Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/030527ae-499b-36c1-8e47-a66366e158ba.roa
File:                     030527ae-499b-36c1-8e47-a66366e158ba.roa (raw, json)
Hash identifier:          pCW8il4YijUZKfNn+0ilog0G5Qyj6Eh/1iGNxzT7ddc=
Subject key identifier:   7C:64:AE:6D:48:B0:85:AD:0C:74:A7:35:63:B9:2C:3C:19:77:9A:A5
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA16128DB82EA2E37A2953A00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/030527ae-499b-36c1-8e47-a66366e158ba.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     7843
IP address blocks:        16.191.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:28:db:82:ea:2e:37:a2:95:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=00043a73-593a-48a8-aa1a-1599fb2898fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f8:2a:34:3d:0b:76:c9:5b:f9:75:22:b3:d1:
                    93:9b:95:6b:d7:d2:06:64:4f:98:ba:cf:b6:11:89:
                    65:9e:ee:7f:20:89:73:f3:8c:2d:fc:18:b7:54:0d:
                    d2:33:d4:5d:09:88:73:d6:76:22:c4:2e:91:01:c1:
                    d4:a9:09:8a:a5:1e:23:45:73:fd:46:9f:d8:64:ec:
                    e3:e2:b1:de:b0:71:c6:6f:40:00:28:7c:41:5b:45:
                    41:7e:4d:a1:89:6e:85:ac:03:8a:93:7b:2a:93:0e:
                    6e:cb:89:fc:8d:83:65:1b:cb:22:7f:e6:9a:c7:b5:
                    08:53:d7:7f:8b:c8:fc:02:90:94:88:a9:e8:fc:54:
                    a7:7c:6e:51:79:70:a0:fd:c1:f7:7e:bc:f5:37:41:
                    78:33:fc:dc:27:35:95:3f:c0:44:02:0e:da:dc:91:
                    8b:ac:1c:4f:ff:89:99:48:49:68:ac:96:b9:03:89:
                    9c:81:6d:f5:22:af:8b:b1:44:00:81:95:51:59:28:
                    cc:fe:e2:f8:cb:21:7e:40:f6:42:ca:76:a0:55:e5:
                    39:17:26:ec:4b:bc:4b:2f:87:af:07:b7:f8:b6:2f:
                    5c:41:9a:cd:23:39:e8:63:e7:a1:65:c7:ea:2c:0a:
                    58:76:c0:13:c9:b9:2d:3b:ba:3a:08:b4:c8:a0:1d:
                    92:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:64:AE:6D:48:B0:85:AD:0C:74:A7:35:63:B9:2C:3C:19:77:9A:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/030527ae-499b-36c1-8e47-a66366e158ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.191.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:53:ab:32:b8:08:ea:de:37:6d:14:8b:e3:69:dd:a6:14:22:
         4c:85:14:18:1e:b1:4e:35:83:25:ca:12:fb:ed:cc:2a:ee:e3:
         88:c8:6a:4b:47:b5:d2:fc:ae:67:0a:42:06:12:50:02:63:75:
         26:d4:99:62:8c:d3:6c:7b:a4:2b:5a:86:48:82:86:ef:29:4e:
         68:e1:8f:d7:70:1c:eb:61:b6:8e:5d:60:de:6a:92:74:a1:64:
         fd:09:7b:b4:c6:ae:24:9b:fa:69:72:e7:23:40:0f:61:21:73:
         c0:b9:67:5c:2b:3d:62:81:3d:df:a1:cc:b0:a5:e9:82:28:8b:
         b7:a5:d3:62:a5:63:48:66:a6:34:c3:36:b3:85:44:35:a8:4f:
         eb:9a:8a:f2:e4:1f:b4:44:d4:03:f8:9f:fe:db:c3:ce:ae:5c:
         b9:3c:15:cf:b7:f3:2a:a5:4c:25:e7:8e:3b:3d:e4:cb:27:33:
         0b:9d:0d:0b:a9:ec:11:12:e1:d8:f8:b1:c2:5a:35:6f:1e:43:
         47:31:ff:1b:87:5b:02:ef:4a:fe:08:d7:71:a9:45:b7:d2:b3:
         81:94:f7:8a:6f:32:7f:ff:74:2f:77:68:70:5c:c8:f9:57:ce:
         64:ba:dd:40:49:a8:6f:4c:af:d3:24:cd:20:6e:8d:82:63:02:
         49:70:ae:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:11:26 2025 by rpki-client