Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/2f9db8b6-b349-31af-ab46-3fc14a74825a.roa
File:                     2f9db8b6-b349-31af-ab46-3fc14a74825a.roa (raw, json)
Hash identifier:          hBMCsQ7EWQbGorPUirJUlwFK8lfHDLlAArtzUFdBcTg=
Subject key identifier:   92:2D:F1:DF:C9:A9:60:34:6C:6F:04:7C:9F:C6:FE:B1:B5:88:E0:FB
Certificate issuer:       /CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
Certificate serial:       010D0C9F4328584B9E3E5F7DA8B10432BBBB5180
Authority key identifier: 61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/2f9db8b6-b349-31af-ab46-3fc14a74825a.roa
Signing time:             Thu 23 Oct 2025 14:51:06 +0000
ROA not before:           Thu 23 Oct 2025 14:51:06 +0000
ROA not after:            Wed 21 Jan 2026 15:51:06 +0000
asID:                     394161
IP address blocks:        216.23.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Nov 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9e:3e:5f:7d:a8:b1:04:32:bb:bb:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
        Validity
            Not Before: Oct 23 14:51:06 2025 GMT
            Not After : Jan 21 15:51:06 2026 GMT
        Subject: CN=0c806db2-a73e-418a-886d-36550502c79a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6b:19:89:da:66:db:e6:23:56:a7:fb:4c:5d:
                    af:8f:7f:18:6d:42:95:4a:2a:89:11:fe:e1:7a:0e:
                    d5:d0:f6:92:e0:e8:33:75:51:52:8a:98:57:fd:c0:
                    5b:a6:a6:54:f9:3a:04:bf:61:e9:3e:94:1b:30:07:
                    27:93:a5:53:2a:dc:b8:3b:02:6c:e0:29:63:d7:21:
                    c1:b7:5b:46:6a:31:18:fc:d2:7f:8a:7a:9c:ee:30:
                    86:87:8f:f3:28:dd:21:68:fd:a1:0d:9a:64:50:42:
                    63:60:6b:6c:dd:74:1f:c6:17:c9:00:9b:e5:e8:23:
                    2e:16:01:c7:8f:6e:7f:0d:21:0f:ef:13:25:a4:c0:
                    a9:1f:71:dd:6b:06:40:38:60:72:5a:02:35:0f:b3:
                    97:18:76:63:e1:a9:50:d0:aa:1c:c5:0e:e0:c0:05:
                    1e:70:96:7e:31:e7:03:61:4b:e5:a1:be:f6:94:e2:
                    76:9f:d3:72:a2:b4:ab:07:5d:d8:50:97:cb:c4:0a:
                    74:8e:17:78:08:6a:21:a3:27:11:96:a9:2a:ef:64:
                    c9:58:fa:7d:9e:a2:de:7a:87:10:1e:a2:47:c9:19:
                    94:6a:af:ca:86:fb:52:60:4d:65:47:4e:63:bb:6d:
                    1a:29:bf:24:0c:ea:8e:95:9f:c8:79:c0:7a:55:66:
                    c7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2D:F1:DF:C9:A9:60:34:6C:6F:04:7C:9F:C6:FE:B1:B5:88:E0:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/2f9db8b6-b349-31af-ab46-3fc14a74825a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl

            X509v3 Authority Key Identifier:
                keyid:61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.23.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:4c:07:be:99:ec:88:80:8c:95:38:1a:fb:28:b4:5a:70:62:
         70:b4:ed:38:b8:1d:9c:c7:51:dd:40:18:69:6c:14:6b:54:88:
         e1:ca:41:b7:8e:c3:20:3f:8e:9b:e0:c7:68:28:f1:52:39:a6:
         35:02:79:85:41:90:00:b4:0a:11:e7:09:16:a9:0e:ea:9a:5b:
         e9:f8:87:b3:17:aa:6e:3e:3a:4d:89:c8:a2:16:23:91:f2:8d:
         0e:52:1b:25:02:c2:57:c2:25:4c:02:96:41:ce:53:d7:31:0e:
         69:a0:0d:e9:09:f1:ae:e9:d8:be:44:ff:11:fe:12:8d:9c:01:
         76:ec:82:f7:bf:bf:94:99:48:48:1a:f2:d3:30:9a:77:b1:ab:
         fd:b6:70:12:56:ab:1e:e1:2b:f9:20:1d:db:2e:22:8d:07:4f:
         06:c1:ec:a5:28:1f:f5:56:1e:80:07:8d:c4:e0:c1:16:73:ca:
         b8:e9:17:c7:d3:11:6a:a3:1c:15:3c:94:a1:79:eb:71:df:76:
         9a:1d:74:29:6c:17:5e:eb:dd:74:4b:fd:7a:92:53:f8:39:a6:
         15:ae:ee:b9:d8:94:b6:56:14:67:82:19:d6:96:b4:88:27:dc:
         ec:eb:08:c7:0f:88:8a:ce:df:8c:7b:ce:6b:0c:14:85:8f:35:
         b3:ef:06:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 14:53:26 2025 by rpki-client