Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ba245307-a792-3414-8ad4-7c3e11e14756.roa
File:                     ba245307-a792-3414-8ad4-7c3e11e14756.roa (raw, json)
Hash identifier:          hCnUbt67eo+YskIsGzhFO4dhPwLCC3WAy/qGzPBQ+7g=
Subject key identifier:   F8:1B:AE:AB:75:FB:9E:57:0D:05:A8:BC:49:50:72:D7:08:3C:06:50
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584AA42B835020FADF2D15997728
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ba245307-a792-3414-8ad4-7c3e11e14756.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     35916
IP address blocks:        142.171.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:83:50:20:fa:df:2d:15:99:77:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=6e4fa35d-f4a8-4565-9360-ccb8b1053a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:59:4a:0e:83:fc:89:43:30:08:62:c3:5a:0c:
                    34:70:e1:eb:00:10:88:ac:00:dc:fd:86:21:a3:cb:
                    44:bf:1c:6f:8e:21:db:29:24:42:3f:fa:fb:8a:22:
                    f6:89:7c:31:51:32:23:7e:88:b7:2a:fe:60:12:c8:
                    d3:4a:59:e8:b6:5e:2a:2d:f3:3f:bb:b2:fc:82:ff:
                    87:d7:91:56:13:c5:28:d1:1a:d9:91:bd:eb:16:75:
                    a6:4c:aa:de:c2:ef:a2:b2:19:b9:11:22:ff:58:6c:
                    31:20:4e:01:66:cd:6c:c8:0b:26:9b:b0:5d:97:d6:
                    3e:4f:63:24:a9:52:e2:c9:2e:de:d1:ff:41:be:bf:
                    c1:3f:d8:9b:75:c0:a7:56:84:d3:2c:43:88:54:71:
                    60:bd:48:1e:d1:a8:b2:97:8a:01:b7:80:1e:e6:19:
                    ad:6f:b5:52:d5:2a:85:4f:14:39:00:2b:f3:3f:ae:
                    9f:52:0e:eb:8a:d0:e9:15:c4:52:33:e6:16:8f:5a:
                    77:fb:4b:cc:06:14:c8:05:0b:00:4c:19:37:43:42:
                    83:73:9c:88:16:7d:a3:10:4a:a3:7f:fb:74:96:59:
                    7b:a3:34:ba:85:9b:d8:68:b8:de:e7:b2:6f:a3:96:
                    c9:3e:cb:7a:c6:ef:d5:fa:7d:d3:2d:16:57:af:9e:
                    b9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:1B:AE:AB:75:FB:9E:57:0D:05:A8:BC:49:50:72:D7:08:3C:06:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ba245307-a792-3414-8ad4-7c3e11e14756.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.171.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:e5:e2:0e:f3:62:81:b2:1e:1c:fb:b5:1e:61:61:16:b8:db:
         4a:65:55:28:da:16:4a:78:6d:a4:70:14:d1:b8:41:26:3b:33:
         ba:07:42:97:1b:fa:49:13:c6:03:10:24:61:70:66:fc:f9:72:
         57:4f:47:0c:79:01:74:af:d3:58:7d:ba:28:e5:6a:04:61:d1:
         a7:7a:cf:fe:61:4c:45:08:76:cb:5e:10:a6:00:7b:83:37:90:
         70:8e:e8:57:77:2b:26:c8:14:9a:0c:f9:45:f5:f3:22:6d:b8:
         8f:78:ff:5c:0c:51:d0:da:38:84:d0:f3:c2:81:b5:3e:4a:f9:
         a8:3e:db:3d:e6:00:b8:a9:f8:fd:50:82:83:92:5b:37:86:01:
         83:9a:d0:0f:39:5e:a4:67:2d:90:2f:91:a4:77:1a:e3:c6:70:
         34:08:71:18:c5:f0:a7:e3:a5:b8:64:e8:d2:b9:87:bc:75:ea:
         31:b2:1b:81:df:b0:b7:d2:90:d5:9a:df:57:ba:10:e3:0b:f0:
         b1:45:d1:77:9b:c1:32:63:76:4d:76:6c:e9:e2:38:77:98:e9:
         95:46:27:97:ec:b9:4c:2f:d1:5d:c7:86:19:7f:fb:f7:32:b0:
         60:a6:e7:76:fd:3e:bb:42:11:e6:c7:c8:fa:9a:ed:bb:26:89:
         b7:86:ed:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 19:30:35 2025 by rpki-client