Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/95774164-cb15-3162-b6d9-0bac014ef78d.roa
File:                     95774164-cb15-3162-b6d9-0bac014ef78d.roa (raw, json)
Hash identifier:          hlPAgcBYll/cS61XoINkbFUXi/9djVt3+sRY5HyjYYQ=
Subject key identifier:   98:99:F6:E1:E2:BC:9B:3A:05:F2:8D:7A:38:17:EC:07:47:46:15:02
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584BA0D24DFD2348502DB9FA1A40
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/95774164-cb15-3162-b6d9-0bac014ef78d.roa
Signing time:             Fri 24 Oct 2025 13:00:38 +0000
ROA not before:           Fri 24 Oct 2025 13:00:38 +0000
ROA not after:            Thu 22 Jan 2026 14:00:38 +0000
asID:                     16815
IP address blocks:        216.219.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a0:d2:4d:fd:23:48:50:2d:b9:fa:1a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Oct 24 13:00:38 2025 GMT
            Not After : Jan 22 14:00:38 2026 GMT
        Subject: CN=21d8a3a5-a82d-44a2-9fec-094bb552e244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b6:13:cf:45:d4:08:d1:5a:eb:00:f0:32:9d:
                    ff:a2:aa:f2:66:c2:f4:99:a5:d1:62:c3:68:3a:d3:
                    ed:33:16:be:5e:a3:e1:47:16:fa:7e:5b:f5:a0:64:
                    8d:40:38:15:14:58:b2:2f:3b:1f:8c:b5:a1:3c:b0:
                    ee:56:f6:19:9f:4f:f5:f7:0c:26:45:b4:af:ec:47:
                    ec:7d:c6:cb:f3:99:0c:21:47:38:d1:ac:83:ea:72:
                    71:c5:6b:90:d7:e8:00:5c:65:a6:2e:26:c9:c8:4d:
                    6a:05:cb:5d:7f:4c:ce:b9:0f:ad:af:ae:eb:44:b6:
                    f6:4c:28:04:a7:98:64:6d:9e:7d:fd:11:a2:4a:ec:
                    de:ac:91:3b:54:7e:84:f0:d2:58:af:71:88:77:c3:
                    9b:91:ae:9e:d8:6b:54:32:e2:ab:2b:f8:1c:7c:4a:
                    f6:bb:06:92:b0:40:49:5f:e1:b4:73:f2:0b:8e:60:
                    1b:d5:b6:25:f2:76:d4:99:a8:ac:67:3c:b4:e3:c4:
                    49:83:85:39:69:4e:e3:e5:5d:93:c8:3a:5d:ed:52:
                    27:62:d0:59:6a:47:97:2f:2e:7b:f1:05:3b:fe:99:
                    94:a7:03:e3:a0:90:a9:f7:9c:20:b6:38:60:ef:fe:
                    31:77:65:3c:61:d5:a1:e3:2b:87:bc:9f:04:17:ee:
                    63:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:99:F6:E1:E2:BC:9B:3A:05:F2:8D:7A:38:17:EC:07:47:46:15:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/95774164-cb15-3162-b6d9-0bac014ef78d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.219.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:8a:6e:7b:d3:57:7d:4c:96:f6:82:84:88:3a:4d:d4:ad:54:
         9c:05:39:e7:11:70:ee:6a:c6:e9:1b:bb:4f:b4:b8:f0:21:4c:
         16:86:3c:6c:82:f0:f7:e7:e5:6e:b6:6d:80:ba:aa:6b:16:8a:
         fa:46:0a:73:62:bf:ec:16:86:da:d3:47:ef:f4:a8:19:7c:f9:
         d7:8e:eb:41:b6:07:ec:1b:e7:70:2b:0c:3d:c0:ac:38:1e:35:
         62:18:14:80:60:a4:a1:99:e8:17:67:d3:2d:6d:1e:f6:ba:15:
         01:be:7e:54:72:5b:4f:5f:12:54:84:11:85:56:6e:7a:6f:5e:
         54:af:64:5d:54:1d:83:ed:0c:bd:4c:4f:bf:3d:30:10:3a:4f:
         55:ec:b1:4a:e3:57:b4:d2:66:fc:ce:4e:a3:b4:80:41:fc:ed:
         72:35:d0:3a:c9:35:aa:c3:6d:ab:de:b1:ac:84:bb:a2:8a:6e:
         bb:dc:68:68:f7:3f:53:bd:93:9a:1f:a4:f8:5b:08:1f:d6:c2:
         90:9d:68:29:32:5e:5e:14:9f:35:2a:23:9b:aa:11:23:74:ba:
         8e:dd:c4:d3:a6:dc:2e:d5:87:1f:72:3e:74:ec:ca:8b:00:76:
         98:99:a1:6b:05:7b:21:07:c9:4b:bf:9b:73:b3:dc:c6:84:ae:
         e8:d1:68:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:47:17 2025 by rpki-client