Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/0639ea96-660c-316a-8237-bab7ef39f7ec.roa
File:                     0639ea96-660c-316a-8237-bab7ef39f7ec.roa (raw, json)
Hash identifier:          oSev/rP5ZCGrGKG6oMMeor7IeOLFI3pFsTScz3GPrF0=
Subject key identifier:   5E:01:3D:33:F7:B7:EA:62:1D:C5:B4:3F:FC:BD:5E:48:83:E1:C0:F4
Certificate issuer:       /CN=56dc9981-1d62-4501-a3ce-9ab389a49b4e
Certificate serial:       010D0C9F4328584A71EB3F37FF5664D4C49A24C0
Authority key identifier: CD:DD:67:3D:B3:FD:DE:2E:2C:C4:E9:E5:2D:9F:7D:F4:96:B0:2E:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/0639ea96-660c-316a-8237-bab7ef39f7ec.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     16509
IP address blocks:        199.73.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:3f:37:ff:56:64:d4:c4:9a:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56dc9981-1d62-4501-a3ce-9ab389a49b4e
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=bde56d22-1f8d-4e86-a312-efec43722959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:84:31:a4:b3:d0:9e:55:06:08:c9:9c:cd:e9:
                    a4:c9:43:4b:ea:dc:28:17:9e:ed:9c:1a:25:8b:88:
                    9c:78:c6:9a:bb:47:b0:2d:ba:47:12:34:85:7c:f1:
                    ee:df:63:ee:48:18:b1:1e:53:8b:3b:7d:2b:29:20:
                    af:39:f4:17:c3:b3:c1:76:a2:53:d1:f6:fb:ee:f8:
                    b3:ac:7f:8f:89:e7:a7:dd:91:d2:e6:4d:64:6d:f2:
                    00:f9:c0:1d:d8:3c:57:fe:b7:a5:76:58:76:ad:f8:
                    3d:03:7f:8e:be:cb:b7:41:c4:17:48:b0:bc:c8:c6:
                    04:59:2a:95:3e:85:13:86:ac:ad:f0:0e:36:49:8e:
                    07:92:a6:a9:8d:5c:a3:d4:36:3c:73:90:0e:ee:12:
                    8c:73:ae:c9:c0:c2:6c:40:20:a7:9e:f8:f9:bc:65:
                    a3:d6:c2:13:6d:0e:b4:ff:cf:73:bf:33:f3:4f:bc:
                    d2:ae:4a:91:be:33:6d:7b:f3:53:51:b6:ea:29:5c:
                    a7:31:b7:f6:7c:4d:66:e7:b7:9b:a4:d8:7c:6b:ec:
                    5b:cf:db:ce:58:27:f7:1f:96:f7:09:9e:9e:b2:6d:
                    5a:57:eb:15:66:50:33:b9:76:21:ab:f2:c7:b6:cd:
                    c3:2d:99:01:9b:10:f6:b0:2c:81:36:01:75:54:08:
                    0d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:01:3D:33:F7:B7:EA:62:1D:C5:B4:3F:FC:BD:5E:48:83:E1:C0:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/0639ea96-660c-316a-8237-bab7ef39f7ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.crl

            X509v3 Authority Key Identifier:
                keyid:CD:DD:67:3D:B3:FD:DE:2E:2C:C4:E9:E5:2D:9F:7D:F4:96:B0:2E:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.73.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:f8:0d:26:45:c4:2d:43:27:23:a0:4c:87:d5:f7:d9:3a:6b:
         eb:53:9a:56:ea:76:14:ec:69:90:35:90:c7:23:8a:b2:2e:55:
         a0:de:35:42:3b:18:f3:ff:dd:06:4e:f0:a1:e1:80:7e:17:77:
         39:ec:9d:6f:9e:07:3d:84:1c:b3:d6:8a:93:ff:39:64:78:c2:
         13:c1:ab:f1:35:98:0b:91:cc:67:ae:5b:ca:20:53:c0:ef:31:
         eb:aa:c7:96:61:17:c5:6c:32:4a:a9:b2:17:db:99:14:e7:d9:
         dc:f9:9e:59:99:f0:c9:6e:d9:eb:f0:6b:69:ea:50:00:95:83:
         f3:9b:66:17:d6:4e:8e:88:bf:27:f1:bf:71:ff:4f:2b:b2:ba:
         89:b4:61:b4:c0:09:d4:35:3b:8f:81:42:a3:05:d2:75:33:e8:
         df:c9:f6:92:f9:ad:b2:f1:83:db:f1:99:e9:f2:53:4d:e0:5d:
         b3:08:38:78:66:ed:55:de:42:e7:36:fd:6a:cb:4e:1e:fe:7f:
         9d:6e:2a:1a:9b:a3:3c:85:75:13:22:6f:15:c6:02:90:e2:5d:
         87:35:5d:d3:d1:1e:e0:02:7f:3d:bc:13:2e:ec:95:fe:69:4e:
         1e:ca:21:03:3d:c6:4b:8e:b6:df:30:d8:4c:fa:81:ae:7d:b1:
         85:b2:0b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:12:33 2025 by rpki-client