Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/73e40711-5419-39fd-87e4-7ef47dab552c.roa
File:                     73e40711-5419-39fd-87e4-7ef47dab552c.roa (raw, json)
Hash identifier:          vetsKRi6ZSt6ggl5IkLNEqne6/EnFHiOkoQxx8og/O4=
Subject key identifier:   4D:9A:1D:00:3D:5E:D6:E9:65:5E:D6:DF:21:30:3C:79:31:36:0B:7D
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F4328584BA8CCBA9EBC8B9BF68391CA00
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/73e40711-5419-39fd-87e4-7ef47dab552c.roa
Signing time:             Mon 27 Oct 2025 09:36:00 +0000
ROA not before:           Mon 27 Oct 2025 09:36:00 +0000
ROA not after:            Sun 25 Jan 2026 10:36:00 +0000
asID:                     31713
IP address blocks:        206.161.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a8:cc:ba:9e:bc:8b:9b:f6:83:91:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: Oct 27 09:36:00 2025 GMT
            Not After : Jan 25 10:36:00 2026 GMT
        Subject: CN=9b1c1956-f055-4050-a334-f10bebe180ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7e:57:1f:bd:5b:30:bb:1c:3c:ff:76:c3:cc:
                    fa:be:b9:12:ab:d3:02:65:54:2e:02:c1:64:f1:1b:
                    0b:b3:d0:6e:a6:03:57:f5:8b:a1:36:c1:9b:f8:3b:
                    33:69:93:49:26:65:7a:f8:a2:f1:f1:03:df:12:24:
                    10:77:7a:f5:b1:9c:ac:7b:fd:ac:11:14:51:30:31:
                    34:64:ee:06:dc:72:0d:b1:8e:7f:b4:8a:39:a0:0d:
                    47:53:3a:2d:60:77:ca:f5:2a:a5:3c:24:14:3f:f2:
                    16:79:26:af:ac:68:14:d7:05:71:69:25:bf:ed:5e:
                    88:8f:84:3f:c1:06:77:d4:09:33:50:d3:bf:bd:9d:
                    fe:e1:10:05:36:b7:fa:e9:6e:c2:eb:7a:ba:74:4c:
                    a6:e9:b2:f9:b0:d4:5b:c3:99:54:e6:01:37:db:11:
                    1e:95:7e:4c:75:26:d1:af:c7:93:89:5f:42:f1:bc:
                    85:9b:98:96:0e:f5:d1:61:b3:31:ff:0b:73:b6:c5:
                    4b:a4:53:cd:41:58:d0:ad:3a:8a:d7:23:bd:0a:22:
                    86:0b:75:8d:c6:79:66:0a:4d:f7:e2:a1:bb:f9:27:
                    fb:f3:f6:b5:88:7a:2a:48:6e:ff:58:b2:ea:70:a7:
                    15:d7:38:02:c6:7c:bc:05:af:34:be:6f:ab:0a:5c:
                    54:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9A:1D:00:3D:5E:D6:E9:65:5E:D6:DF:21:30:3C:79:31:36:0B:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/73e40711-5419-39fd-87e4-7ef47dab552c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.161.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:dc:73:27:b5:98:eb:bb:e6:19:4e:db:79:41:ca:94:aa:8e:
         5a:cc:5f:f0:14:1b:0b:30:b7:56:41:32:f1:77:31:16:d6:99:
         6e:ca:55:07:6e:19:db:b5:66:ff:6b:92:c9:77:ab:4d:28:c5:
         2f:f7:ed:0e:e9:79:84:cc:19:61:a6:5d:f2:95:2f:07:db:c1:
         49:15:ac:07:af:e7:64:ef:ce:e2:88:45:b0:98:8f:27:66:31:
         11:34:43:3d:1e:2b:ab:f0:c0:66:5a:29:6a:a7:82:7f:bf:27:
         06:32:f4:b2:f5:d7:d7:2c:c4:99:7e:b3:f7:9a:8c:2c:b4:34:
         ae:ef:de:58:c8:61:0d:7b:50:ea:f5:fb:f9:46:f3:42:f1:e6:
         d4:5a:e3:65:44:be:71:92:66:90:e2:d5:27:6f:c3:3e:5f:e5:
         64:07:8c:94:10:8f:f2:95:10:7a:a8:04:16:43:e8:27:d4:94:
         65:95:76:16:79:9a:ad:12:c9:c6:23:31:ea:01:78:0d:0e:7a:
         f2:f9:a6:7a:64:4f:b3:9c:46:b1:3d:15:23:8e:67:1b:55:9b:
         56:1b:f2:ec:d7:01:c3:bd:62:e7:f1:28:a9:4a:bc:5a:40:b2:
         fc:1b:81:24:c0:cd:a0:f6:af:6b:b4:7b:92:40:54:84:9a:fb:
         29:30:16:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:57:09 2025 by rpki-client