Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/fd357df7-1d12-3bb8-83fa-af16700b3a9f.roa
File:                     fd357df7-1d12-3bb8-83fa-af16700b3a9f.roa (raw, json)
Hash identifier:          MeeETMVV2k2kStlNMrIdFnDA96727NNXd6LOFfS2+1k=
Subject key identifier:   CC:78:27:A2:4D:0E:A2:9B:34:A1:16:3B:2D:BF:8E:ED:96:53:F8:A8
Certificate issuer:       /CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
Certificate serial:       010D0C9F4328584AB4EB6BF9FB1751A9D8E71700
Authority key identifier: 8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/fd357df7-1d12-3bb8-83fa-af16700b3a9f.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     13984
IP address blocks:        216.213.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:6b:f9:fb:17:51:a9:d8:e7:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5af9e6-5009-44da-bd13-af5c8eb564c3
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=3bee50df-a142-47b4-a603-76fce20b798a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:17:5d:29:7d:2d:ad:e5:14:7d:3c:a3:17:
                    b5:07:6f:ae:4e:aa:54:9d:31:24:e1:56:57:ee:8c:
                    25:98:25:70:6b:e7:15:0e:43:d7:7b:f6:e0:a5:92:
                    3a:f8:84:10:fe:31:e6:fb:46:8a:1f:2e:06:1c:e8:
                    a3:35:89:cd:52:08:71:e1:b3:a1:b5:7a:65:d9:61:
                    62:ff:e9:e4:63:76:24:f3:f2:93:1c:8f:c4:7c:e2:
                    66:57:62:92:b6:3d:82:a9:21:99:fa:5d:3f:b9:05:
                    15:35:79:d1:40:b5:7a:ad:3b:1c:fb:8c:56:96:ea:
                    de:86:0b:98:36:c3:33:86:40:78:64:1d:a4:a4:a4:
                    34:ae:da:5c:46:46:7e:b9:8c:da:0f:6b:15:1b:bb:
                    3d:69:15:fc:78:ad:1c:05:1e:c2:80:f2:e1:0e:46:
                    80:13:69:65:82:b8:f6:08:04:f2:51:c8:49:6a:16:
                    cf:21:1f:e2:11:f3:44:e3:c0:0e:95:19:09:bb:8b:
                    f5:39:0d:33:50:9d:10:4d:cd:88:62:2d:29:46:44:
                    87:85:72:92:64:aa:50:71:6f:dd:45:f5:4f:0c:7c:
                    ba:6c:33:74:0d:0f:17:0a:45:0d:9d:2a:ee:ab:6d:
                    74:5b:32:34:49:b2:43:a7:81:14:2e:6c:93:2c:a3:
                    3f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:78:27:A2:4D:0E:A2:9B:34:A1:16:3B:2D:BF:8E:ED:96:53:F8:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/fd357df7-1d12-3bb8-83fa-af16700b3a9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3/1c5af9e6-5009-44da-bd13-af5c8eb564c3.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9D:D2:46:92:3E:4B:35:C2:D0:95:26:1F:09:B1:45:5B:33:9D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5af9e6-5009-44da-bd13-af5c8eb564c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.213.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:74:8f:93:85:17:98:8b:05:e8:fe:aa:07:66:4d:d8:16:cd:
         86:28:a9:cc:62:dd:f0:2d:ee:a4:19:af:9c:b9:d0:fc:96:9c:
         76:4a:76:d0:c4:52:2b:2e:29:d4:10:2c:b7:1a:a2:f8:5f:0b:
         6e:d3:e2:8c:4f:f9:3e:51:75:eb:f0:34:84:b5:11:4c:4f:69:
         b9:c9:3d:5a:47:04:5e:b0:67:67:b9:45:15:cc:a9:35:7d:5c:
         c0:f3:17:99:2e:79:b1:fe:af:df:17:06:26:90:99:c4:20:4b:
         3c:54:40:8a:6c:1e:bb:05:df:4d:95:0f:fa:35:ef:b7:30:38:
         34:f6:f8:f5:38:43:b0:f4:62:c7:50:4b:fb:ef:30:90:1d:4f:
         13:95:d8:f0:6a:6c:4f:1b:4e:81:09:90:49:26:08:7d:64:20:
         7c:df:28:58:1c:81:0b:09:a8:da:fc:e7:3f:f0:5d:c1:4d:46:
         bc:8f:55:e4:a2:d6:2f:a3:45:f3:bf:3c:fc:61:5c:10:8e:5e:
         82:3e:d6:ef:dd:4f:56:b1:9d:6c:87:8d:d2:d7:bb:fa:c8:df:
         5b:e5:a0:82:cc:20:01:33:9e:90:44:d8:34:23:0e:4d:0f:4a:
         6a:8c:5d:a1:64:a2:a0:e0:a8:40:34:31:4b:d9:cb:d7:2f:e3:
         bb:96:7e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:29:32 2025 by rpki-client