Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/114c23eb-d2f7-3a43-8266-464e81836fee.roa
File:                     114c23eb-d2f7-3a43-8266-464e81836fee.roa (raw, json)
Hash identifier:          13BzbevvaoxE9WbtclSl7ZZSX5d3wyxK3xuzK+jvlAY=
Subject key identifier:   1F:9A:D6:16:73:FF:8F:D5:ED:2A:52:15:E6:58:06:48:C7:D7:8C:E0
Certificate issuer:       /CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695
Certificate serial:       010D0C9F4328584A90A0BCBB8B6C52567580EE80
Authority key identifier: 13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/114c23eb-d2f7-3a43-8266-464e81836fee.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     26459
IP address blocks:        199.250.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:bc:bb:8b:6c:52:56:75:80:ee:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fba2fa2-fadc-4c1b-911f-6f41164e9695
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=f76a7af6-a021-4682-b54e-1fe263770a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a8:ae:33:ff:00:92:01:fc:78:21:32:49:da:
                    3b:ed:7f:81:52:fa:7e:09:2c:ed:7d:a8:a4:d0:16:
                    db:40:c6:61:14:94:98:48:10:0d:91:59:64:b4:2a:
                    3a:ff:0c:77:e7:ff:e4:04:ba:f3:c8:05:14:db:81:
                    86:1d:40:1a:e7:f9:8e:bc:cd:6d:dd:61:51:df:9e:
                    34:a5:29:4a:53:35:d9:82:de:96:24:fb:41:72:a3:
                    ba:48:16:10:65:d9:75:5a:3b:36:e4:6d:12:84:dc:
                    ad:b4:2b:6a:72:b5:6f:6e:d9:e3:8b:c6:23:95:2b:
                    2c:02:32:35:0f:eb:7a:07:41:cd:15:34:88:2b:7e:
                    9e:c3:4b:83:d7:83:f3:6d:2a:1b:f0:ba:b7:38:4f:
                    52:29:10:55:2b:bb:b8:97:7e:ec:c2:7c:15:65:7c:
                    dd:8f:1a:dc:f1:48:36:8c:f2:ce:32:b8:1a:cd:db:
                    12:af:6a:6d:aa:28:bc:db:44:20:fe:96:ff:8a:d3:
                    27:0d:d8:71:6e:55:b7:63:a9:26:5f:3a:c0:20:11:
                    e9:a9:e8:85:5a:7e:40:4a:df:e8:05:ce:87:1c:fa:
                    ca:91:aa:bb:38:d2:3f:5c:97:0f:15:57:34:17:1a:
                    40:09:9e:cb:68:f7:99:67:f4:1c:66:81:b4:6f:70:
                    11:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9A:D6:16:73:FF:8F:D5:ED:2A:52:15:E6:58:06:48:C7:D7:8C:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/114c23eb-d2f7-3a43-8266-464e81836fee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695/4fba2fa2-fadc-4c1b-911f-6f41164e9695.crl

            X509v3 Authority Key Identifier:
                keyid:13:0D:DE:8E:42:17:FB:20:DA:68:87:7B:22:CE:74:B9:6A:8D:F5:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4fba2fa2-fadc-4c1b-911f-6f41164e9695.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.250.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:00:0f:21:2c:9f:e5:50:09:69:d7:9c:e2:14:2e:5f:4a:23:
         db:08:2e:5f:05:4e:91:08:82:b9:fd:7d:84:94:ea:25:1d:82:
         8f:1e:72:4e:f4:4c:ad:ae:0c:1e:26:4b:78:ff:a9:ff:29:98:
         d2:ea:a7:f2:17:4c:2e:35:2b:dc:d3:4d:e9:a9:c5:5d:1d:0d:
         41:ad:af:dd:f9:39:61:68:42:1b:1a:9c:8e:32:8c:d5:de:52:
         7e:5a:de:52:6a:b1:f8:4d:d3:d0:0a:76:f4:5d:ba:bc:ab:e2:
         7b:16:85:62:9a:d4:ea:6e:36:73:f6:59:bd:fc:e8:c3:8c:aa:
         82:cc:52:f2:33:97:96:38:c3:f9:5d:84:ed:d1:36:bd:da:87:
         29:cd:86:70:35:b6:07:cf:d7:d5:19:f5:81:ac:9c:f7:2e:10:
         0b:7c:c1:0b:74:4d:fd:db:1f:de:a9:ca:65:3a:e4:ff:c7:63:
         d3:9d:14:48:90:6e:a3:10:f2:30:7f:56:12:fe:36:63:37:30:
         87:67:66:41:03:62:e0:d8:ca:4c:c8:2a:88:63:91:a1:58:84:
         4e:21:38:ac:96:9e:05:24:d9:38:8d:72:c6:a7:3a:ae:b0:64:
         8a:6d:a6:73:89:65:54:f6:a0:cd:26:ed:82:81:66:12:a9:35:
         21:4f:21:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:52:29 2025 by rpki-client