Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/808407b9-3c30-36ad-87e5-20c34ff14b2b.roa
File:                     808407b9-3c30-36ad-87e5-20c34ff14b2b.roa (raw, json)
Hash identifier:          LrHuu3EIoPdZWiTsqupzq0F97RGt7tixs4W9JlSjln0=
Subject key identifier:   88:8A:6C:8D:D6:AC:2C:11:6D:A7:1F:88:0C:A0:8E:0A:CC:9F:2B:81
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584AB91BFA32A246E1BB31AA8180
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/808407b9-3c30-36ad-87e5-20c34ff14b2b.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     200184
IP address blocks:        216.218.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:fa:32:a2:46:e1:bb:31:aa:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=ce6626cc-772c-43d6-bdab-edf195ac04d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1a:4f:50:2b:76:f8:c5:f5:13:be:04:7d:4c:
                    c9:d2:74:87:e0:17:43:6e:1e:d0:36:8c:f0:fd:20:
                    65:07:6e:02:4c:5c:c7:bd:53:38:80:ce:b2:8b:a4:
                    e3:6d:d1:d4:86:2a:5a:0e:5d:17:10:06:2c:a5:f6:
                    ef:4f:83:ad:53:77:87:a0:87:8b:20:d8:bf:e0:1f:
                    06:97:9b:63:c5:34:58:ce:6f:84:c3:ab:f8:62:04:
                    5c:94:54:b3:96:13:34:54:9a:52:a1:82:22:be:5e:
                    e0:74:9f:b1:68:84:e7:49:39:3a:3d:14:63:8e:75:
                    30:a8:90:82:11:54:bd:bc:66:22:33:76:4f:8b:9b:
                    98:89:f0:19:3a:01:e5:94:e3:45:54:8b:3a:0b:75:
                    48:d2:c3:ed:c7:b3:ab:dc:b4:82:d1:37:d0:81:35:
                    d5:b2:e9:31:93:3b:77:4d:c1:40:13:0f:38:14:19:
                    93:36:2b:18:2e:23:4f:df:f1:ba:00:4b:72:1b:11:
                    ba:1d:e2:c7:bf:c2:24:d4:66:80:a2:33:db:c8:33:
                    02:2c:f0:0c:40:50:98:d4:44:1a:96:aa:9f:b2:a7:
                    40:fc:86:1f:68:62:17:f1:b3:bd:09:dd:4c:3b:b6:
                    74:f4:02:6f:9e:22:f6:3c:de:0c:da:5c:57:b5:aa:
                    f4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8A:6C:8D:D6:AC:2C:11:6D:A7:1F:88:0C:A0:8E:0A:CC:9F:2B:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/808407b9-3c30-36ad-87e5-20c34ff14b2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.218.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:65:e0:38:4f:f2:ac:46:72:c4:d5:42:84:b5:e9:73:c1:63:
         a2:e4:36:c7:51:82:14:bd:b1:bf:46:35:a6:46:0a:bc:b9:a3:
         e6:e3:34:0c:20:cb:08:8e:f6:8f:da:81:32:d9:73:c2:da:38:
         9a:55:53:79:56:d4:03:04:8a:0a:6d:1e:36:65:63:68:c4:e8:
         42:9e:3d:30:0f:bd:cd:ee:7b:69:ba:ef:2d:8f:a9:e2:30:eb:
         b9:51:89:8e:51:5f:c8:4b:0c:4e:f3:18:ba:b5:2d:43:d5:95:
         28:20:51:ba:1f:91:41:86:66:80:fa:ea:4f:8c:20:98:b1:c8:
         7c:62:94:61:82:59:24:7e:4b:74:e0:cb:b9:19:71:a5:98:4c:
         23:eb:5b:42:80:81:fb:70:53:12:84:5b:52:33:98:51:7d:82:
         fd:c6:ec:83:95:c1:c4:8f:a6:23:5d:cd:44:78:1b:ea:26:8b:
         85:8a:e7:59:87:c1:fe:a0:12:07:c4:b1:d5:03:d9:17:30:61:
         ea:33:f6:1c:5e:14:06:a6:59:dc:d7:d8:bb:d1:54:36:2d:0e:
         7e:07:33:77:03:08:3c:23:c1:67:9c:c9:9a:66:8e:ac:74:c1:
         68:aa:a7:ac:55:65:47:98:5a:b8:76:3b:3d:df:8d:10:a7:63:
         48:3d:27:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:17:02 2025 by rpki-client