Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/ac649671-2678-3b1a-b246-01c1ba37555e.roa
File:                     ac649671-2678-3b1a-b246-01c1ba37555e.roa (raw, json)
Hash identifier:          cdxiAIwpD4jKvfobN2h5CqRhUImXOzqEIgVvS6sI0Qk=
Subject key identifier:   3B:5C:2E:82:0F:CC:64:41:D0:E3:10:F0:BA:B2:22:09:92:A6:E6:90
Certificate issuer:       /CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
Certificate serial:       010D0C9F4328584AF95D44F972A9A69768F26430
Authority key identifier: 7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/ac649671-2678-3b1a-b246-01c1ba37555e.roa
Signing time:             Mon 25 Aug 2025 13:24:58 +0000
ROA not before:           Mon 25 Aug 2025 13:24:58 +0000
ROA not after:            Sun 23 Nov 2025 14:24:58 +0000
asID:                     401314
IP address blocks:        216.75.147.0/24 maxlen: 24
                          216.75.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f9:5d:44:f9:72:a9:a6:97:68:f2:64:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bf2109e-61f7-446d-8833-c7bd1c35ea08
        Validity
            Not Before: Aug 25 13:24:58 2025 GMT
            Not After : Nov 23 14:24:58 2025 GMT
        Subject: CN=df797a07-b625-4227-8981-4fe79ebe862f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5d:ba:8c:9c:8c:86:0f:d3:d3:4c:4b:c4:a3:
                    2d:b0:f5:26:5b:01:7c:aa:17:9e:2b:1d:bb:76:5e:
                    49:92:02:21:db:e7:43:37:34:c2:6e:36:19:1e:aa:
                    c4:79:e1:06:30:b4:c4:a4:90:e9:7a:34:34:84:13:
                    de:a1:89:8e:d7:6b:3d:99:cd:ef:2d:db:41:79:d7:
                    38:0a:26:89:41:dd:f4:10:5e:f4:b1:79:2f:59:e6:
                    07:06:74:5c:d0:b9:b5:3f:93:66:61:2a:14:eb:97:
                    72:98:d5:0c:aa:cd:88:f4:1e:02:7f:b9:a5:20:12:
                    86:9c:6c:93:e3:72:94:1f:99:b3:16:ff:be:74:9e:
                    d2:03:2e:9a:bc:c7:4a:83:7d:2d:49:51:5f:20:b7:
                    83:f8:d5:1d:f7:14:d9:90:ac:20:43:28:b9:1b:64:
                    f1:17:d0:04:dc:16:ea:10:26:a3:a2:40:3b:b8:a7:
                    c7:32:67:05:48:db:cf:63:d1:65:e0:c8:01:0f:3c:
                    bb:d6:a3:3e:d2:2f:c2:20:3d:5e:1b:b9:79:79:87:
                    11:89:0c:50:ed:dc:4b:42:e4:b8:7c:a2:e0:a1:d0:
                    85:bc:ab:de:e9:4d:c6:2f:87:2f:b5:bb:6e:15:66:
                    ca:1d:35:ef:1d:68:92:ba:70:06:04:84:44:24:08:
                    21:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:5C:2E:82:0F:CC:64:41:D0:E3:10:F0:BA:B2:22:09:92:A6:E6:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/ac649671-2678-3b1a-b246-01c1ba37555e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08/3bf2109e-61f7-446d-8833-c7bd1c35ea08.crl

            X509v3 Authority Key Identifier:
                keyid:7F:05:48:53:91:7D:90:BB:7C:0D:52:B3:50:23:42:8D:7D:70:E7:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3bf2109e-61f7-446d-8833-c7bd1c35ea08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.147.0-216.75.148.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:83:95:72:c9:11:e1:3b:46:d1:d1:27:f7:53:1e:ae:c9:9b:
         bf:28:95:7d:f2:9e:d8:4e:4e:7b:57:95:b4:16:2c:bd:56:b9:
         64:c7:01:3a:4e:62:47:9a:3a:7f:95:54:4d:71:e2:d7:95:ca:
         62:f9:cc:69:23:87:52:5f:09:d6:67:19:5f:c9:b4:15:5a:26:
         0c:69:e7:b3:2f:27:86:66:80:02:2c:51:d1:f1:50:62:4c:8c:
         db:41:51:5e:82:13:b5:d0:49:bd:20:0f:20:0b:50:35:21:a7:
         8f:64:a7:5b:af:dd:1c:15:b3:d0:7f:50:be:14:05:b1:49:0e:
         99:f6:cc:54:ec:df:74:15:a1:b2:99:21:06:2b:dc:6f:36:14:
         f3:e7:73:a1:87:02:38:27:71:1d:c2:dd:f7:e4:fd:09:79:26:
         9e:ee:4c:73:cc:d2:ac:9e:62:3f:34:29:ed:28:60:61:31:41:
         5b:f5:50:7c:41:02:35:7e:67:ac:f0:b3:24:a8:ed:e5:b0:8f:
         16:18:e5:8e:08:d6:55:4d:cf:71:51:3d:48:57:90:b0:0e:22:
         7d:a8:6a:5b:f4:72:eb:cc:58:6d:69:6b:64:07:e8:74:9d:40:
         b9:48:5a:b4:a0:db:8a:a2:44:20:55:10:e8:6e:75:e4:e3:e8:
         28:0c:45:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 18:59:40 2025 by rpki-client