Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/16315bab-49c8-3caf-be0c-7c6a9af964f5.roa
File:                     16315bab-49c8-3caf-be0c-7c6a9af964f5.roa (raw, json)
Hash identifier:          qy0t8cTTL8RrFQidzcaCzD1InZeNYXp8Fw+oxkj8C0s=
Subject key identifier:   5E:D5:06:40:C9:D9:01:45:6E:45:98:6F:C5:82:8B:7C:BA:09:AE:81
Certificate issuer:       /CN=b9b79447-da88-4528-8ff7-0d367d2d76e8
Certificate serial:       010D0C9F4328584AC01627096A82A215086AB700
Authority key identifier: 1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/16315bab-49c8-3caf-be0c-7c6a9af964f5.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     14618
IP address blocks:        161.199.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:27:09:6a:82:a2:15:08:6a:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b79447-da88-4528-8ff7-0d367d2d76e8
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=f62effca-a088-4cfc-a253-1aebb8518381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:14:ca:6c:8f:b5:98:91:ed:9f:ff:5c:2b:ef:
                    a4:a4:f8:3f:08:f2:d2:6e:b3:5e:63:ee:ae:0d:78:
                    23:c3:2b:79:5f:5f:d0:7b:b5:da:fe:eb:f0:e9:7e:
                    07:b3:91:bb:f0:a2:19:aa:69:c1:66:39:84:6d:37:
                    ef:d5:47:10:64:82:f2:26:97:12:24:90:25:b8:11:
                    66:06:ad:5b:35:0e:a7:42:f8:1e:d4:99:e2:08:e8:
                    14:0d:f9:a4:a1:39:7b:76:3d:4b:9f:25:29:28:07:
                    de:ef:7d:d4:88:02:d4:76:46:bf:24:a3:17:d6:b4:
                    07:a7:ae:e6:a5:aa:ae:8b:d5:70:33:f6:96:da:5b:
                    84:c1:2b:c8:66:6a:34:00:2d:de:6d:f4:cd:7a:f1:
                    44:2d:e0:92:29:05:7d:e3:fc:70:43:1e:59:57:09:
                    f3:3e:bb:c5:83:c4:25:cd:17:d8:32:cf:63:6c:6f:
                    91:60:24:00:de:4e:99:7a:ea:3f:e9:f7:1e:f2:63:
                    65:c0:0e:66:51:a7:49:96:22:b7:f8:c5:72:80:5e:
                    c2:ac:57:0d:16:ca:b2:69:86:90:a3:d3:12:97:99:
                    35:70:9b:88:7d:8a:39:1c:60:58:e3:1f:ea:09:7a:
                    bc:7a:af:65:31:c1:2c:03:6c:ba:64:8d:92:76:70:
                    7d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D5:06:40:C9:D9:01:45:6E:45:98:6F:C5:82:8B:7C:BA:09:AE:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/16315bab-49c8-3caf-be0c-7c6a9af964f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.crl

            X509v3 Authority Key Identifier:
                keyid:1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.199.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:8a:d4:d0:80:6f:1e:ad:69:40:ff:46:bf:9e:16:24:e2:00:
         ea:c8:63:f4:c7:b6:2b:25:5e:d0:e0:3c:d6:35:bf:cd:92:89:
         39:f7:fa:7d:22:f1:92:05:fc:a7:ab:7d:e5:b0:6c:7d:46:70:
         62:e0:09:b3:d8:c4:08:42:32:c8:f4:85:2b:6f:cb:b5:14:45:
         d8:c8:43:00:a0:98:3a:3e:60:8b:4d:9e:09:b0:de:c9:84:45:
         f9:ba:9d:c4:ad:54:52:de:13:a1:46:d5:f4:b8:d8:2a:8c:07:
         ef:65:e4:13:45:f7:59:73:fb:5b:56:f1:c0:6a:15:a5:80:4f:
         96:cb:5c:a8:c5:7d:2d:d3:32:45:b7:2f:20:80:70:d5:9f:f4:
         2a:9d:a9:eb:50:47:9a:dd:dc:4a:76:63:a7:8f:ed:e4:90:77:
         ee:8c:79:95:60:59:f6:28:8a:a0:a2:5d:d3:6e:90:8b:c7:b4:
         44:77:8b:72:00:48:78:47:51:c2:2b:f7:7f:86:7c:1d:32:d8:
         61:ad:fb:65:da:25:79:fe:b1:47:c8:10:84:70:6e:ef:fd:4c:
         95:b7:eb:c4:14:f3:32:7a:18:54:a6:3f:91:b9:0a:46:15:6a:
         99:7f:00:35:21:1b:09:46:25:6c:f2:63:71:8c:58:91:bc:3a:
         69:36:a3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:07:53 2025 by rpki-client