Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa
File:                     0baf61e0-eead-323c-b72c-efaab2756610.roa (raw, json)
Hash identifier:          vwqWCBWHXclS2wSi4pkIbDYnWg3lJ6JsQzAdNUXPxlI=
Subject key identifier:   0C:87:B0:29:B9:3A:7F:C0:23:7C:A5:C7:48:24:BB:E5:2F:AA:ED:81
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F4328584B6631F7589178B7FC23FEDF80
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     16433
IP address blocks:        216.20.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:f7:58:91:78:b7:fc:23:fe:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=98e995f5-0c37-4a02-9125-c7cf381b4a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bf:50:e8:f5:df:f1:ca:87:51:45:05:2c:ae:
                    08:af:99:8c:ff:a7:28:b1:d0:53:a7:4b:15:25:cc:
                    3f:78:17:52:1f:e6:1f:68:40:a3:77:16:ec:d1:93:
                    34:59:0c:bc:c7:bf:3d:dd:09:de:dc:37:49:0f:ae:
                    40:85:bb:ea:d6:c9:97:ca:86:62:c3:6a:ae:e8:c5:
                    82:d3:89:29:db:6e:79:69:c5:ca:24:16:19:56:c9:
                    06:a5:82:2e:dc:ae:b6:2c:c0:fa:19:f9:c4:df:f6:
                    bc:6f:70:a7:66:9d:ba:e6:32:a5:dd:3d:1c:22:0f:
                    7e:57:cf:38:12:74:6f:7c:0f:3a:6a:53:99:fc:43:
                    4a:e2:a8:25:8b:d0:af:05:df:f6:cc:4a:fb:f7:78:
                    8b:6f:e3:59:b3:f0:52:c4:28:e3:a7:8e:c1:95:46:
                    35:19:db:fe:6b:db:99:93:6e:57:37:5f:1c:8a:dc:
                    db:09:e0:f4:5a:c1:9a:08:b7:7c:48:b7:2c:91:65:
                    43:9b:fd:4b:11:b1:bf:31:a0:18:1b:16:c2:51:1b:
                    20:7c:be:52:db:d6:15:c8:38:00:59:07:83:45:6a:
                    22:7c:39:4b:6b:45:3d:af:98:b1:06:7e:ad:e0:1e:
                    4a:62:6b:ce:14:0f:f3:6c:74:83:08:5a:5b:0c:6b:
                    b4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:87:B0:29:B9:3A:7F:C0:23:7C:A5:C7:48:24:BB:E5:2F:AA:ED:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/0baf61e0-eead-323c-b72c-efaab2756610.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.20.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:b5:43:08:d5:dc:8a:1d:44:95:c2:60:37:c9:cc:ef:bf:78:
         ef:c4:ce:c3:b5:de:ad:c8:08:c3:50:9e:1b:9e:5c:70:27:ac:
         e9:9e:8e:e0:11:48:c0:75:c9:d6:5e:ae:2a:46:4a:d6:bd:97:
         8a:94:c8:b4:a0:b1:8c:63:61:46:8f:66:c9:eb:2d:9d:ff:5f:
         47:4d:07:08:82:72:23:b1:c3:a2:b9:82:e1:76:51:24:9c:59:
         08:6a:60:07:22:80:ba:c1:74:96:61:24:cc:97:41:e9:c1:49:
         75:56:8d:76:f8:59:ab:21:f0:49:27:fa:c1:57:13:2a:5e:ec:
         06:90:fb:91:19:4b:58:e0:72:15:96:85:0c:95:6c:52:d2:44:
         3e:1f:4a:50:9f:64:9f:5a:fd:59:29:d0:23:b9:8a:14:3a:5e:
         e5:17:5f:7c:33:14:f5:42:9f:37:36:93:89:ab:64:9d:83:b1:
         80:e6:c3:23:46:86:47:b4:20:1e:0d:3a:be:a6:55:dc:7f:12:
         17:fc:d7:ec:c8:a6:3b:7d:e9:ec:50:bc:8a:38:d0:1b:e1:03:
         69:41:b3:ad:80:82:32:cd:d2:ce:7d:f9:a4:ed:64:db:f0:6d:
         da:b0:b7:00:db:31:25:d9:93:0f:a0:5d:be:ee:49:a6:82:6c:
         de:c4:2e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 01:02:57 2025 by rpki-client