Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/9bd9ff1f-87f9-3f00-bb6b-1f8e248b0b02.roa
File:                     9bd9ff1f-87f9-3f00-bb6b-1f8e248b0b02.roa (raw, json)
Hash identifier:          HTERquo1a2wRidTJN1BEbuj1qhklsUPsXOLZP0m3EHI=
Subject key identifier:   A8:58:69:CE:F8:41:B8:91:FD:F6:90:07:37:3B:7F:AA:65:EE:4C:00
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328584BBFA59C725E35F8F6E7F54500
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/9bd9ff1f-87f9-3f00-bb6b-1f8e248b0b02.roa
Signing time:             Tue 04 Nov 2025 14:00:39 +0000
ROA not before:           Tue 04 Nov 2025 14:00:39 +0000
ROA not after:            Mon 02 Feb 2026 14:00:39 +0000
asID:                     11426
IP address blocks:        216.158.207.0/24 maxlen: 24
                          216.158.211.0/24 maxlen: 24
                          216.158.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bf:a5:9c:72:5e:35:f8:f6:e7:f5:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Nov  4 14:00:39 2025 GMT
            Not After : Feb  2 14:00:39 2026 GMT
        Subject: CN=00cbf485-83a5-4152-b57f-e7539aa0fcdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d3:4c:e3:c9:18:2a:21:a6:e3:14:69:fc:c1:
                    8a:9a:3c:fc:19:3c:2d:02:23:74:5e:7f:65:d4:38:
                    6e:6e:5a:e7:13:6c:9e:90:87:3a:f3:9f:04:fd:0e:
                    fc:a1:5b:61:af:27:f7:06:95:f6:37:f3:67:56:91:
                    e1:fa:36:85:d4:9e:bb:fb:c3:63:aa:1d:d4:53:7f:
                    6b:44:bc:d1:48:fd:6e:91:5c:d4:1e:4a:a3:18:e0:
                    04:7b:e8:40:70:22:31:ff:db:b8:62:89:88:aa:46:
                    37:7d:59:f9:49:77:20:15:a2:90:e4:87:2d:44:b3:
                    70:e4:de:02:5e:b2:0a:43:68:d6:b5:8b:37:2c:9e:
                    22:07:00:e7:d2:e3:db:a2:2c:cd:70:7e:f9:e3:76:
                    14:13:3f:80:03:21:75:6e:a1:d5:4e:3d:1b:8e:b0:
                    5e:c4:fb:bb:61:2e:32:98:a7:34:a7:d4:5a:db:13:
                    df:03:c5:4f:61:0b:fa:75:b8:22:94:ac:e4:fb:a3:
                    25:bd:03:e4:8d:fd:eb:37:dd:ce:37:92:b7:24:8b:
                    71:e7:ee:fd:f6:f6:65:9e:8f:ba:73:2a:7a:a9:5f:
                    f7:9a:c5:dd:bb:18:da:0a:2b:59:6b:4f:e5:b4:7f:
                    23:e2:31:5d:f1:56:b4:68:37:ed:de:aa:76:1d:f8:
                    c0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:58:69:CE:F8:41:B8:91:FD:F6:90:07:37:3B:7F:AA:65:EE:4C:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/9bd9ff1f-87f9-3f00-bb6b-1f8e248b0b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.158.207.0/24
                  216.158.211.0/24
                  216.158.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:b5:f2:37:49:df:3d:c3:23:14:c8:6e:0e:02:59:26:75:40:
         1c:c5:ab:fa:24:c4:93:06:10:ae:f0:af:cf:ac:03:b1:50:16:
         f9:66:80:63:61:3c:01:74:d5:49:71:a2:14:d4:a8:2f:08:75:
         e0:aa:63:f8:cf:3a:48:2b:8c:46:e4:b6:c4:28:da:54:04:c7:
         e7:98:5d:c4:a9:b8:1a:6c:b9:6c:97:85:cb:17:09:47:06:c4:
         43:6a:e9:30:7c:01:07:03:ef:63:b8:c6:a2:f7:63:e0:eb:74:
         64:fa:8d:ab:1c:bc:9d:16:f4:4b:02:ac:52:ed:59:b0:22:17:
         79:f2:62:46:54:04:84:09:ef:7f:17:83:e5:f6:ad:29:80:ae:
         83:12:d3:e8:57:a0:53:22:94:be:43:37:f6:ea:ad:fc:61:97:
         8c:b6:29:83:c1:4d:91:90:ca:e0:95:6b:bc:b4:7f:a0:cc:0a:
         65:72:f5:1c:2a:17:4a:74:6b:a2:d9:8d:8f:83:25:64:fc:74:
         d3:e1:4d:63:65:e0:99:08:1f:2e:e1:0b:98:ea:92:6f:11:72:
         6c:5b:8e:e1:89:d2:78:4e:70:75:4a:14:68:eb:5a:ec:71:35:
         f9:4c:5b:c6:c9:94:8e:7b:0e:a2:fc:85:2c:e8:d0:26:84:fb:
         49:bc:ee:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:28:03 2025 by rpki-client