Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/418343bf-b286-381e-8df3-433b3521eaf7.roa
File:                     418343bf-b286-381e-8df3-433b3521eaf7.roa (raw, json)
Hash identifier:          E1nqTM/2EbLU4CHdm3Hun9sI5DAr+J4ahgf6e5WVTD4=
Subject key identifier:   41:11:3C:C2:E7:AE:5F:DE:4D:87:19:25:9A:27:5C:F5:41:35:93:00
Certificate issuer:       /CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
Certificate serial:       010D0C9F4328584AABB15A5C83DED22FA7DEDE08
Authority key identifier: B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/418343bf-b286-381e-8df3-433b3521eaf7.roa
Signing time:             Mon 28 Jul 2025 17:41:20 +0000
ROA not before:           Mon 28 Jul 2025 17:41:20 +0000
ROA not after:            Sun 26 Oct 2025 17:41:20 +0000
asID:                     7859
IP address blocks:        216.146.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:b1:5a:5c:83:de:d2:2f:a7:de:de:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0d6fd50-b543-4e97-a7f3-0d6a5908ca38
        Validity
            Not Before: Jul 28 17:41:20 2025 GMT
            Not After : Oct 26 17:41:20 2025 GMT
        Subject: CN=d8171cf7-8ab3-467a-93e2-b7e1d8d5bc35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a0:40:81:69:75:96:56:c8:12:0f:78:93:74:
                    74:d5:d5:dc:db:60:fd:a5:7d:e3:2b:b1:42:d8:22:
                    b2:54:de:e7:25:df:98:85:57:e3:e2:9a:c1:64:a7:
                    c1:40:c5:42:47:5f:76:da:ff:23:f1:c1:f3:3d:9e:
                    26:04:17:0d:94:9c:a6:7b:69:bd:be:6e:d5:61:4f:
                    da:ef:bf:7a:4d:ab:59:f7:22:90:a7:18:30:3f:cc:
                    fe:fd:32:66:ea:19:31:04:a9:e9:4c:d4:da:5e:b3:
                    67:6f:0b:f9:dd:28:9e:08:5e:3b:3e:01:53:7e:fc:
                    77:47:53:b6:e9:6b:a0:59:42:76:5e:9f:8c:58:8e:
                    86:7f:8e:72:21:91:aa:cd:35:51:b1:6d:d3:de:74:
                    0d:00:d7:03:cd:de:fa:7e:da:55:7b:e1:2b:ad:e8:
                    8c:57:7b:eb:b0:e5:6f:f7:30:19:93:4c:f1:94:3f:
                    f7:77:82:ff:d5:79:87:96:bc:44:47:1f:6f:9d:e1:
                    96:1a:2f:f9:fa:49:00:64:99:35:b4:ec:e1:78:cd:
                    8c:a7:06:17:ac:49:b3:c9:76:d3:53:3c:c4:72:69:
                    dc:5e:78:3d:d6:d2:42:cd:0c:42:db:ab:f5:d4:27:
                    5a:00:16:26:bb:d0:28:18:85:e6:9a:53:23:2f:64:
                    86:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:11:3C:C2:E7:AE:5F:DE:4D:87:19:25:9A:27:5C:F5:41:35:93:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/418343bf-b286-381e-8df3-433b3521eaf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.crl

            X509v3 Authority Key Identifier:
                keyid:B8:2D:73:8E:4B:5A:99:ED:25:54:55:58:EF:D1:33:51:15:68:F4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b0d6fd50-b543-4e97-a7f3-0d6a5908ca38.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:78:fe:4a:ef:4e:7f:b2:30:e4:cf:d2:bf:07:4e:34:66:23:
         68:24:52:46:de:88:10:df:16:96:da:29:b6:6b:44:e9:ac:51:
         d7:23:db:b3:f3:e7:5e:d9:a4:8f:67:22:7e:bb:a5:f2:bf:b2:
         84:e4:bf:9e:26:64:38:80:a6:a9:4b:74:dd:7e:55:ee:91:71:
         c0:66:aa:5b:49:52:91:54:1c:d0:b1:05:2e:39:eb:34:19:16:
         93:91:7e:35:25:6e:f8:a2:25:60:3b:96:3e:56:0a:21:b4:68:
         94:f8:79:b6:fd:07:e2:0a:dc:22:e8:30:8f:17:dd:d1:5f:24:
         e9:b9:3f:9d:d7:49:5f:d2:bb:b9:4f:33:b7:64:a0:20:a6:9a:
         37:85:e1:17:ea:eb:43:85:84:02:0f:89:39:57:73:8c:3f:d9:
         4c:6c:ad:30:1b:5f:27:83:f7:74:0c:10:6c:29:bd:ef:f6:e3:
         7b:db:e4:8d:fd:e4:e9:67:b7:31:f0:af:27:7e:2b:41:9b:e9:
         d4:4f:4a:83:20:2b:57:e2:4d:37:2b:0e:1e:ec:b1:ce:f6:6e:
         88:b8:7f:dd:27:8c:e8:f4:b0:4d:5e:4d:af:6e:41:6a:11:1e:
         d5:c1:bc:07:75:82:e6:34:79:cd:e4:ce:7f:56:cd:f8:60:8c:
         38:b3:17:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:21:30 2025 by rpki-client