Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9c18bbae-608f-37e1-ac04-9d88533ae52e.roa
File:                     9c18bbae-608f-37e1-ac04-9d88533ae52e.roa (raw, json)
Hash identifier:          IUCbCYhebGbZ8TLqS/7MJeAJOfe461sgL1KA/0ewzXQ=
Subject key identifier:   DD:63:9D:44:B4:F2:A0:88:7C:51:D9:3C:3F:78:4C:12:76:D5:F8:C3
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584AA0CA5FF2BA3C52927D7FBB60
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9c18bbae-608f-37e1-ac04-9d88533ae52e.roa
Signing time:             Thu 24 Jul 2025 19:57:51 +0000
ROA not before:           Thu 24 Jul 2025 19:57:51 +0000
ROA not after:            Wed 22 Oct 2025 19:57:51 +0000
asID:                     53356
IP address blocks:        216.24.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a0:ca:5f:f2:ba:3c:52:92:7d:7f:bb:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jul 24 19:57:51 2025 GMT
            Not After : Oct 22 19:57:51 2025 GMT
        Subject: CN=8a71dc68-0487-4911-b253-db812233e001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:56:c0:89:87:30:d6:0d:d6:cd:77:77:3c:53:
                    c5:01:b9:0d:15:7f:52:94:64:3a:37:85:75:3a:8a:
                    da:c4:43:76:2d:af:aa:ad:d4:74:49:f5:8f:3c:1a:
                    0f:5c:9a:fa:23:49:6a:51:bc:98:ad:9e:eb:71:68:
                    d9:65:7d:41:06:1a:3c:26:f5:38:ee:4c:e6:0d:b8:
                    71:d1:24:4a:a0:6b:1b:ae:ab:f9:70:87:35:4e:79:
                    29:15:eb:37:4b:c7:58:7f:fa:0a:77:7a:e9:56:4d:
                    4a:67:af:df:b3:25:f8:fc:06:68:c5:47:10:d5:0f:
                    21:f7:d4:4b:ec:53:bb:1a:e4:f4:13:44:8b:ca:49:
                    83:26:20:dc:97:ca:9f:d2:ab:ca:d9:e5:a4:07:8f:
                    00:09:67:07:8b:6a:00:2d:b2:2b:8d:c9:a8:e9:a3:
                    80:d0:1c:91:a6:87:a8:7f:69:7a:7e:94:a1:29:a7:
                    23:64:31:d3:ca:4b:75:d5:8c:81:48:76:70:1e:52:
                    6d:9f:28:b1:5a:7f:12:f4:43:d4:03:3c:47:9f:b6:
                    b5:e0:74:b1:69:ca:72:ee:29:37:fb:13:69:7c:57:
                    fa:9a:35:89:29:60:0c:ab:6f:f7:8b:47:4e:c4:32:
                    bc:d1:5d:1f:27:18:a0:9c:66:ea:fc:ad:e0:3d:26:
                    2f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:63:9D:44:B4:F2:A0:88:7C:51:D9:3C:3F:78:4C:12:76:D5:F8:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9c18bbae-608f-37e1-ac04-9d88533ae52e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:42:ba:8b:19:93:4d:bb:69:f6:0a:8b:c7:29:2e:96:66:cf:
         b7:fd:c0:7f:b8:be:cc:f2:24:4e:12:d8:36:97:d4:7f:ca:d6:
         39:93:92:41:87:d4:64:19:b0:b5:e0:a1:82:26:5d:8c:e2:bf:
         d1:b6:a5:a4:bc:ea:98:ba:4c:f7:0d:5f:ca:01:b7:c8:21:f1:
         a0:cb:62:ab:be:fc:ad:c8:b8:ea:5b:a7:05:51:e3:c2:aa:f4:
         ca:f7:1b:a1:b4:bb:3a:25:8d:4d:32:84:2b:3f:8c:7b:c2:3f:
         20:7f:e6:52:03:99:b0:78:bd:ff:3b:68:0d:ad:47:35:43:f0:
         92:1b:1d:03:ec:25:5f:7d:f3:40:92:e1:51:bc:bd:67:b3:0a:
         05:60:76:c6:6a:31:f7:7e:e9:a6:69:67:bc:15:a1:5d:f8:1b:
         2d:9c:aa:d2:54:fb:48:4e:1b:9c:aa:08:cf:07:f6:aa:a4:b3:
         47:ac:ed:f7:3d:af:9a:d0:3c:c3:66:9c:e2:d9:2d:cf:b2:24:
         2d:cb:56:e6:2a:a6:f3:7c:27:60:3f:9b:b1:f4:d6:97:64:a3:
         6b:7c:d2:51:21:bf:35:55:af:74:a8:49:f1:77:82:0d:97:a0:
         c7:a2:d8:c8:8b:14:c5:8c:e3:db:30:2a:75:f5:6f:f6:c9:96:
         25:b5:64:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:21:10 2025 by rpki-client