Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/1ba95d95-6816-3ab3-a550-406badf9fc5a.roa
File:                     1ba95d95-6816-3ab3-a550-406badf9fc5a.roa (raw, json)
Hash identifier:          yoETTilAp+0V1Mhwcbx0vlwgiNp9khY7M2YXvknDoz0=
Subject key identifier:   31:9D:55:FD:45:65:28:6A:4F:88:78:33:15:4B:32:D3:C3:AC:F1:60
Certificate issuer:       /CN=c15b8440-9734-4ec3-ad87-b3e0c47586dc
Certificate serial:       010D0C9F4328584B198C233B32074F4A98D2B420
Authority key identifier: FF:17:0B:AE:47:7C:44:66:95:8F:A1:ED:33:77:5D:AD:D2:67:8B:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/1ba95d95-6816-3ab3-a550-406badf9fc5a.roa
Signing time:             Sat 06 Sep 2025 02:05:16 +0000
ROA not before:           Sat 06 Sep 2025 02:05:16 +0000
ROA not after:            Fri 05 Dec 2025 03:05:16 +0000
asID:                     40676
IP address blocks:        207.231.104.0/24 maxlen: 24
                          207.231.105.0/24 maxlen: 24
                          2606:cc0:11::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/c15b8440-9734-4ec3-ad87-b3e0c47586dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/c15b8440-9734-4ec3-ad87-b3e0c47586dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:19:8c:23:3b:32:07:4f:4a:98:d2:b4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15b8440-9734-4ec3-ad87-b3e0c47586dc
        Validity
            Not Before: Sep  6 02:05:16 2025 GMT
            Not After : Dec  5 03:05:16 2025 GMT
        Subject: CN=e07f7ca5-b7ed-477b-a47a-3b5dcca0c650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:55:ea:ed:16:20:95:8e:33:fb:b7:3e:a3:3d:
                    1b:c0:7f:93:c5:88:ee:e6:3e:dd:a9:84:2e:85:9b:
                    b2:26:02:36:23:f8:0a:d0:13:0e:79:58:7c:5b:21:
                    41:14:82:81:e9:e6:83:9b:6f:23:98:09:69:a5:90:
                    29:b7:63:48:60:53:7f:e2:80:17:46:e1:55:d9:8a:
                    57:dd:3c:0b:5b:9b:4a:12:6a:ce:92:29:c1:77:95:
                    80:b9:13:9d:57:0f:4b:4a:54:c9:a0:95:2b:7e:c6:
                    b5:da:ab:22:5c:cd:0e:f3:23:56:2c:84:67:7c:32:
                    89:7f:71:08:03:4f:01:62:9d:58:b2:17:fc:98:f5:
                    fd:0c:3c:df:ae:9f:a9:c2:fe:14:43:73:bc:5b:3a:
                    06:ba:04:f8:92:9d:f2:83:63:f1:8e:b5:fd:cf:04:
                    57:2d:2c:47:fb:34:8a:0e:d7:75:7c:33:96:23:90:
                    e8:8f:a7:7a:69:80:be:d2:01:1f:08:52:90:3b:38:
                    51:c7:d5:ef:8d:6c:43:2f:24:11:51:3f:2a:73:d7:
                    b0:8d:dc:5c:bf:c6:a1:55:7d:a9:42:5f:f0:ce:44:
                    ad:2b:08:5c:eb:db:73:f0:81:f7:ca:21:93:81:21:
                    0e:c6:a4:ba:3a:3e:db:8e:e3:17:66:9e:b0:28:fa:
                    52:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:9D:55:FD:45:65:28:6A:4F:88:78:33:15:4B:32:D3:C3:AC:F1:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/1ba95d95-6816-3ab3-a550-406badf9fc5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc/c15b8440-9734-4ec3-ad87-b3e0c47586dc.crl

            X509v3 Authority Key Identifier:
                keyid:FF:17:0B:AE:47:7C:44:66:95:8F:A1:ED:33:77:5D:AD:D2:67:8B:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c15b8440-9734-4ec3-ad87-b3e0c47586dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.231.104.0/23
                IPv6:
                  2606:cc0:11::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:d4:dd:44:e2:04:e7:e3:1c:d5:22:fc:dc:92:d5:4c:b2:18:
         77:5c:4d:f5:e9:ee:58:0f:d2:4b:58:73:e0:a1:fd:dd:14:52:
         3f:ed:e2:73:d0:51:c5:37:36:48:4e:84:f9:56:16:47:65:af:
         00:81:27:ad:3c:b5:ca:2c:35:dc:de:fe:4d:ee:7b:79:75:11:
         52:03:d9:bb:02:d5:18:56:36:2c:40:83:ab:44:52:03:25:f9:
         f6:5a:3c:e7:a6:24:69:73:39:db:7e:9f:08:1c:ca:de:9d:7e:
         ca:03:45:92:b0:a4:fd:4f:9e:58:0e:0c:88:1e:5a:05:da:7d:
         9c:80:0a:72:e7:b1:ff:b0:37:a6:89:ee:65:c8:70:d1:43:cf:
         4b:6a:d3:fc:6e:0a:27:dd:24:09:71:a8:50:af:bf:08:15:99:
         b3:8d:5b:79:a7:2a:79:1c:7c:e0:5d:b7:97:f6:e6:fb:e0:28:
         47:e3:4c:aa:76:bb:6d:ca:38:48:28:1a:4c:3a:24:bb:f1:a1:
         87:79:f5:f8:2a:98:32:25:a3:e4:e7:ac:5a:6e:7d:b0:0d:56:
         dd:b6:36:44:42:7f:f4:a4:bd:d8:77:2b:e8:8a:e4:cc:00:c0:
         f9:a1:39:d7:45:25:f3:4e:d3:25:d4:fd:21:33:24:68:94:ab:
         39:21:24:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 00:49:21 2025 by rpki-client