Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/21c05a3b-e062-3862-8df9-24b08a6621aa.roa
File:                     21c05a3b-e062-3862-8df9-24b08a6621aa.roa (raw, json)
Hash identifier:          MWpi7WBdOqRlMGb3sMllWV3BxVK/IOQFybXxLLBiA8A=
Subject key identifier:   80:A9:07:05:A9:75:DB:51:AD:00:C0:93:B8:F4:3F:3A:0D:E4:BF:B2
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584A7D15FFE8E4A27F8E1B218480
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/21c05a3b-e062-3862-8df9-24b08a6621aa.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     11090
IP address blocks:        216.152.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:ff:e8:e4:a2:7f:8e:1b:21:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=d07c9b97-ff6a-4c13-b7e5-c1f512c48584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:82:9a:03:51:5c:9e:06:e0:84:41:84:0e:98:
                    be:21:d3:9e:f0:3b:aa:5d:f7:75:e2:07:0d:f2:e1:
                    2b:13:90:e1:ec:ee:6f:7d:ff:7e:e6:7a:c0:74:c8:
                    f1:51:43:6f:2a:8f:a0:50:08:e7:51:1b:82:ad:9c:
                    9c:ea:9c:27:80:fd:0f:a7:de:34:46:c5:fd:c3:1a:
                    1d:9c:99:bc:4f:11:db:6e:90:c9:cb:98:75:d5:90:
                    e8:f0:67:ae:84:59:78:9a:dc:4d:fc:50:7a:6f:c9:
                    7c:a7:1d:5e:0f:9b:dc:02:21:3f:0e:de:b4:1a:bb:
                    b5:ca:1e:95:25:73:a0:fa:0b:80:6f:82:ac:35:3f:
                    f9:7c:aa:8d:d1:1b:96:47:56:01:fc:c0:eb:76:62:
                    c1:44:f0:4b:ab:80:a6:14:c5:f0:af:cd:40:9e:3c:
                    9b:a2:32:49:32:f7:7c:92:45:21:69:29:ec:3f:65:
                    82:a5:b6:e2:fb:74:59:75:2b:dd:0e:0d:39:1e:23:
                    57:d8:85:98:fd:96:ab:f8:76:d2:75:f6:8c:ff:a3:
                    12:5e:37:3b:0a:34:2d:6b:d4:82:8d:db:ed:a2:45:
                    57:a7:47:01:ed:33:93:5b:55:1a:7f:10:df:47:eb:
                    76:cd:c1:58:fb:14:4e:8b:89:75:da:78:a7:82:81:
                    f4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A9:07:05:A9:75:DB:51:AD:00:C0:93:B8:F4:3F:3A:0D:E4:BF:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/21c05a3b-e062-3862-8df9-24b08a6621aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.152.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:9c:43:db:1c:59:a2:2b:02:9f:17:d7:4d:3a:0e:da:ea:ea:
         47:65:25:63:2f:8c:44:35:8f:bb:a1:26:db:40:ff:5b:d5:98:
         32:d5:93:cb:d5:bf:de:da:a0:4f:2f:9e:60:54:fe:c2:aa:45:
         e9:10:0a:24:4d:cc:4a:f7:9d:02:b8:cc:95:d2:be:0e:f5:a0:
         ad:ea:2e:74:95:24:ef:d9:a6:86:4c:56:36:a6:7a:ec:2d:b1:
         ea:5c:fa:ca:cc:33:5a:c0:70:ca:b5:60:5e:c2:35:17:97:80:
         db:d9:cf:1c:8e:6a:4e:e7:9a:aa:fd:9d:2e:c6:c5:83:74:85:
         f0:91:a2:79:3b:78:45:e7:ae:91:a7:35:2d:78:2a:27:7d:e1:
         a2:2c:6a:66:82:69:26:77:6b:95:87:c1:95:7a:f8:70:70:aa:
         3c:19:cb:dc:f2:5d:cc:c8:4a:64:74:a0:f6:cb:bd:41:17:3c:
         e0:13:22:6b:b4:f0:03:74:3c:48:78:e2:f0:fd:c9:ec:26:90:
         04:4a:eb:d0:00:7d:f9:14:c0:bf:a9:11:7e:6b:53:5e:a3:93:
         9a:bc:05:77:f9:21:0d:84:46:ab:c9:90:db:8f:3d:d0:7f:8b:
         67:c1:18:a1:af:fd:c7:a8:5d:e3:7b:f4:39:e3:f9:de:d3:b0:
         ff:41:92:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:17:21 2025 by rpki-client