Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/16a01828-a773-33f2-83c1-0d9de7ae76c6.roa
File:                     16a01828-a773-33f2-83c1-0d9de7ae76c6.roa (raw, json)
Hash identifier:          hcvKTptkNFeyLdrHGKxd0FYAdiSRRlQi5u70/GXiFA8=
Subject key identifier:   0D:AB:66:88:E6:78:D3:E2:F7:E7:D7:55:67:F8:DE:EE:EA:9D:B1:E9
Certificate issuer:       /CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
Certificate serial:       010D0C9F4328584A9FFB93F244286B2D8B03B360
Authority key identifier: C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/16a01828-a773-33f2-83c1-0d9de7ae76c6.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     32590
IP address blocks:        162.254.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:93:f2:44:28:6b:2d:8b:03:b3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f29918e2-971b-4c6a-bc57-75bdb88796a9
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=fe5dff66-7658-409d-94da-4f4c458a311a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:44:d9:3d:69:f3:fb:0d:71:12:93:5c:fa:
                    ed:15:20:92:84:4e:4d:0b:f2:3f:91:f5:f2:c0:45:
                    27:b5:4e:25:65:6b:42:e6:fd:0d:c2:6b:05:fe:70:
                    6a:d6:b8:d5:3e:65:a6:31:70:0f:45:94:7b:be:91:
                    9c:53:48:75:e0:71:cd:44:24:17:08:38:89:f6:0e:
                    9f:03:5e:3a:60:dc:d6:e5:85:2f:0a:c9:f4:a9:30:
                    d2:96:f3:9b:8b:60:4a:c2:f5:15:df:f4:83:51:06:
                    f8:a6:d7:fe:60:3e:5f:12:c0:82:14:c3:be:66:01:
                    ed:34:0d:12:7d:37:e1:87:48:ff:1c:9a:3f:f0:38:
                    39:d5:c7:cb:5d:48:41:04:9b:14:68:8a:49:9b:69:
                    ef:c0:66:93:dd:56:d9:31:8a:92:e7:0c:c3:1a:76:
                    c3:55:d2:46:95:c1:9c:9a:ef:c1:6e:23:2d:94:d4:
                    5d:e7:54:72:f2:09:30:b2:a6:e9:2f:26:83:1e:06:
                    f6:35:c6:37:51:b2:27:07:46:a5:09:29:b7:94:a3:
                    c3:33:b2:64:50:18:ea:92:cb:fe:de:9a:d7:84:90:
                    39:cc:96:32:af:17:c1:81:db:3e:c7:e5:e7:6e:49:
                    3f:64:cf:ea:6c:80:d5:82:3b:d3:41:63:56:e1:c7:
                    30:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:AB:66:88:E6:78:D3:E2:F7:E7:D7:55:67:F8:DE:EE:EA:9D:B1:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/16a01828-a773-33f2-83c1-0d9de7ae76c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9/f29918e2-971b-4c6a-bc57-75bdb88796a9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:A2:9F:A5:63:02:53:CD:87:5E:AF:A2:1A:8E:35:EC:94:73:A1:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f29918e2-971b-4c6a-bc57-75bdb88796a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:e9:26:7a:0d:6e:e2:e2:4c:fe:a9:54:e1:ee:65:bc:30:3d:
         73:46:29:16:61:b8:f7:25:54:85:d8:22:0c:43:57:fe:d5:84:
         8a:58:90:c7:3c:c8:a0:08:68:64:61:76:88:31:01:a2:fa:ab:
         50:db:a4:d8:5d:89:25:4e:e1:12:fc:72:64:c1:3c:f1:ac:26:
         56:1d:46:62:80:5a:f5:b8:2e:19:2c:1f:4f:6f:99:44:91:34:
         d7:39:a9:27:25:28:e9:39:c6:e7:8c:89:18:89:bd:af:0a:39:
         3a:0e:c6:a8:7d:4e:04:e4:e5:22:d6:aa:56:03:f1:b8:78:62:
         0f:d9:43:2e:b5:1e:de:8a:de:ca:43:0c:10:aa:38:60:bd:2a:
         d3:0c:bc:65:85:73:26:02:4c:57:31:3b:57:84:b3:7d:b4:69:
         94:77:aa:e8:fe:ae:ce:6a:64:69:9f:03:2d:94:a1:e8:fb:21:
         5c:da:a0:ce:94:4a:c2:b9:c2:4a:3b:92:65:1d:b8:16:fa:6e:
         d3:4e:82:a8:f8:21:77:0a:72:bb:8f:9f:f3:14:4e:d0:48:58:
         3e:72:9c:f5:10:d1:d7:a0:77:e5:ab:cf:59:81:04:d7:25:3a:
         d8:cf:0b:43:26:f2:15:ad:ff:9c:2d:e8:c2:12:bd:f8:68:c8:
         c7:b8:ad:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:24:44 2025 by rpki-client