Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21cf8a76-4555-3d30-876a-9f938d02a731.roa
File:                     21cf8a76-4555-3d30-876a-9f938d02a731.roa (raw, json)
Hash identifier:          OAHSYWP2rkIJNCrls6S6MRQNSh7wx7gEIyOuhtmpGvg=
Subject key identifier:   6F:C7:0E:FA:2B:A3:51:53:45:8B:7F:3F:1D:7D:9C:A5:24:66:04:DE
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584AE6B60EE054A5FBB75C582800
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21cf8a76-4555-3d30-876a-9f938d02a731.roa
Signing time:             Mon 18 Aug 2025 21:03:30 +0000
ROA not before:           Mon 18 Aug 2025 21:03:30 +0000
ROA not after:            Sun 16 Nov 2025 22:03:30 +0000
asID:                     31898
IP address blocks:        140.204.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e6:b6:0e:e0:54:a5:fb:b7:5c:58:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Aug 18 21:03:30 2025 GMT
            Not After : Nov 16 22:03:30 2025 GMT
        Subject: CN=ddb2480f-a541-47d9-b97c-92cee08138ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c1:7d:71:67:73:2e:9f:53:c7:ac:8b:a0:e8:
                    60:3f:e3:9e:0f:16:9d:7f:78:96:53:d3:f0:f4:30:
                    e9:bf:3f:31:62:a5:3c:4f:87:10:2b:e0:16:6b:38:
                    ae:54:a6:17:5a:2a:9e:bc:c4:d7:96:42:85:7e:89:
                    5c:ee:ff:76:39:49:1d:c9:1a:4d:2b:63:f3:fa:fd:
                    5f:36:81:63:02:92:11:25:b2:e8:e4:45:96:9b:09:
                    87:1e:9d:ff:d6:3f:76:b0:ea:e2:29:cb:80:a0:12:
                    19:40:22:f5:5d:4f:02:e4:3d:a1:ac:11:5c:31:2b:
                    62:0b:09:5b:7e:82:72:44:d8:9a:f9:b3:b4:5d:1c:
                    b8:a6:b6:25:bd:97:f5:2e:7f:67:8b:b6:fe:d8:c8:
                    91:1a:a5:9d:2f:39:4e:c9:6c:28:90:6f:99:b5:fa:
                    5a:fe:90:75:3e:9a:d0:e0:e0:30:7e:28:bb:f3:da:
                    38:29:44:94:f3:ae:06:6d:81:5d:5d:6d:58:4e:02:
                    43:74:9d:6c:0e:cb:9d:7d:d8:6f:3e:7f:00:32:0e:
                    99:f4:99:ec:a9:f4:33:95:fc:7b:61:8a:aa:41:8a:
                    e7:2b:b8:9a:21:ab:7d:19:0c:30:39:68:47:dd:c2:
                    be:99:9c:08:7e:1a:ce:a9:b3:9a:5e:77:65:01:cf:
                    18:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C7:0E:FA:2B:A3:51:53:45:8B:7F:3F:1D:7D:9C:A5:24:66:04:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21cf8a76-4555-3d30-876a-9f938d02a731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.204.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:b1:cf:25:76:88:68:ee:14:ee:21:06:98:d5:b4:aa:89:bb:
         1a:00:bf:72:7b:22:9a:db:e1:5a:13:26:0f:8c:21:c3:d4:d3:
         b1:e8:d6:4e:fe:c3:77:c5:25:d1:ec:86:a1:1c:7b:4c:8d:42:
         d8:84:68:d1:20:cc:16:77:cb:65:c5:0e:51:fa:79:85:02:8b:
         8e:58:25:f7:79:f7:a3:71:3e:f4:9c:01:2d:eb:14:4f:77:2c:
         24:5e:e6:b5:81:ff:cc:82:65:43:fb:4d:84:29:3b:1f:54:76:
         a4:a9:85:26:a0:56:a0:28:0e:8e:17:4b:5b:1b:df:b7:64:63:
         15:85:dc:a7:6f:7a:a2:49:ac:d5:8e:67:fc:79:b7:19:17:e6:
         4b:60:e8:88:dc:03:ac:0a:6b:14:80:ca:eb:ec:3d:d2:fa:eb:
         4b:5d:f6:9c:38:2f:2c:69:2c:32:d2:4b:89:2f:3c:47:9c:db:
         67:f2:6a:0a:00:e3:0d:30:c5:14:a0:c8:c4:41:ad:26:c2:2a:
         b2:b0:9c:6f:e4:ac:e0:7c:68:d4:67:00:ee:db:79:92:58:ab:
         84:54:25:19:f7:dc:b9:40:80:82:f5:7d:8b:f8:0f:2a:d9:ac:
         6b:72:0a:2f:88:d8:d0:6a:78:20:94:1b:aa:41:8a:5c:20:ab:
         cc:cb:d7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 03:23:23 2025 by rpki-client