Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/6cd67bb2-7a48-3a5d-95f7-03d5c16aadc3.roa
File:                     6cd67bb2-7a48-3a5d-95f7-03d5c16aadc3.roa (raw, json)
Hash identifier:          RG3snTTEb3OB8WBam+HXpXJk1MG2LL3PRg5V41gdQVs=
Subject key identifier:   0C:C7:DE:7F:66:B5:B3:48:A5:1B:53:47:BE:27:C6:1E:6B:02:9B:89
Certificate issuer:       /CN=56dc9981-1d62-4501-a3ce-9ab389a49b4e
Certificate serial:       010D0C9F4328584A71EB3F16F430E82DB6256A80
Authority key identifier: CD:DD:67:3D:B3:FD:DE:2E:2C:C4:E9:E5:2D:9F:7D:F4:96:B0:2E:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/6cd67bb2-7a48-3a5d-95f7-03d5c16aadc3.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     36688
IP address blocks:        199.73.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:3f:16:f4:30:e8:2d:b6:25:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56dc9981-1d62-4501-a3ce-9ab389a49b4e
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=ba4adbc9-c38a-4150-8146-07e6b8d53fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3b:60:2f:5f:75:c7:66:a9:56:aa:9b:70:fb:
                    42:cf:d4:67:c0:63:45:3d:01:ef:ee:8e:4e:6d:4f:
                    f0:20:cd:ab:02:d0:c3:6e:ba:2d:60:25:2a:85:e8:
                    15:e7:e5:c0:4d:f2:69:d5:32:ba:96:75:e2:f4:95:
                    dc:d2:84:1d:a8:85:0d:a2:06:70:8e:9e:50:01:df:
                    6d:0e:8f:0c:99:51:1f:f5:10:d7:96:aa:4e:20:f1:
                    6d:d5:01:69:14:de:31:b7:7f:60:b1:1a:8c:f2:5e:
                    e6:f7:c7:42:61:cf:84:d0:57:b9:8c:c7:da:db:00:
                    c1:7e:87:8e:50:fe:6e:1a:7d:50:be:01:6d:bf:f1:
                    7c:93:20:a2:b2:39:c4:82:15:08:c4:e0:a1:77:c0:
                    6b:10:52:c5:66:27:5f:c2:66:5f:7e:7e:43:34:ff:
                    92:90:e3:85:31:8b:ce:aa:56:03:e1:51:00:ab:91:
                    dd:61:ad:4a:58:df:25:d0:f1:11:2f:c6:42:3e:4c:
                    97:f1:30:f7:a0:52:fe:f0:8a:8f:eb:96:7e:d1:5b:
                    47:23:94:fb:9d:d7:30:79:4b:0f:01:f5:a4:74:8e:
                    68:15:7c:39:cf:30:e9:9a:d0:28:44:63:32:88:91:
                    dd:fc:6e:80:68:d4:37:57:56:a1:80:72:1e:e5:3f:
                    c6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C7:DE:7F:66:B5:B3:48:A5:1B:53:47:BE:27:C6:1E:6B:02:9B:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/6cd67bb2-7a48-3a5d-95f7-03d5c16aadc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.crl

            X509v3 Authority Key Identifier:
                keyid:CD:DD:67:3D:B3:FD:DE:2E:2C:C4:E9:E5:2D:9F:7D:F4:96:B0:2E:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.73.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:2e:f9:f5:b6:c5:80:7c:84:ff:b1:d7:7c:34:11:9f:d3:9f:
         dd:2d:f7:06:87:33:05:03:29:ef:78:6f:2a:57:e3:2c:75:24:
         93:3f:26:b5:df:ed:25:96:c6:f1:44:f8:aa:f7:57:95:ae:3e:
         a2:67:3b:f2:46:b9:d7:7c:f8:8d:b0:d5:0c:e1:ed:25:2f:3e:
         46:3e:ef:c3:3f:82:ca:85:39:d9:c9:f4:cd:5f:44:87:e4:18:
         5d:c8:04:97:06:85:5c:f5:76:f6:a5:da:66:af:3c:a5:b3:62:
         64:13:70:3f:62:25:64:a9:2a:07:8c:23:e2:61:ed:fd:89:c0:
         11:a9:af:fd:80:ab:6f:8a:51:91:51:db:6a:da:5a:9a:8a:a1:
         7b:f8:3e:ac:3e:1c:99:56:9a:5b:b3:0b:63:ec:ba:c8:27:de:
         c5:14:81:42:30:ca:40:bf:81:1a:c5:46:5c:e6:44:52:0b:31:
         97:11:57:c4:c7:86:cd:b5:7a:5f:7d:92:7e:cc:ba:ea:da:86:
         bf:96:de:d4:af:24:32:3b:c4:3e:7a:f3:65:ed:18:18:cc:1e:
         cc:59:51:4d:83:d1:17:c3:c5:77:2a:6d:ff:2d:a8:e5:d6:01:
         dd:8c:37:54:99:15:db:f6:16:27:2c:ea:9e:80:ef:8e:d6:9e:
         2b:7b:02:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 20:11:22 2025 by rpki-client