Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eaab051d-9309-3a0f-a1f0-c8ebf2fdf3b6.roa
File:                     eaab051d-9309-3a0f-a1f0-c8ebf2fdf3b6.roa (raw, json)
Hash identifier:          aTmj/hYwC5YcokdIkm9ezC2H+QIdf/4jmY+UeWUmm98=
Subject key identifier:   6F:CA:9A:15:F0:52:3C:C4:33:65:CB:F1:05:FF:02:14:2B:52:D5:2B
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F4328584B99D77A43E3E810046E6DA2E0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eaab051d-9309-3a0f-a1f0-c8ebf2fdf3b6.roa
Signing time:             Wed 22 Oct 2025 01:00:31 +0000
ROA not before:           Wed 22 Oct 2025 01:00:31 +0000
ROA not after:            Tue 20 Jan 2026 02:00:31 +0000
asID:                     19905
IP address blocks:        173.16.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:99:d7:7a:43:e3:e8:10:04:6e:6d:a2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Oct 22 01:00:31 2025 GMT
            Not After : Jan 20 02:00:31 2026 GMT
        Subject: CN=f6417583-36e7-44fc-b8c9-078e022d3236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1f:40:4f:04:be:a6:16:a7:12:59:7e:41:87:
                    a9:01:15:ac:38:46:70:d8:a9:bd:d1:97:1d:07:fc:
                    ec:32:23:8d:31:1e:2f:f5:8d:04:5c:3b:e1:0f:2e:
                    6d:67:39:29:0f:fd:18:ca:2a:b1:9d:fe:e2:ca:e0:
                    c0:8c:c8:22:c1:7f:9d:20:9f:7d:e8:98:4c:9e:4f:
                    4c:92:bc:7d:87:fb:ce:08:eb:a1:d3:29:5b:89:76:
                    52:d3:98:a5:a6:bc:ee:5c:58:70:bd:4f:89:73:7a:
                    24:0b:df:8a:e5:11:8a:0c:32:fc:4e:33:29:5f:e7:
                    68:2a:18:f5:13:2c:25:a4:71:81:44:93:28:44:08:
                    ee:63:02:16:8e:a8:02:91:2a:61:63:8d:cd:b8:82:
                    75:ea:00:80:ea:d0:e6:71:f1:ef:ec:62:65:42:54:
                    fd:7c:c3:ed:78:4b:16:c4:b5:61:4a:06:87:98:c1:
                    76:1e:f0:be:66:d2:b6:8b:b6:9f:52:9f:e7:75:99:
                    f0:8a:99:b9:c6:df:74:97:c8:e5:83:ed:09:1f:e0:
                    a6:9f:c4:e1:d5:67:11:e7:05:3a:d5:09:c6:13:56:
                    00:fa:3a:1f:ab:a7:e7:d0:7e:d3:bb:94:10:22:65:
                    72:ba:c8:b7:31:5e:9d:85:b9:76:b7:e1:ac:18:df:
                    fb:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:CA:9A:15:F0:52:3C:C4:33:65:CB:F1:05:FF:02:14:2B:52:D5:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eaab051d-9309-3a0f-a1f0-c8ebf2fdf3b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.16.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:f9:eb:71:0a:ef:1c:b9:df:bf:20:5c:94:1a:66:4b:90:b8:
         4d:3e:8c:4f:7b:45:7b:d6:24:eb:aa:ac:bc:ff:fb:09:df:b3:
         4b:84:9b:60:4f:9a:b9:7a:09:12:f5:8e:27:3b:4e:21:dd:01:
         69:7f:f7:c8:1a:06:a2:5b:e5:4b:f5:a1:fa:b2:ef:d5:62:22:
         9c:e7:20:ca:56:d6:35:0f:63:2f:5d:be:85:c2:58:7e:ca:f7:
         99:5a:48:96:cf:af:5f:77:23:6e:4e:a4:ac:fc:44:6a:c2:85:
         a1:bd:a5:d5:ca:58:35:7a:31:eb:b9:73:54:d9:00:95:c2:72:
         13:db:2c:75:ac:2a:4f:54:aa:bc:f4:5c:e1:59:5f:de:7f:ee:
         ed:f3:09:44:3c:99:71:0a:70:49:69:5d:2a:79:fb:1a:64:bb:
         6f:e3:fe:9a:00:2c:6c:4c:60:c9:98:4d:ef:61:c7:53:5a:53:
         01:89:3b:24:62:d0:1f:1f:e8:51:57:59:c0:5b:51:13:a8:23:
         b8:40:70:ee:15:4f:82:b7:a1:36:fe:f3:c1:7e:a3:ef:cd:3c:
         d7:89:11:f6:61:73:82:32:67:1c:5b:be:78:65:30:7f:2e:0f:
         a0:b6:f6:e2:3d:f0:7a:b6:be:bd:da:77:59:d1:87:40:f6:16:
         8c:d5:48:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:56:10 2025 by rpki-client