Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/99265a07-5c04-32b8-8a69-21323da55771.roa
File:                     99265a07-5c04-32b8-8a69-21323da55771.roa (raw, json)
Hash identifier:          6vzfwjgHPsadss0D6AmLX0Sn/ljyQAZ9PEBQa37w8HY=
Subject key identifier:   B2:81:39:09:D3:8A:74:68:24:28:7E:2D:D3:8F:83:F6:13:64:A3:3A
Certificate issuer:       /CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
Certificate serial:       010D0C9F4328584BB2F82FC7A3B40C18B9554200
Authority key identifier: 35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/99265a07-5c04-32b8-8a69-21323da55771.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     14041
IP address blocks:        216.38.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f8:2f:c7:a3:b4:0c:18:b9:55:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=e72e61eb-1c14-43df-8b64-60cb5cc32765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a6:5f:65:6b:4b:fd:e0:71:98:ef:06:05:a4:
                    e7:b8:fc:a8:ff:ef:13:f4:f5:23:02:51:f0:15:57:
                    57:1f:00:0e:a7:12:e6:29:2b:a7:b6:c0:65:bc:fb:
                    3f:3b:19:92:d2:65:b9:0e:53:b8:12:6e:6a:93:77:
                    0a:fb:03:41:7a:57:68:2b:26:14:dc:14:eb:4b:33:
                    42:9d:a9:f7:61:62:58:85:88:46:27:37:83:a3:71:
                    03:6f:3a:5f:01:f7:9e:ae:ac:40:7a:ed:23:db:97:
                    b0:a9:f1:a2:d6:de:39:1f:84:e3:55:2e:8d:07:6b:
                    ea:61:df:96:2e:d2:90:e0:6f:11:2b:2d:f6:f4:17:
                    5b:60:f5:4b:36:27:92:0a:9f:08:fa:5a:68:b7:71:
                    0c:31:c8:ef:a6:7f:8f:fa:7f:2c:81:e0:1b:50:ee:
                    64:11:3b:2a:78:e2:33:78:28:4d:2a:ce:a3:ba:4c:
                    63:9d:e7:95:8f:a3:c4:e6:57:d3:a3:0b:2f:86:90:
                    9a:44:36:af:de:40:0d:b4:85:2e:a5:56:33:c9:bb:
                    84:86:f6:18:0a:80:6b:27:50:ce:72:f2:53:64:f3:
                    f1:76:27:c0:37:b0:c8:03:97:5e:89:d5:82:c3:54:
                    40:28:52:48:61:64:8c:f3:de:19:dd:a4:f4:95:99:
                    c4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:81:39:09:D3:8A:74:68:24:28:7E:2D:D3:8F:83:F6:13:64:A3:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/99265a07-5c04-32b8-8a69-21323da55771.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl

            X509v3 Authority Key Identifier:
                keyid:35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:bd:d8:94:5c:83:84:17:fa:d1:25:d0:6d:42:5f:f0:b9:cc:
         dd:03:79:77:b5:4d:0a:ed:d6:87:c5:68:44:96:83:68:7c:31:
         76:68:2d:b3:2b:fe:05:7f:7a:1e:20:cb:1b:a2:c2:83:4e:cb:
         39:27:d6:02:b3:82:00:1f:64:e9:b6:2f:24:57:6b:d3:da:25:
         d8:67:57:88:37:8c:eb:cb:e9:e6:05:82:31:9e:08:ad:a0:d7:
         f3:5e:ea:82:c9:8c:e6:ec:a8:df:46:d9:43:e8:07:ff:8e:4d:
         cb:84:2c:88:4c:5b:10:1e:b7:94:ef:f9:73:50:e9:5a:42:5c:
         a2:f9:18:c2:aa:1f:2d:f1:70:a4:00:b1:ec:52:cb:4a:ec:33:
         b8:40:7b:93:cd:e1:22:2e:a5:50:f5:66:f3:41:8a:73:a3:a6:
         0a:ff:25:12:37:75:b2:82:6a:c0:28:9d:27:48:4b:0c:50:81:
         16:af:5d:f5:8d:9f:8f:f1:c5:c1:d7:17:e5:d3:9d:60:0e:9f:
         f9:f3:39:33:7a:d2:79:18:89:9f:6e:ca:c3:a3:45:ec:82:fe:
         09:13:2e:8f:04:fb:fd:39:05:6c:cc:f3:91:d7:83:38:e3:5a:
         71:ae:38:4f:7d:b7:83:91:5c:e9:0b:71:0c:dc:cf:e6:b8:5a:
         98:0d:dc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:31:18 2025 by rpki-client