Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/c4e87534-7751-3a4d-8836-35767fa3a668.roa
File:                     c4e87534-7751-3a4d-8836-35767fa3a668.roa (raw, json)
Hash identifier:          QyK2itmRkTFJpqx5B57J8xAGhmSgykmCBOJAVk9CYG4=
Subject key identifier:   4C:C5:A8:76:6B:27:03:5C:3C:1B:A5:6A:A6:60:96:B0:B7:5C:A6:D8
Certificate issuer:       /CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
Certificate serial:       010D0C9F4328584B3D17BF445445D42562880F00
Authority key identifier: DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/c4e87534-7751-3a4d-8836-35767fa3a668.roa
Signing time:             Thu 18 Sep 2025 19:39:51 +0000
ROA not before:           Thu 18 Sep 2025 19:39:51 +0000
ROA not after:            Wed 17 Dec 2025 20:39:51 +0000
asID:                     11377
IP address blocks:        216.20.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:17:bf:44:54:45:d4:25:62:88:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4554e5fc-5f1a-4c73-9114-892ed5d050b8
        Validity
            Not Before: Sep 18 19:39:51 2025 GMT
            Not After : Dec 17 20:39:51 2025 GMT
        Subject: CN=c07a82a8-6815-49aa-963c-505dab4dd1e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cb:63:af:83:33:ad:4f:b4:a2:d5:f8:c1:84:
                    fd:4e:32:d8:e2:51:ef:5f:b0:42:5a:6d:e8:b8:d7:
                    e7:30:df:93:96:6a:ef:ce:41:cc:1d:cf:92:59:81:
                    0e:7a:e3:97:52:7c:4f:ea:0e:ba:6a:ee:67:a6:80:
                    ce:0e:c9:3b:9d:e3:40:bd:2f:78:d3:6a:35:a8:7a:
                    41:dc:1e:2c:54:a6:09:e7:b4:2c:a6:a7:40:19:87:
                    bc:64:9b:1b:a1:4f:f4:fa:e8:2b:b0:72:57:8c:6c:
                    45:45:5f:53:3c:c0:ea:db:a6:7b:d3:a3:70:9f:a0:
                    cf:8a:4a:51:e3:b0:b1:e3:45:77:38:dc:d6:13:b0:
                    10:d6:bf:5e:da:fe:39:38:f4:d0:bb:02:25:22:40:
                    bb:e9:dd:2f:81:c1:31:35:3f:33:18:94:bb:05:08:
                    36:97:18:02:c0:ab:7f:22:8f:10:c2:01:a2:1a:ce:
                    c3:db:d3:86:53:83:fb:31:50:d4:9c:ad:4f:d5:e8:
                    0d:ea:56:5a:8c:ba:74:02:87:4a:8f:0c:ef:4d:10:
                    64:92:23:12:ca:55:9e:ef:93:19:6c:7c:b1:59:84:
                    fe:09:d4:da:18:a8:a8:c5:74:5e:42:1e:b3:90:c5:
                    67:0c:b1:b2:16:ab:cf:9b:28:ac:46:0a:62:2c:05:
                    ac:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C5:A8:76:6B:27:03:5C:3C:1B:A5:6A:A6:60:96:B0:B7:5C:A6:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/c4e87534-7751-3a4d-8836-35767fa3a668.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8/4554e5fc-5f1a-4c73-9114-892ed5d050b8.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E4:04:5A:26:83:9B:CC:57:89:D1:B0:17:50:5E:B5:8B:DA:46:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4554e5fc-5f1a-4c73-9114-892ed5d050b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.20.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:d8:f1:20:2e:98:37:89:af:af:fa:1c:f5:60:f0:85:9c:ba:
         1c:c5:a7:7b:ea:75:37:b6:ba:44:9a:78:c0:23:dd:34:58:23:
         23:08:4d:84:b8:82:37:14:85:7a:50:35:31:d0:f7:92:5f:1f:
         a7:3d:25:0b:c3:a3:8b:6e:11:26:17:cf:5f:37:d6:06:91:92:
         85:42:ff:bb:2d:e3:bf:c5:ea:ee:80:21:04:e4:36:3e:ce:2c:
         34:94:b4:2c:87:86:ae:0b:9b:8b:77:b2:ec:f3:44:a0:0e:0a:
         1a:fd:99:3d:9b:dc:fc:2f:cd:06:4e:bb:29:6a:91:17:3b:f3:
         36:77:22:a1:08:e1:5b:11:0e:3a:f9:e0:c4:d9:a1:7e:03:b7:
         6c:18:46:ac:b2:d2:62:0c:71:78:ec:d2:74:70:89:ae:84:6d:
         a8:9b:7d:75:a4:05:a8:48:0b:da:b2:d5:33:d0:e0:15:54:02:
         fd:5f:89:ea:08:5c:97:bc:61:75:f9:c6:9a:eb:e1:a5:a6:10:
         91:63:21:24:2d:95:91:11:4f:a4:3f:ae:16:03:6f:08:0f:de:
         c0:fc:9c:65:45:80:ff:c4:25:45:30:c0:4c:b1:8d:b2:6b:09:
         47:9b:ed:80:16:c0:33:13:6a:85:9c:64:fa:80:c3:35:b0:8b:
         c3:fa:69:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:12:10 2025 by rpki-client