Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f/8f193734-8ddf-38fd-a178-527d2ea93f3a.roa
File:                     8f193734-8ddf-38fd-a178-527d2ea93f3a.roa (raw, json)
Hash identifier:          8q9aOeLA6DwUf2UgapCC2CioLPMroc/cxdicv0ea1xo=
Subject key identifier:   44:C4:FE:B8:B3:F1:A1:9A:31:19:22:B8:9B:C7:F8:F0:E9:0E:F8:DC
Certificate issuer:       /CN=15c06a4e-0bff-4d29-8219-f3995e34a55f
Certificate serial:       010D0C9F4328584BBA10456EB4B4E964D813FB00
Authority key identifier: 0C:EF:5B:7A:0A:2C:08:43:B3:19:9E:38:FD:C4:BA:3A:9E:4E:15:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f/8f193734-8ddf-38fd-a178-527d2ea93f3a.roa
Signing time:             Sun 02 Nov 2025 14:00:38 +0000
ROA not before:           Sun 02 Nov 2025 14:00:38 +0000
ROA not after:            Sat 31 Jan 2026 14:00:38 +0000
asID:                     14618
IP address blocks:        209.196.215.0/24 maxlen: 24
                          209.196.216.0/24 maxlen: 24
                          209.196.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f/15c06a4e-0bff-4d29-8219-f3995e34a55f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f/15c06a4e-0bff-4d29-8219-f3995e34a55f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ba:10:45:6e:b4:b4:e9:64:d8:13:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c06a4e-0bff-4d29-8219-f3995e34a55f
        Validity
            Not Before: Nov  2 14:00:38 2025 GMT
            Not After : Jan 31 14:00:38 2026 GMT
        Subject: CN=2405bce4-bcd1-4c44-ac96-045afcd8d053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:35:b1:8a:0d:c5:64:79:ba:54:0d:41:7e:f4:
                    1f:18:e2:3c:5c:2d:07:a0:e1:f0:43:3d:21:b0:bf:
                    c5:ff:16:6a:a6:b7:6f:36:15:7b:a7:d8:16:cd:67:
                    5c:91:22:6a:d8:eb:37:32:d9:36:8f:64:d3:76:ce:
                    2a:e9:80:3c:9f:bb:76:94:3f:57:dd:58:ac:72:25:
                    20:16:5a:9a:45:a1:de:a4:92:df:a7:e2:88:0b:7d:
                    0a:d7:59:6f:d2:74:06:42:c6:f7:ac:2e:be:e3:07:
                    d9:26:a9:53:c5:64:8f:ec:e2:59:ce:d1:2b:f0:f3:
                    29:bb:32:18:47:6c:1b:a0:73:3f:19:f9:0d:84:20:
                    e1:a4:49:3d:95:f3:04:2d:c7:59:0b:16:27:97:46:
                    61:6a:fa:e5:a3:a5:5d:96:41:c6:97:57:12:c5:da:
                    0a:38:a4:a4:86:3b:3f:24:e9:e2:77:19:66:e4:90:
                    95:3f:46:33:a5:0f:b9:c3:29:68:71:6b:51:de:12:
                    2f:96:f5:01:e5:50:31:4b:5b:59:74:32:45:4e:f6:
                    99:8d:4a:a6:31:c4:22:2a:5c:3d:d8:0a:10:b9:9a:
                    b0:4b:47:99:1c:c6:ad:74:94:3a:53:01:f3:28:c5:
                    0b:89:14:d6:cb:5f:9a:7e:04:f2:82:2c:be:4f:c3:
                    2b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:C4:FE:B8:B3:F1:A1:9A:31:19:22:B8:9B:C7:F8:F0:E9:0E:F8:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f/8f193734-8ddf-38fd-a178-527d2ea93f3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f/15c06a4e-0bff-4d29-8219-f3995e34a55f.crl

            X509v3 Authority Key Identifier:
                keyid:0C:EF:5B:7A:0A:2C:08:43:B3:19:9E:38:FD:C4:BA:3A:9E:4E:15:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/15c06a4e-0bff-4d29-8219-f3995e34a55f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.196.215.0-209.196.217.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:10:10:9a:73:1c:4d:82:14:3c:c8:30:91:fc:99:14:36:f2:
         6e:c9:49:e3:39:80:c9:82:de:c8:d7:a2:9b:61:0c:22:ca:5e:
         38:e9:64:8c:af:53:41:f2:1c:12:79:85:09:45:5b:3b:85:c6:
         57:e9:66:e1:67:5f:91:1d:c5:5d:90:ae:b7:58:4a:ad:f2:b7:
         24:72:66:9e:38:71:7e:f8:58:79:df:36:8d:8b:d7:b6:fd:ad:
         e0:da:76:fc:82:31:4e:ce:ff:ed:9f:fb:4f:1a:84:9e:43:8b:
         be:db:f1:75:df:77:a0:ec:ce:ff:cb:e2:da:08:bb:61:44:10:
         79:e2:2a:9a:c3:e8:c4:6a:fe:b0:29:49:71:73:1d:a4:c5:bc:
         50:82:a5:88:11:32:6f:5d:76:39:8c:6e:59:a8:15:8e:4b:9f:
         3f:28:b0:1d:ef:00:0e:61:de:56:94:91:a6:d7:52:db:b1:f4:
         65:3b:f5:d9:8e:30:ac:ab:ce:1d:98:13:4b:49:c8:33:94:66:
         d8:c0:45:09:43:fa:95:63:c5:dd:84:9e:45:77:9c:1a:60:e0:
         95:89:c9:88:72:81:94:0c:d2:31:0c:5e:0c:66:3b:5a:df:e6:
         78:b9:f0:cb:5b:6a:73:fd:1e:89:c0:16:fd:8f:64:c2:16:8c:
         21:eb:b9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:55:56 2025 by rpki-client