Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/8669146b-a8f2-3481-86f9-c3d012bdc299.roa
File:                     8669146b-a8f2-3481-86f9-c3d012bdc299.roa (raw, json)
Hash identifier:          uZ/GLZ7FHLGFGWu1eKxrV17EW4VYd5blztWei9eH0OQ=
Subject key identifier:   BA:B3:48:51:91:3C:10:1C:EA:7F:28:4A:0C:7A:B4:16:C5:07:38:F9
Certificate issuer:       /CN=56dc9981-1d62-4501-a3ce-9ab389a49b4e
Certificate serial:       010D0C9F4328584A71EB3F495FA6E32122E1A000
Authority key identifier: CD:DD:67:3D:B3:FD:DE:2E:2C:C4:E9:E5:2D:9F:7D:F4:96:B0:2E:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/8669146b-a8f2-3481-86f9-c3d012bdc299.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     14618
IP address blocks:        199.73.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:3f:49:5f:a6:e3:21:22:e1:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56dc9981-1d62-4501-a3ce-9ab389a49b4e
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=8bc98e78-d42c-46f1-9ab7-6a831ee27094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:be:81:f2:78:ff:a3:60:6d:0b:4c:1b:8c:0b:
                    d7:fe:2a:65:29:11:33:0e:68:7b:d1:b9:1b:c3:5f:
                    ac:74:3f:50:00:d0:ac:3f:ee:cf:66:13:97:cf:e3:
                    ba:9a:b0:b2:09:ef:02:80:92:ff:c8:1e:e6:d8:49:
                    c2:75:1c:05:4a:ba:3e:fc:dc:48:ac:36:6b:0c:23:
                    db:2e:f8:b0:de:88:3b:a3:ae:d2:a6:22:a7:d0:8c:
                    69:c3:bc:f5:a3:4c:ec:04:94:e4:c4:81:78:75:ff:
                    ee:3a:7c:1f:b0:b1:9f:1b:77:e0:96:1b:84:80:34:
                    b1:aa:8a:40:b6:cf:3d:f3:e0:1b:0f:ca:f8:e2:2c:
                    25:4c:2a:62:d9:1c:ee:6d:1f:5c:f7:21:75:e7:6b:
                    c4:3b:1e:77:03:b5:a2:11:e9:aa:ef:88:b7:93:3f:
                    ae:b4:50:5d:ea:73:73:20:af:fc:2f:30:cc:61:a3:
                    59:cd:5f:14:d2:90:5e:d0:b2:33:99:cd:82:40:7e:
                    e9:a8:7a:5a:bf:9d:c1:79:d2:df:3f:f3:81:7f:57:
                    d0:3d:0e:1f:b9:3b:cb:73:1a:c7:df:24:00:77:ff:
                    c9:91:0c:e2:13:d6:92:2a:7e:6d:22:31:2b:88:fe:
                    c1:94:b4:d5:f8:e7:26:3d:b8:a0:03:1a:ef:c5:29:
                    61:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B3:48:51:91:3C:10:1C:EA:7F:28:4A:0C:7A:B4:16:C5:07:38:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/8669146b-a8f2-3481-86f9-c3d012bdc299.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.crl

            X509v3 Authority Key Identifier:
                keyid:CD:DD:67:3D:B3:FD:DE:2E:2C:C4:E9:E5:2D:9F:7D:F4:96:B0:2E:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.73.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:e6:36:1c:65:ab:52:f7:97:21:6a:38:24:b4:68:c7:a0:c5:
         8c:35:cd:8e:29:51:b6:5e:c9:23:e6:db:42:b7:34:d6:be:06:
         2a:fb:16:19:d6:11:a8:83:06:ab:23:ca:84:da:25:bf:47:9d:
         94:b4:33:b5:5f:0a:d0:e3:f5:44:99:2b:f9:0c:66:b2:91:6b:
         86:ad:fa:8c:c2:88:69:02:92:60:6f:0a:af:cd:61:f6:75:e5:
         e7:b1:d0:a7:62:df:40:5b:bf:c0:79:3d:a8:3c:99:89:39:38:
         88:0b:77:1a:f8:f2:5b:a8:eb:7a:fe:a9:89:ef:91:80:88:b9:
         30:8b:4a:cd:2a:c5:86:1e:03:b1:b6:55:1e:7c:51:bd:ee:50:
         ed:af:a6:a2:b8:bc:e7:76:12:76:07:dd:2c:62:1e:c9:f9:06:
         08:60:88:b3:ad:2d:2a:99:81:4b:1c:84:c3:35:5a:a3:ca:11:
         a8:5f:c4:e8:c3:24:c7:5c:ad:39:10:e6:6e:bc:7e:62:1f:a7:
         4c:10:2a:28:6e:45:57:45:70:71:7b:7d:39:fc:aa:ed:1d:a3:
         df:c1:96:2e:eb:b8:e0:28:6e:61:52:d1:3a:03:f4:dc:71:cd:
         a1:4b:29:75:41:69:26:75:6f:c8:ef:84:4d:43:23:f1:75:84:
         da:d6:b3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:31:51 2025 by rpki-client