Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7ca90026-c3d0-3be1-867e-4d7415cfbdb4.roa
File:                     7ca90026-c3d0-3be1-867e-4d7415cfbdb4.roa (raw, json)
Hash identifier:          dcfzxhXhu9MQIjDgdMEh1mWRBmvf/4vvs4kO/LHJ7+0=
Subject key identifier:   C7:B5:8F:62:57:F8:B6:7C:5C:0A:8D:B0:E7:7E:A3:40:EE:4E:9C:5E
Certificate issuer:       /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial:       010D0C9F43285849FE0FE8809ED8913D566CFB20
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7ca90026-c3d0-3be1-867e-4d7415cfbdb4.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     13414
IP address blocks:        199.16.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:e8:80:9e:d8:91:3d:56:6c:fb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=eded02e3-3ae3-4c29-8cc4-a100f06bd1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0b:7d:6f:21:04:d0:a4:d2:cd:a5:4a:77:bf:
                    0d:ba:09:3b:37:1c:28:e0:83:f6:ef:2a:c5:07:7c:
                    b6:81:57:2c:39:de:46:ad:9f:34:6b:eb:49:d9:4e:
                    ab:6a:24:6e:34:8f:87:b4:9d:71:3c:c1:7c:3d:71:
                    c4:78:9d:cf:a7:d9:6b:d8:1f:68:b3:82:6e:7c:c8:
                    b7:67:63:b2:a4:16:46:f4:d9:29:43:60:7d:01:c3:
                    d6:44:f6:11:bf:71:08:e4:2e:93:26:9b:c0:ba:07:
                    88:ae:9b:e2:e7:26:4d:ad:36:14:ac:87:f0:96:ea:
                    60:03:a4:17:95:9d:b0:3d:ab:27:2d:ec:dc:5b:5c:
                    28:91:c1:64:35:e6:89:dc:cd:65:b3:d0:33:72:56:
                    7b:81:cd:4d:e6:af:e8:3d:46:92:fb:19:b4:11:6e:
                    92:10:2c:f4:a7:8d:e7:45:e3:2d:07:56:af:e6:d3:
                    23:e5:bf:4b:ef:4d:61:35:8f:f4:03:c9:c3:0b:a9:
                    61:f8:b4:16:af:4c:8d:52:13:d9:e7:aa:b6:3c:81:
                    85:35:4d:39:05:62:87:76:52:fa:4e:39:b9:50:a3:
                    12:01:94:f0:81:4c:cc:74:11:6f:f3:24:a1:c4:be:
                    a5:f5:91:25:56:ad:b7:97:6c:42:3f:ae:34:37:f7:
                    8a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B5:8F:62:57:F8:B6:7C:5C:0A:8D:B0:E7:7E:A3:40:EE:4E:9C:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/7ca90026-c3d0-3be1-867e-4d7415cfbdb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl

            X509v3 Authority Key Identifier:
                keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.16.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:bb:2a:ab:62:a2:bf:83:97:c3:ce:10:ae:e4:ff:7d:37:d4:
         a4:4b:87:3c:54:c4:87:0c:1e:1a:17:7d:e4:1c:cb:c2:d9:d4:
         b5:c0:37:94:ae:3a:3a:aa:b5:dd:0d:10:38:a1:3f:fd:9b:73:
         1e:c1:67:27:e0:41:9f:16:97:f5:85:51:63:54:03:ac:bd:c0:
         e2:22:6c:fb:e2:25:1e:84:04:de:ee:6e:93:2f:24:a8:85:ff:
         c4:c3:3b:d5:f6:56:b1:30:23:75:5b:16:7b:44:2f:bb:e1:eb:
         eb:3f:54:a4:e3:c3:57:dd:9e:b9:88:3d:c9:ac:74:d1:6c:b3:
         ad:05:d1:3a:0b:55:8d:38:b2:0b:fd:6b:18:59:94:bd:d1:c7:
         ad:11:b5:45:42:6f:08:91:2f:b2:e4:a7:48:8f:fd:25:bb:54:
         a9:c6:a9:04:5f:a1:0a:26:22:89:07:9a:b9:6c:82:48:11:47:
         03:ad:ea:9c:21:b7:e5:9d:a3:fa:eb:81:6c:05:02:c5:9f:3e:
         d2:1a:af:87:d1:20:9b:eb:cb:2b:4a:1e:d3:a3:5f:3c:9a:1f:
         36:4c:ea:00:02:d0:8e:21:5c:0b:af:28:30:0b:7e:7d:b3:82:
         43:c7:05:57:27:64:bc:d4:54:c3:f4:76:b5:72:11:fd:7d:98:
         07:43:75:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:12:09 2025 by rpki-client