Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/79090c4e-ad0d-38e0-b5d6-6cafb539f3c4.roa
File:                     79090c4e-ad0d-38e0-b5d6-6cafb539f3c4.roa (raw, json)
Hash identifier:          SnKZnu3seSIDiG5Q27ebKIJuczbNVtpJCf5tnrYna8s=
Subject key identifier:   D4:83:D4:F5:F1:D9:1E:05:30:CD:D2:95:19:B6:60:E8:14:CC:20:66
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584AF52125A9DC6103FEE1D36100
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/79090c4e-ad0d-38e0-b5d6-6cafb539f3c4.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     10747
IP address blocks:        216.99.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:25:a9:dc:61:03:fe:e1:d3:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=615dc6c1-c000-4464-9fa0-3f394e267449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:29:16:71:5e:9f:f7:09:ba:94:11:4c:64:a1:
                    88:ca:f3:0f:c2:83:43:fc:82:c2:cc:1d:c1:19:a9:
                    1e:0e:c9:3e:a8:de:29:19:06:1c:2f:dd:7b:af:2d:
                    aa:bd:52:4b:f3:8b:15:dd:aa:b5:0b:00:6a:a9:98:
                    c3:68:30:37:4e:62:9c:06:0a:66:2f:95:89:dd:47:
                    a3:d7:ae:a1:81:75:b9:1b:64:09:6e:31:36:bb:2a:
                    c6:e1:53:bd:41:31:c0:ec:51:b2:ae:12:a4:b9:d4:
                    5c:01:71:08:05:2b:3b:6b:54:d3:df:13:c2:ca:f4:
                    19:39:5c:27:36:f9:30:f8:53:59:d0:8d:a8:01:3b:
                    6a:c7:72:2d:82:3c:5d:5d:7b:c7:18:1b:71:2b:62:
                    85:77:71:ab:76:55:ec:ff:ac:90:ca:0b:ff:82:3a:
                    6c:d5:76:39:6e:31:77:88:3b:8b:90:0f:3d:81:0f:
                    c5:27:28:84:4d:58:65:b4:67:e8:cf:b5:38:40:ef:
                    46:49:ac:cb:20:9d:a8:c7:23:18:61:df:15:bb:d6:
                    94:9a:eb:bc:4c:0d:57:02:68:f2:d1:1e:a6:81:a4:
                    12:37:f6:a3:8a:93:49:09:9a:38:6c:f3:ca:f6:26:
                    d2:13:60:3a:74:e1:f7:6b:e8:0b:d5:b7:d9:db:b0:
                    b7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:83:D4:F5:F1:D9:1E:05:30:CD:D2:95:19:B6:60:E8:14:CC:20:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/79090c4e-ad0d-38e0-b5d6-6cafb539f3c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.99.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:65:da:47:70:e9:75:44:e7:46:91:95:4c:f3:30:ca:5f:23:
         e3:00:17:72:54:37:78:29:a7:43:73:38:3f:36:be:2c:4b:54:
         0c:96:7e:b9:75:1f:f6:0a:71:f7:3b:8d:0f:3b:ec:c8:ec:20:
         08:85:0c:97:9b:41:ce:11:ec:0b:0e:70:5c:bc:2c:07:a4:1f:
         46:ea:04:f4:36:94:5b:18:37:dd:f1:45:cd:8a:ae:79:f1:77:
         cb:cf:a2:37:5c:ec:5e:bd:c5:f9:ad:5d:fb:c0:c4:7f:0a:d6:
         92:8c:fd:ac:a1:e6:15:85:ec:0f:e9:32:8b:52:d5:3b:03:c0:
         67:6f:05:31:64:b9:a1:00:0d:48:66:a7:b4:d5:52:0b:73:c4:
         a6:2d:5d:ed:ee:4d:e1:06:60:4d:7c:e2:de:f0:61:02:f0:f5:
         81:56:a1:f6:07:41:00:4b:1d:22:60:fe:08:fd:1a:28:4a:b8:
         3d:44:84:75:86:95:51:fa:ce:66:20:07:27:be:a3:4c:ce:71:
         b6:11:99:94:8f:eb:54:20:90:7b:b5:2e:3e:c5:b1:13:80:d4:
         e0:a3:4b:ba:86:11:0e:5f:3e:9b:43:b6:c6:5b:dd:5e:7e:e2:
         45:eb:e5:f2:d9:16:c7:e1:56:aa:c4:45:27:62:d1:96:29:11:
         9d:b0:9e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:08:04 2025 by rpki-client