Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/fa1af220-f9c8-3b0a-a546-dec63eb2a94e.roa
File:                     fa1af220-f9c8-3b0a-a546-dec63eb2a94e.roa (raw, json)
Hash identifier:          3OmizI60PKIHKG7baMITNhXIWR7tuq7mT5jk+DSa/Bk=
Subject key identifier:   4D:7A:26:38:7E:E2:E3:3E:7F:46:C3:43:A3:57:AD:2C:5A:F1:B7:6D
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584A90A0B906DC279AF1806EAE80
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/fa1af220-f9c8-3b0a-a546-dec63eb2a94e.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     13692
IP address blocks:        216.110.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:b9:06:dc:27:9a:f1:80:6e:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=5213be4f-005b-4568-a5b2-d5a6704f37be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6c:21:0f:bd:b4:d5:7e:06:2b:b4:dd:a2:02:
                    be:43:0c:9b:53:e3:45:25:07:5a:8b:97:ad:6c:f7:
                    01:3e:88:23:39:85:52:41:31:82:b8:cd:ca:30:11:
                    96:3c:fd:86:2c:63:f9:04:72:0f:27:94:56:b0:92:
                    37:b8:bc:66:7c:7f:f2:0e:fa:5c:66:48:ee:d1:61:
                    72:d3:50:60:5f:92:27:5f:ee:8d:b3:d1:8e:c8:b9:
                    96:b7:84:a8:cd:66:87:cd:f7:30:52:bf:8b:4f:3e:
                    18:9a:a6:32:8d:d3:7e:e2:29:ce:f2:4b:b7:8f:3f:
                    d4:76:2b:ee:b5:ae:3b:23:7d:cf:8e:55:b8:9a:51:
                    67:72:da:1c:aa:f0:e9:ea:0e:ef:39:8c:58:73:3f:
                    f8:92:2c:84:ef:62:21:f6:e0:0e:b9:33:ba:ac:89:
                    38:9f:d0:ef:88:47:a5:be:e4:bc:af:8a:79:b7:2a:
                    ae:49:3a:7c:0d:e7:fa:38:a9:2c:e4:79:60:60:81:
                    42:23:f6:ea:74:71:b6:b5:34:35:d1:cc:d9:12:d1:
                    e1:b2:b1:ff:09:9f:e4:92:af:9e:07:f3:4c:95:55:
                    39:38:84:b1:35:3a:48:be:10:9b:5a:c0:a4:ae:11:
                    7d:c8:bd:b5:66:2e:a2:7d:4b:9e:72:d5:32:3d:f8:
                    b3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7A:26:38:7E:E2:E3:3E:7F:46:C3:43:A3:57:AD:2C:5A:F1:B7:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/fa1af220-f9c8-3b0a-a546-dec63eb2a94e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:1b:6f:7e:53:ff:f0:95:ef:1e:89:4b:13:95:c6:6b:d4:70:
         20:30:05:62:43:f9:be:a2:8d:bf:96:41:40:a9:67:62:c7:1b:
         83:db:8f:27:28:7d:30:cd:da:77:7c:e2:af:6f:40:37:d3:b6:
         1d:ba:1d:f1:a0:96:23:9d:12:32:f6:08:08:6e:3d:ce:5c:ed:
         8d:d2:0e:1d:ba:f0:29:91:8e:00:b5:61:89:80:47:c4:5a:ba:
         c0:64:e1:e2:17:a8:d2:42:58:d6:3f:df:6d:a4:ea:84:d5:01:
         62:3c:9f:be:2e:0b:c4:70:f7:86:26:28:82:a4:7e:a9:f9:ed:
         63:32:9b:d0:0b:ab:3b:d4:73:f2:c4:d8:da:7f:f8:42:16:c0:
         28:f9:82:39:71:28:5f:a7:68:8f:8d:f2:32:39:9c:ac:ee:cb:
         7b:92:7e:b2:5b:f8:68:a3:c4:49:2e:a3:d2:17:9d:94:13:6a:
         7f:c8:41:6c:11:90:d2:28:7c:85:a3:fb:e6:e3:5d:15:6e:2f:
         a6:1e:7b:f5:ce:13:51:9e:0a:6c:01:bf:b5:41:78:27:f8:4a:
         27:20:3c:4d:15:eb:30:17:99:49:cf:e5:44:1d:22:02:70:63:
         95:18:2a:fb:0d:9f:80:fa:ed:6d:bc:34:db:d6:c3:64:6f:e0:
         35:d1:be:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:37:54 2025 by rpki-client