Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/be73bf96-e5bd-337c-93e4-4955acaa2e68.roa
File:                     be73bf96-e5bd-337c-93e4-4955acaa2e68.roa (raw, json)
Hash identifier:          gmX3YcdKlnbPik9037OwPw6Xi1JC4xZj7NYIZ5AlvwY=
Subject key identifier:   35:73:D0:1C:2D:E4:96:F3:92:77:D9:3F:9B:2D:CC:F5:07:9A:E1:E6
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F4328584A8B0B60399E4061A29CB7C2C0
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/be73bf96-e5bd-337c-93e4-4955acaa2e68.roa
Signing time:             Thu 17 Jul 2025 01:00:51 +0000
ROA not before:           Thu 17 Jul 2025 01:00:51 +0000
ROA not after:            Wed 15 Oct 2025 01:00:51 +0000
asID:                     11090
IP address blocks:        216.137.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8b:0b:60:39:9e:40:61:a2:9c:b7:c2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Jul 17 01:00:51 2025 GMT
            Not After : Oct 15 01:00:51 2025 GMT
        Subject: CN=f09c5cf9-12be-4bd2-b43f-ae64b1c606be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f6:c6:64:8a:ef:60:a9:6b:50:5a:f8:6a:2a:
                    12:30:06:f7:b6:18:3a:a8:f5:4f:25:41:a8:e2:1a:
                    2e:a4:6a:2a:17:e2:45:42:4a:61:ef:9f:28:ad:0d:
                    6e:97:eb:0e:c3:30:40:13:25:e5:a5:24:38:ad:9c:
                    7b:ab:30:dd:d5:71:77:e0:2b:a1:95:a9:9d:d7:96:
                    d9:bf:5f:68:3d:56:42:29:ee:8b:17:f6:4b:21:f4:
                    7a:f0:91:11:69:90:f4:d1:56:8c:ef:c2:04:33:0a:
                    2f:1c:87:80:df:2d:9d:50:d7:0a:c6:63:f7:5a:fc:
                    bb:84:e9:4b:94:1d:9c:76:0b:b9:dc:ee:e3:56:57:
                    ed:7e:f6:38:c9:b4:ec:dd:2c:05:c2:53:ed:ae:d8:
                    7c:b3:c4:74:8b:b1:77:e0:b8:a2:94:c5:23:37:13:
                    4f:42:e1:30:11:43:92:96:4d:c9:4b:cd:d6:ff:f8:
                    19:d8:03:77:a5:76:08:93:6d:aa:f0:52:2f:1a:60:
                    86:d5:6b:51:2e:2d:08:0a:26:5b:4c:6a:fa:74:19:
                    0d:98:52:d4:32:08:14:66:d4:42:0c:7d:77:f7:19:
                    51:68:ac:40:74:b4:e9:45:f4:11:2c:e2:c8:c6:e5:
                    f8:7f:db:01:21:53:00:2c:77:9b:13:94:7f:94:89:
                    12:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:73:D0:1C:2D:E4:96:F3:92:77:D9:3F:9B:2D:CC:F5:07:9A:E1:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/be73bf96-e5bd-337c-93e4-4955acaa2e68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:a5:46:9a:69:1b:72:d4:6c:58:bd:b3:36:0a:d4:86:a1:e8:
         0a:ef:55:8e:ef:20:a4:26:94:64:fc:d6:31:05:eb:18:be:7b:
         de:cb:dd:43:f9:0e:d6:70:05:ea:2c:5f:00:d7:ad:5f:08:a5:
         7e:7d:27:b7:bd:4e:c2:e3:ba:16:60:4a:ad:00:0a:ed:77:be:
         c9:84:03:c5:e6:8e:24:0c:ef:8a:0f:07:bd:d0:31:6d:b9:ff:
         d6:3b:10:12:6e:28:27:cd:11:1a:97:c8:e4:f8:50:fd:a5:6c:
         d6:fe:bf:81:35:51:02:86:d6:da:ac:66:05:a4:be:16:b4:1f:
         82:79:2b:2e:69:a3:5f:a9:4f:ab:89:f1:70:e3:bc:c2:55:16:
         9b:7b:9a:7d:53:64:e0:8b:3d:39:8b:33:33:a6:86:d1:e3:b6:
         64:b4:49:46:88:c4:53:2e:80:e8:29:7c:64:7e:40:76:ab:e0:
         e0:ec:09:11:27:5b:cd:9d:fd:9e:77:d4:a6:1a:6f:a3:2a:7f:
         4f:3c:e8:80:f8:25:2a:44:7a:d2:ac:38:f8:17:dd:32:04:5e:
         e1:99:57:9a:64:d1:e2:3b:18:3e:bb:b7:9c:e6:e9:1e:cb:d5:
         1f:a1:d3:6a:51:2a:e2:30:d4:e6:1f:51:f9:d5:e8:fc:9a:f1:
         14:e2:69:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:11:19 2025 by rpki-client