Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/ae79e840-67a9-33d7-92ee-86fb9d248de9.roa
File:                     ae79e840-67a9-33d7-92ee-86fb9d248de9.roa (raw, json)
Hash identifier:          MyseIF9/ZOD3y8+7CzzmKB/uD/X4bP2H1ZTx1NGOP9s=
Subject key identifier:   16:5F:F5:9C:C3:B1:F2:FB:D2:15:2A:0E:8F:22:09:17:8E:92:84:AD
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584B0746C571FDAE34904E8C68C0
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/ae79e840-67a9-33d7-92ee-86fb9d248de9.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     36692
IP address blocks:        67.215.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:c5:71:fd:ae:34:90:4e:8c:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=6d2c6945-9abd-4553-8e36-2ff61144af80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8e:35:45:98:d8:c4:e8:1c:73:5b:fc:a5:b0:
                    5f:76:5b:13:a0:17:25:14:b4:d5:d6:29:ae:07:94:
                    a6:3a:c7:c8:be:66:0c:9b:e1:63:ce:7e:b8:23:ab:
                    3d:4f:a7:ac:ba:8a:9e:e6:6d:1d:9c:cb:6a:22:8d:
                    ad:1b:84:10:b3:57:99:62:93:25:da:64:da:92:e8:
                    82:77:02:0d:7c:58:68:bd:af:19:ce:1a:81:80:30:
                    d9:bc:2a:3e:62:cb:04:ae:a8:89:71:46:80:be:7d:
                    59:28:01:88:87:bd:8f:3d:90:53:c4:b5:4e:57:11:
                    51:1d:2a:36:86:e2:c5:11:a5:c7:93:3a:4c:99:ca:
                    d5:7f:ee:c0:22:2d:6b:9a:e0:8a:f1:a2:d1:ac:b1:
                    78:21:ba:44:da:fc:83:36:d6:98:02:1c:c8:4d:b3:
                    00:24:fa:3e:8b:a6:2d:a5:42:b8:5e:f2:1a:bc:c2:
                    b3:dc:2e:e1:64:5b:14:95:50:52:93:a1:a6:c3:c0:
                    ea:5c:36:61:b9:56:db:2b:2b:72:a4:b0:22:19:85:
                    45:ae:73:f0:2f:75:a5:d3:59:76:d6:d8:cb:36:b4:
                    b0:d1:ca:16:04:1d:03:e3:4c:a8:a8:7e:6e:cb:3c:
                    9c:8a:bd:97:69:4d:d7:1c:0d:e4:09:41:ff:ff:5d:
                    94:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5F:F5:9C:C3:B1:F2:FB:D2:15:2A:0E:8F:22:09:17:8E:92:84:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/ae79e840-67a9-33d7-92ee-86fb9d248de9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:60:cb:9c:57:2b:5a:a7:9f:56:8d:4f:75:55:5f:2d:62:5a:
         02:c4:80:c2:d3:f8:42:3a:56:ca:47:d0:53:e9:4a:69:4a:87:
         93:df:f0:55:ae:36:be:ea:60:05:8b:fa:af:82:84:de:52:62:
         ef:c7:d9:a5:3e:dc:04:d0:00:de:f4:ef:b2:01:61:48:ee:e7:
         5a:5c:73:3e:d6:da:0b:ae:a4:35:e8:d6:0a:bb:cb:8a:eb:0a:
         f4:7d:c3:96:b5:d6:d2:87:d2:1a:4d:05:93:e9:16:42:15:84:
         01:54:c9:2b:4f:68:3d:e7:e4:00:17:b5:80:e0:92:4d:1b:01:
         b2:e8:09:7e:68:25:62:13:e3:b1:db:06:40:ea:06:8d:ef:1b:
         11:d0:6c:58:f0:19:b4:b8:69:63:15:46:dc:56:ee:20:4e:a2:
         c5:e7:2a:ae:b3:2e:1a:52:1e:59:72:de:15:f4:de:7b:8b:bb:
         13:43:ec:f9:f0:2a:f8:fc:94:a8:e1:e0:e8:11:5a:b6:0c:d8:
         e8:b9:4d:b7:8f:60:f4:d3:3f:68:74:06:d5:b7:02:09:5f:e2:
         c6:4e:04:d8:17:92:7a:e6:03:bc:44:47:8e:f0:0a:e2:16:c3:
         2b:1e:48:a2:f7:49:3c:a1:60:e7:45:ca:73:54:a6:35:94:c8:
         96:44:ec:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 02:58:54 2025 by rpki-client