Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/745e9c30-c5a0-35df-a75f-41f0b5a726dc.roa
File:                     745e9c30-c5a0-35df-a75f-41f0b5a726dc.roa (raw, json)
Hash identifier:          LOGe9sNRQ8a1QcVRK7peyTjr6AtssouPAYd40dydjM8=
Subject key identifier:   C7:37:A6:B0:B1:D3:9F:2E:4C:DA:ED:9D:AD:0B:78:18:1C:E9:56:78
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584B1AD17DEE62FAC3D3BACC4B80
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/745e9c30-c5a0-35df-a75f-41f0b5a726dc.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     53505
IP address blocks:        216.234.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:7d:ee:62:fa:c3:d3:ba:cc:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=40e69d91-b506-429b-b12b-28c84bec3aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5a:19:f1:19:df:71:cc:48:8e:a0:2e:68:ed:
                    6f:35:11:88:55:17:1d:a8:ba:92:4b:ee:b2:56:d9:
                    5b:85:ac:27:2a:af:bf:2a:71:be:2d:6e:13:1d:3f:
                    4b:e9:90:b1:22:7b:fe:22:2e:cc:3e:25:cc:fd:6b:
                    b3:c9:13:6f:15:c0:d8:53:23:df:49:51:d9:35:bc:
                    08:43:13:b0:60:32:1d:f2:d8:14:b8:25:e7:67:20:
                    7d:b4:4f:68:42:0b:fe:b5:8d:2f:4a:11:95:10:44:
                    c3:77:a2:0f:9a:9f:ba:36:e5:58:fb:f5:bb:08:88:
                    12:6c:22:ad:02:ec:73:8c:7e:b9:07:72:da:52:47:
                    75:b8:9e:25:65:7f:02:b1:1d:1a:72:fb:f2:a4:60:
                    d9:47:82:cd:b0:0f:2d:23:e5:61:78:99:39:78:81:
                    a9:4b:22:41:e4:9a:04:15:b6:28:66:bd:b2:80:1d:
                    f0:79:bf:38:54:d8:b9:f4:08:ea:85:36:c7:16:d5:
                    02:5a:ea:83:3f:1e:e5:5e:d7:e0:2b:9d:91:03:d9:
                    98:b2:ca:99:63:be:35:9c:ab:83:4b:e8:48:c1:46:
                    2e:52:44:e0:44:e2:05:4a:4e:19:d3:0a:37:3d:d4:
                    82:42:f4:c9:89:07:4e:de:ed:8d:02:e2:e0:82:a0:
                    07:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:37:A6:B0:B1:D3:9F:2E:4C:DA:ED:9D:AD:0B:78:18:1C:E9:56:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/745e9c30-c5a0-35df-a75f-41f0b5a726dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c1:ad:f3:8a:4c:e8:94:c0:3f:74:ed:fb:01:2e:7a:26:f4:4a:
         b6:f2:ff:e8:d6:f9:bc:82:98:f5:09:44:2b:78:15:5d:1d:22:
         c9:e2:eb:84:35:33:38:64:46:5a:c6:3e:2c:ff:6d:ab:ab:8a:
         96:fa:74:92:69:7d:5f:fa:22:e2:08:d4:0d:fd:1a:00:13:e0:
         20:d1:f7:2f:98:af:88:31:3c:48:47:8e:41:b6:f9:3b:c4:4e:
         57:06:db:3c:c1:0f:48:d4:c0:8c:ff:20:eb:c0:16:4f:b9:da:
         7b:de:a0:55:50:40:e5:42:11:a7:c0:85:10:14:87:90:e3:2f:
         0a:3f:e5:ec:cd:5e:2f:ab:d6:ca:dd:4e:3c:2c:45:5b:11:e4:
         c3:f0:76:4e:7f:33:7d:02:09:be:65:c5:6f:03:77:c8:2a:34:
         fb:44:d4:30:73:b2:6c:0e:0a:bd:12:0b:fe:b0:4e:b6:d6:22:
         db:c4:34:49:af:d6:66:0c:2a:6f:0f:31:67:e1:b9:42:72:00:
         1b:b6:f3:01:4d:49:c8:69:e9:6e:84:c9:dd:94:e3:86:10:58:
         e8:53:26:38:e3:da:cf:0e:a9:79:ec:1d:39:40:69:7e:ac:20:
         8c:c6:2c:4d:b4:a8:be:72:17:a2:95:1a:8a:6d:18:cb:b1:9e:
         fc:ed:65:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 00:23:40 2025 by rpki-client