Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a17e37a9-8105-354a-83d2-cc268cf0dc57.roa
File:                     a17e37a9-8105-354a-83d2-cc268cf0dc57.roa (raw, json)
Hash identifier:          acyM47TIySQnl95dWuASAeAWyoHkNp3I1H59fkOIB+c=
Subject key identifier:   33:31:F9:68:0D:AE:08:79:E2:94:94:BC:76:7E:EB:F6:0D:9E:CF:F9
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584A7D15FFCA014D9572471A7B00
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a17e37a9-8105-354a-83d2-cc268cf0dc57.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     11090
IP address blocks:        216.152.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:ff:ca:01:4d:95:72:47:1a:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=23a689df-47f7-430b-9d13-4cb2d1619183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bb:8e:a0:ae:9d:7d:aa:4a:e2:d6:58:8e:64:
                    99:a5:66:d6:36:d2:fc:bc:2f:9b:7d:0c:79:7a:01:
                    bd:ca:64:55:8f:42:7e:e3:99:15:4a:ed:70:e6:2c:
                    37:5f:a0:1d:24:49:68:22:d6:99:80:e7:b0:ea:69:
                    5e:77:5d:d6:18:46:2f:56:bd:9b:05:89:fe:69:6a:
                    41:06:9f:e9:4c:ac:95:52:35:07:7d:e2:78:c6:9f:
                    4f:1d:6d:0a:76:af:27:f7:29:35:92:ee:26:fd:aa:
                    14:2f:ac:74:a4:c5:67:56:7a:a6:e3:b3:5b:d3:81:
                    e0:50:95:60:14:36:19:7e:04:59:df:d5:13:2b:4e:
                    fd:96:be:4b:1f:2b:5a:76:71:85:9f:30:a8:a2:65:
                    03:7b:49:53:ce:17:46:2e:3d:e2:4e:e4:e6:0f:06:
                    08:82:e0:01:43:06:93:17:c9:fc:f0:30:ba:fc:ad:
                    8e:35:aa:94:2a:f1:d8:e6:06:a6:87:1a:78:17:b8:
                    b1:5f:00:6c:11:32:00:3b:1e:df:aa:c4:a4:5d:35:
                    26:88:b4:9a:c6:b5:1b:8b:ef:38:92:9c:85:eb:85:
                    b7:9a:f2:e4:63:69:f9:2b:ca:9d:33:6b:94:b2:ca:
                    5c:49:61:35:8d:b4:5e:08:64:e1:04:9d:97:a5:f5:
                    c5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:31:F9:68:0D:AE:08:79:E2:94:94:BC:76:7E:EB:F6:0D:9E:CF:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/a17e37a9-8105-354a-83d2-cc268cf0dc57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.152.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:6b:3a:ef:d6:19:86:2b:23:da:4f:2c:bb:d1:e5:a5:65:6e:
         f1:1b:38:5e:e2:51:09:bd:b4:07:29:49:b1:63:fd:f9:3a:18:
         3d:6f:e9:7d:f0:73:76:a2:b7:41:92:04:72:ae:89:99:9c:e1:
         9b:af:29:71:ca:8f:35:fa:f4:00:4e:3b:81:db:c1:cd:56:f4:
         82:fd:a3:bf:4f:17:c8:c3:c3:4d:ec:09:82:13:6f:83:aa:61:
         3e:37:34:71:84:4e:0a:90:17:13:2d:3e:98:ec:f4:a1:9c:79:
         d6:ac:15:d1:da:b1:9a:b3:7b:63:15:91:18:1c:06:35:7e:f7:
         2f:92:dc:76:58:0d:34:42:88:df:b8:bb:c3:24:65:35:eb:12:
         fa:04:8d:ca:12:96:c8:43:62:de:ff:9a:fc:62:12:22:ba:2f:
         73:1a:4b:d5:cf:c8:f0:7e:2d:0c:f1:21:84:09:01:f4:fc:7c:
         7b:eb:60:b7:86:f3:b6:3b:1f:58:bf:e5:f5:18:66:c5:e3:89:
         79:fc:a7:92:d6:b6:e5:b1:01:8c:fd:31:1b:84:a7:e3:7a:14:
         a1:4b:47:85:d8:e4:02:03:6f:6c:fe:50:e0:26:6d:37:70:56:
         d4:1d:9e:ee:79:b1:80:68:fe:6b:8d:77:a6:fa:bc:7d:27:4d:
         31:1d:0e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:49:23 2025 by rpki-client