Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b91cefc2-5e14-330e-b561-e34c119b1bef.roa
File:                     b91cefc2-5e14-330e-b561-e34c119b1bef.roa (raw, json)
Hash identifier:          wDWWXV27KOGvngo7w2cht+rdbown3IbQGPWBXFMTNqY=
Subject key identifier:   AF:03:79:68:78:0A:B5:91:7F:96:0D:90:DE:8F:83:DD:04:64:95:E5
Certificate issuer:       /CN=2dbf604f-24b0-426e-809d-e65b08be5d50
Certificate serial:       010D0C9F4328584A89A6155FDEA8EE938FE00800
Authority key identifier: 9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b91cefc2-5e14-330e-b561-e34c119b1bef.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     16433
IP address blocks:        162.217.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:15:5f:de:a8:ee:93:8f:e0:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2dbf604f-24b0-426e-809d-e65b08be5d50
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=aac8aa92-3824-4c37-9fdb-00b6a1d98468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7f:f9:52:1f:62:3d:de:6b:c6:d3:ec:e4:ed:
                    f1:d4:a2:5a:97:31:2f:46:aa:ba:6a:89:11:42:c9:
                    e8:3f:30:10:08:e8:ec:52:cb:94:21:32:8b:4d:84:
                    2a:ca:c8:72:2b:02:a9:e9:89:c9:c5:3d:16:4f:80:
                    58:8a:c3:ef:31:0e:0e:f7:53:c9:a2:7b:8d:42:18:
                    8a:3d:17:82:9f:b5:0d:b9:ba:3b:5d:f3:48:d3:19:
                    77:c3:7e:4e:1b:78:79:d4:30:f9:f3:00:46:bf:c6:
                    b4:b0:fc:b3:43:b6:62:00:25:ab:64:95:26:9d:5d:
                    83:20:55:97:c4:2d:9f:a7:0f:dd:4c:62:bb:6d:e1:
                    8e:95:ca:aa:9f:d0:a3:b3:be:e8:f4:12:e7:c6:b1:
                    b2:85:88:aa:0e:08:71:18:96:a6:3f:f4:80:59:a5:
                    92:69:04:52:07:a1:4b:1d:0a:4c:5c:15:80:ec:a7:
                    fb:28:d3:f9:25:11:3b:39:d5:38:a5:1c:2c:58:46:
                    a4:01:b1:86:c6:f6:20:f5:2f:d2:19:50:00:6c:b7:
                    fd:a2:0f:a6:c4:4c:c4:40:70:cb:7a:42:80:ca:0f:
                    eb:cb:c7:65:d1:b8:6b:f8:5f:66:d4:c1:12:f1:15:
                    00:91:34:e6:cc:7a:a7:a6:57:f9:8e:8c:9f:7b:b1:
                    a3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:03:79:68:78:0A:B5:91:7F:96:0D:90:DE:8F:83:DD:04:64:95:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/b91cefc2-5e14-330e-b561-e34c119b1bef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50/2dbf604f-24b0-426e-809d-e65b08be5d50.crl

            X509v3 Authority Key Identifier:
                keyid:9F:0B:96:E4:B5:88:59:9E:EE:BA:41:79:91:C0:93:C9:D1:C3:F5:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2dbf604f-24b0-426e-809d-e65b08be5d50.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:ce:74:d7:fe:31:56:c6:c2:b1:fd:69:96:39:8f:c6:ee:4d:
         e0:c7:66:ab:27:87:08:1b:e8:76:61:6c:fa:0f:73:3e:18:6c:
         67:70:19:fb:2c:33:26:99:c8:41:3f:e7:6e:94:6d:78:a6:73:
         b1:95:8d:03:ef:e4:81:52:3a:0d:f0:ef:89:b7:11:f2:28:3c:
         73:de:2a:73:01:d3:c0:ee:e3:96:3a:b7:d6:da:3d:e0:cd:97:
         c9:dd:8e:7f:6f:bd:84:fd:34:b5:0f:f1:9a:88:84:d3:60:79:
         69:0d:23:b7:fc:c2:94:d7:9f:81:f9:ab:41:68:19:92:d0:f4:
         4e:53:b0:d2:3f:29:c6:68:0d:5d:05:93:3b:e3:1e:77:01:76:
         98:6b:ef:25:56:1c:96:a7:ab:34:8a:dd:06:62:71:52:ad:67:
         93:5c:99:65:a1:c4:48:33:91:49:e1:cc:89:de:5f:a7:ca:cb:
         59:d6:66:91:f1:b9:20:c0:88:53:21:59:c5:73:ca:d5:85:d5:
         96:38:2c:e5:e7:53:33:49:9c:7c:a7:00:10:68:84:c6:85:73:
         6c:fd:be:e0:06:b1:64:33:44:23:4a:51:4f:9b:35:25:d1:f9:
         f1:7f:0c:8f:56:d3:1b:c1:d4:98:a7:d9:6e:f8:08:4a:d4:ad:
         61:25:f6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:02:56 2025 by rpki-client