Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/92e4e8f3-0c88-30d6-807c-816d3921a73f.roa
File:                     92e4e8f3-0c88-30d6-807c-816d3921a73f.roa (raw, json)
Hash identifier:          O4TZu78F+FGX8fuytMohFfHdu3X9JdnNQ7uFEuJKVec=
Subject key identifier:   98:2F:56:81:6F:1A:71:C6:B9:49:B1:30:45:D0:97:43:DE:D1:6E:F7
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F4328584ADECBBC26A32D1A853E360F00
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/92e4e8f3-0c88-30d6-807c-816d3921a73f.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     10430
IP address blocks:        216.210.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:bc:26:a3:2d:1a:85:3e:36:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=0f5da44c-9063-4e4c-8a4d-61aa82b78ad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:23:48:f7:5d:e9:d1:d9:1e:ee:ec:dd:79:e1:
                    e2:1a:33:11:0a:8b:9a:4a:d2:57:62:9b:32:ee:45:
                    ce:3b:d3:4f:83:07:28:ca:5b:1c:69:c3:10:fe:0c:
                    65:c8:18:56:5d:0b:12:17:02:8e:43:fe:16:e3:74:
                    e7:2b:25:44:41:2b:e4:45:a2:bb:16:53:53:45:28:
                    d9:67:dd:1b:c8:fe:f1:8d:0c:5f:68:fe:7a:bc:09:
                    f3:86:54:81:33:20:e0:90:3f:9a:d7:4a:68:fc:00:
                    64:43:a0:e8:3b:73:49:7b:64:69:9e:c3:76:f2:c0:
                    68:e4:81:97:03:4e:09:cb:42:fa:34:8a:40:1a:bf:
                    cd:dc:cf:60:2b:6a:da:a4:41:d5:c7:e0:07:be:7d:
                    98:76:49:ec:0c:e3:af:bf:46:a1:9a:28:31:fc:94:
                    cc:15:87:59:e0:13:3e:c5:ac:29:ec:44:87:b8:cd:
                    ee:39:ac:9a:73:f4:88:61:c4:ba:6e:42:f6:cf:0e:
                    d4:1c:78:60:6c:76:76:b7:9c:d2:c5:6d:52:d3:01:
                    b2:25:4a:23:21:51:13:68:63:02:a5:3c:cc:dd:a1:
                    9c:16:66:f6:72:cf:05:32:28:6e:62:6c:73:38:b7:
                    c4:4b:d1:25:ea:73:b2:ce:c6:15:f9:a9:1c:7e:b6:
                    24:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2F:56:81:6F:1A:71:C6:B9:49:B1:30:45:D0:97:43:DE:D1:6E:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/92e4e8f3-0c88-30d6-807c-816d3921a73f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.210.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:41:ea:62:b7:fa:cc:0b:19:34:20:89:4b:00:da:51:a1:c8:
         5a:82:fd:98:f3:9e:88:4d:7e:00:83:6f:a8:6c:bf:98:da:3e:
         61:c5:6e:af:2b:f2:23:5b:f5:b2:95:6c:7a:e7:b0:fe:b4:55:
         a5:86:28:6e:c0:27:86:e3:7d:6e:f7:94:6c:10:4e:45:c5:7c:
         a5:66:34:ab:a3:da:9a:85:6c:bf:e7:10:1a:a4:0d:79:2b:ce:
         37:82:d3:c5:eb:83:19:fc:06:ad:a3:32:21:da:98:0e:a3:14:
         dd:bc:dc:5a:2d:40:3d:ec:d6:78:bd:0d:80:06:7b:92:18:c3:
         3b:12:87:bc:44:01:96:ed:8b:69:c0:b7:6d:40:ea:e1:0a:2e:
         06:a1:57:f7:24:1a:d2:61:0f:14:67:52:f3:2d:50:54:58:75:
         96:1b:a8:d5:a5:01:45:99:8c:87:70:8a:e0:50:88:54:59:11:
         d0:c2:03:e5:0c:22:43:94:46:34:4f:ac:48:99:46:24:5f:9a:
         a2:26:db:ed:64:dd:21:7d:ed:71:b8:8c:2c:00:01:fe:87:9b:
         89:d3:1f:ab:a4:41:8e:52:09:f7:bb:ad:d7:ac:36:3d:9a:9c:
         74:08:b8:13:61:a5:97:46:4a:f4:ac:bb:6a:c6:6b:0a:c5:4a:
         46:24:55:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 00:52:41 2025 by rpki-client