Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c3e18ddf-50c8-3c2b-961b-6ce9f03a95d8.roa
File:                     c3e18ddf-50c8-3c2b-961b-6ce9f03a95d8.roa (raw, json)
Hash identifier:          NVFRW1SMm3LOMehOBfdVYN7RisVBF2wqFkA4JfBCQp0=
Subject key identifier:   CA:39:19:2C:6A:B8:70:9D:8E:12:A1:4D:86:EF:89:8D:94:73:2F:6E
Certificate issuer:       /CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
Certificate serial:       010D0C9F4328584BBE4043E7F1E43B8908B18400
Authority key identifier: A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c3e18ddf-50c8-3c2b-961b-6ce9f03a95d8.roa
Signing time:             Tue 04 Nov 2025 02:00:31 +0000
ROA not before:           Tue 04 Nov 2025 02:00:31 +0000
ROA not after:            Mon 02 Feb 2026 02:00:31 +0000
asID:                     11650
IP address blocks:        216.71.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:be:40:43:e7:f1:e4:3b:89:08:b1:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffdee3f8-e368-45ea-9a0a-033c591b4971
        Validity
            Not Before: Nov  4 02:00:31 2025 GMT
            Not After : Feb  2 02:00:31 2026 GMT
        Subject: CN=8da7ad75-f736-45a1-9e79-c812bf1f10c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6b:c2:35:9e:e8:1a:aa:b8:53:81:c2:5c:d5:
                    1d:35:71:bb:aa:a4:dc:8d:9d:bf:30:9e:90:48:80:
                    d5:62:56:c5:b0:3b:64:ed:57:28:c5:0b:ad:7a:3a:
                    b7:9a:91:ea:30:07:96:34:21:18:e4:75:10:ab:03:
                    f8:4e:2e:82:11:08:90:0b:46:3e:60:29:2d:2f:75:
                    84:59:e2:a3:88:da:56:5e:fc:36:0f:91:68:56:91:
                    a8:e1:8a:af:fb:21:b8:29:c5:f7:16:56:54:03:7d:
                    ea:24:3f:ea:97:ba:87:0f:c6:25:7a:08:27:89:9e:
                    c2:4f:34:d8:73:6a:3f:65:8e:81:be:03:f8:98:11:
                    f5:26:ac:b6:1a:cb:a0:33:71:65:2a:5c:f8:5e:90:
                    f7:c7:1b:d0:a1:a1:c4:59:e2:c4:ac:f0:b5:25:fc:
                    c5:19:aa:9c:47:af:58:2e:9e:a0:fb:1e:61:43:97:
                    44:cb:34:97:d6:67:f9:60:54:31:b7:98:92:db:83:
                    49:eb:9b:c7:ea:9a:30:c9:ff:f7:c2:38:c5:f8:b9:
                    e7:eb:2b:4a:65:b4:2b:df:cc:9f:85:30:da:51:23:
                    27:05:6f:f6:eb:3e:1f:48:ae:cd:48:76:e0:e1:30:
                    78:52:6c:46:53:ac:70:53:0c:90:16:f2:7a:5d:7f:
                    62:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:39:19:2C:6A:B8:70:9D:8E:12:A1:4D:86:EF:89:8D:94:73:2F:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/c3e18ddf-50c8-3c2b-961b-6ce9f03a95d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971/ffdee3f8-e368-45ea-9a0a-033c591b4971.crl

            X509v3 Authority Key Identifier:
                keyid:A3:3B:F1:C6:C8:61:74:0E:9A:FC:71:51:07:84:15:A7:06:B3:DA:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ffdee3f8-e368-45ea-9a0a-033c591b4971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:db:3d:67:7d:f3:7c:5b:14:90:ec:3a:b2:58:d7:fc:65:f5:
         f5:63:1b:13:d9:33:b0:da:09:3d:2e:71:c8:16:df:09:bf:f5:
         a9:7c:bd:5a:c0:58:f3:c1:eb:27:95:ca:8a:17:3e:57:d0:05:
         99:0f:bb:17:6c:d9:38:4e:bb:4f:13:79:f1:21:f3:77:5c:23:
         bd:b5:dc:a5:62:57:85:a2:84:3c:d2:67:53:d0:47:da:42:94:
         26:5a:a2:0d:e3:ce:2f:41:72:b8:20:43:98:61:84:1c:8c:29:
         c1:4f:ee:04:2c:05:3a:de:03:04:8a:1b:22:9a:cf:03:25:ec:
         fd:d3:a4:20:19:3e:54:a7:c4:df:55:7d:41:b1:78:5f:03:38:
         f5:ff:30:77:0b:ff:7b:5c:45:b1:26:2f:0a:79:d1:9c:75:2d:
         b4:22:93:26:90:cd:fa:9f:cc:a7:a9:53:9c:7e:a4:17:49:b3:
         d6:56:9c:ba:77:37:cb:4b:e0:50:07:da:11:6d:f4:4b:cd:7f:
         58:b9:4c:5c:68:25:64:a4:dc:10:e0:ae:5c:a4:7b:af:1d:54:
         95:01:f3:44:3b:cd:1b:9a:ed:fb:d8:68:dd:53:cd:2a:76:9f:
         27:11:39:0e:9b:fd:3b:95:80:04:c1:f8:83:75:6e:71:51:91:
         e7:94:99:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:34:27 2025 by rpki-client