:d1:7d:35:e2:df:1e:be:b8:83:07:fe:f8:5b:
         32:7f:05:b2:49:aa:24:87:ba:21:94:b5:b3:1a:92:c3:50:26:
         56:19:7d:9b:6a:fb:8a:fa:35:c3:34:99:f7:9f:8d:34:ca:6b:
         03:57:8b:d9:40:95:09:4f:2a:ad:96:b9:8f:de:9e:65:1e:d1:
         c9:f9:c0:45:04:a5:e4:06:e8:77:1b:44:b9:fa:cf:40:53:87:
         0d:e2:99:fb:c7:5a:e1:eb:9b:78:4f:3c:e4:7b:c5:dc:11:cf:
         92:93:bf:e6:97:3f:d1:44:ea:7b:fc:65:8d:39:d2:99:33:18:
         2a:34:15:bf:15:16:28:b2:9e:02:88:bb:84:3f:90:4f:9b:42:
         e4:b0:06:5c:83:d1:56:a6:ce:c6:40:46:c6:d5:1f:4c:37:21:
         1e:60:0c:a0:93:2a:66:93:4d:1b:ba:b5:ce:f2:c5:a5:34:f5:
         3d:b3:b2:0a:8a:1c:3f:68:39:fb:26:b5:bf:30:9f:0c:38:e7:
         82:62:8b:1c:1f:04:f4:d3:24:8e:f7:b6:8d:e8:b3:4a:ea:38:
         23:2a:20:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 12:35:28 2025 by rpki-client