Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac/6684397c-59b8-3099-b1de-c2148796dd93.roa
File:                     6684397c-59b8-3099-b1de-c2148796dd93.roa (raw, json)
Hash identifier:          OYuE+ZqkFEJ7IQTI27du9tQVHIZqzc+8v4OAB91WF3w=
Subject key identifier:   52:A8:84:DF:3B:F5:36:02:86:35:28:37:7D:1A:65:14:C2:31:E3:5E
Certificate issuer:       /CN=770e3eb7-a110-4c5f-ac71-41397fe16cac
Certificate serial:       010D0C9F4328584A71EB4D3A8F881131136F5680
Authority key identifier: E3:0D:DB:6E:F8:F7:03:76:59:71:90:CF:59:61:6E:82:50:4E:A4:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac/6684397c-59b8-3099-b1de-c2148796dd93.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     16509
IP address blocks:        163.47.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac/770e3eb7-a110-4c5f-ac71-41397fe16cac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac/770e3eb7-a110-4c5f-ac71-41397fe16cac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:4d:3a:8f:88:11:31:13:6f:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=770e3eb7-a110-4c5f-ac71-41397fe16cac
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=10cddba5-d83e-48fe-b774-628274bacffd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ab:16:45:15:bb:f2:26:f9:53:94:80:92:31:
                    4e:8f:27:4b:09:e8:ed:2c:df:42:6e:87:90:87:2e:
                    8c:a3:2d:29:d8:60:ad:5a:bf:bf:42:91:cb:23:23:
                    85:29:f0:9f:f3:18:8c:14:99:e0:f2:a4:f9:26:87:
                    51:f1:47:d9:d2:a6:a7:31:07:f9:94:21:02:fb:7b:
                    42:64:46:00:b1:83:65:75:fb:4d:26:ad:e5:33:f7:
                    5a:3b:99:c1:82:6a:eb:13:bd:de:29:13:fd:e1:f5:
                    6b:49:a4:0c:00:0d:27:f9:d4:0a:1f:47:57:a2:15:
                    89:39:10:4d:a5:3c:3b:f5:6c:30:9f:98:b3:91:23:
                    5d:17:46:18:26:93:d8:54:68:33:b4:02:aa:57:5f:
                    64:53:28:eb:75:35:1f:63:31:e5:2c:6b:3a:35:1a:
                    3d:eb:0b:77:80:68:c3:c4:26:40:53:2a:e6:05:32:
                    9b:e0:24:b9:23:24:4c:78:76:ac:f8:3b:8f:d0:1c:
                    f8:82:80:c2:66:e2:20:55:7c:0d:33:9e:6f:6c:29:
                    48:cd:9f:78:c9:94:4c:4e:f0:23:d5:44:50:50:dd:
                    ed:67:fe:ae:d3:29:75:3c:7f:2e:32:31:6c:89:74:
                    95:ea:5f:71:3e:6e:72:29:39:d8:48:ff:a5:d9:cd:
                    81:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A8:84:DF:3B:F5:36:02:86:35:28:37:7D:1A:65:14:C2:31:E3:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac/6684397c-59b8-3099-b1de-c2148796dd93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac/770e3eb7-a110-4c5f-ac71-41397fe16cac.crl

            X509v3 Authority Key Identifier:
                keyid:E3:0D:DB:6E:F8:F7:03:76:59:71:90:CF:59:61:6E:82:50:4E:A4:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/770e3eb7-a110-4c5f-ac71-41397fe16cac.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.47.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:37:3f:ec:23:aa:cf:60:8a:c7:fd:8c:c8:18:27:e3:53:12:
         16:21:8c:9b:89:2e:36:8e:eb:ec:83:49:17:13:84:26:b4:94:
         58:f6:e9:43:fe:34:38:80:21:71:10:a9:91:cd:52:b5:fc:d7:
         da:15:81:0e:ab:c6:b7:da:32:2d:90:ed:a5:9a:d5:d0:4c:80:
         76:69:19:f8:55:01:f5:f4:c1:ef:63:e5:ea:22:93:e6:ee:ab:
         f4:1f:eb:9d:84:42:51:05:0f:db:c3:0b:57:29:1c:bc:91:72:
         25:12:2e:a6:13:bf:72:34:ff:65:cc:b8:19:9a:34:bd:a6:5d:
         f5:12:5e:7a:c9:e9:d1:46:d1:e6:78:1a:00:e0:8d:e9:4d:29:
         e4:a1:fe:b9:cc:87:ef:df:6e:83:a6:c3:49:bf:ba:ca:b0:38:
         69:bb:e3:43:56:ba:09:af:4e:10:5b:66:25:3a:47:62:8d:93:
         c2:28:c3:f1:17:7b:1f:c8:ca:a7:76:58:0c:fc:02:63:d6:f5:
         63:0c:4d:dc:fe:61:0e:8a:8c:66:a2:f9:78:f2:0c:49:7a:64:
         f3:b8:e4:7a:46:e2:a2:e1:24:0e:ce:8b:74:a1:6d:7c:70:99:
         c4:cf:21:91:ea:7c:e0:9d:39:17:25:11:92:53:f4:c6:a2:f9:
         13:44:34:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:25:32 2025 by rpki-client