Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/b93a6e5d-12cd-3639-bf78-df24a36b7967.roa
File:                     b93a6e5d-12cd-3639-bf78-df24a36b7967.roa (raw, json)
Hash identifier:          U+IfbCexdqiQ3xz6IpbWbpCDTGVJ5xIfrm5ml1Srj3c=
Subject key identifier:   9B:D5:E6:60:FB:E1:2C:A3:EB:AE:EF:2C:36:D8:EC:A3:06:CD:EC:8E
Certificate issuer:       /CN=ac9a6201-fe8c-49a4-985d-5463076b397d
Certificate serial:       010D0C9F4328584B2A2C3D5EFA2676BC2CCCFAE0
Authority key identifier: BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/b93a6e5d-12cd-3639-bf78-df24a36b7967.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     13536
IP address blocks:        173.243.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:3d:5e:fa:26:76:bc:2c:cc:fa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a6201-fe8c-49a4-985d-5463076b397d
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=579850aa-b1a2-424c-a81c-861b41ba953c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e2:cb:81:b0:b4:b6:21:d5:2d:17:86:28:8b:
                    95:89:21:bb:2a:de:00:ce:89:dd:3c:11:5c:0a:0f:
                    90:8d:91:14:f0:29:ef:b2:fa:38:ea:0f:2d:b9:9d:
                    69:b1:90:23:ce:0c:66:8f:c5:be:86:d1:b0:a4:72:
                    e2:77:33:ed:ea:02:a7:5e:c6:95:84:95:1f:55:85:
                    d3:3d:69:d2:af:5b:84:9e:8d:25:4e:25:94:aa:dd:
                    58:2b:7c:9b:b2:ef:51:aa:8d:ed:09:72:92:56:70:
                    8e:9d:14:18:70:c7:08:c2:62:f5:2b:ea:fd:38:bd:
                    8b:3b:43:54:56:bd:06:f0:b0:eb:f5:7e:4d:12:87:
                    0d:bc:7e:68:29:aa:73:6c:f4:26:b6:43:6e:ea:1e:
                    ff:94:af:d8:09:ea:d1:5c:0e:ab:20:d2:61:63:5a:
                    58:f9:60:97:7e:f3:8d:09:fd:ff:08:22:6c:5d:23:
                    fd:79:f5:bf:0e:a4:55:f6:24:40:79:9d:47:11:cb:
                    c9:8d:02:c9:46:da:4d:67:b6:d7:41:3a:f4:32:5b:
                    d1:01:22:14:f8:94:28:67:51:d7:ca:a4:11:f0:46:
                    1f:6e:dc:bf:60:bf:8c:ef:d9:65:0f:2c:4c:76:29:
                    a0:ea:43:dc:3b:08:a6:c5:bb:02:db:d9:8e:38:a2:
                    c6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D5:E6:60:FB:E1:2C:A3:EB:AE:EF:2C:36:D8:EC:A3:06:CD:EC:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/b93a6e5d-12cd-3639-bf78-df24a36b7967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d/ac9a6201-fe8c-49a4-985d-5463076b397d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:A2:B3:75:DC:23:8B:F9:8A:F6:4D:9C:2B:AB:D8:82:18:0A:74:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac9a6201-fe8c-49a4-985d-5463076b397d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.243.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:a4:de:79:81:6b:37:ec:d3:24:b1:0a:f3:bb:90:f1:fa:0a:
         ca:2f:10:c9:d9:2d:46:7d:cc:d4:81:7a:5a:86:40:36:ad:45:
         74:cd:7e:54:1a:a3:53:2b:d8:78:30:e8:46:98:39:81:46:c0:
         41:cd:a5:42:da:15:f9:ce:07:00:df:d8:49:67:30:3d:79:44:
         ad:06:4d:25:49:3d:c8:40:f9:58:9c:1f:0e:8e:07:87:d0:07:
         38:79:61:fe:3f:08:84:13:20:55:d3:29:2b:36:94:2d:98:37:
         a5:a7:44:b9:49:b3:45:12:8f:c8:d1:24:95:7d:73:d0:33:04:
         32:2b:26:9c:12:40:23:ee:45:2f:1a:9d:68:44:e6:69:e9:f8:
         fe:04:78:bc:fb:5c:e7:02:b7:51:be:fa:b0:61:ff:2c:7e:d2:
         4d:cc:db:9d:09:c6:77:a9:4d:10:b3:fb:61:20:7c:7e:fe:2b:
         8f:9c:61:03:1c:4f:79:65:87:18:43:c0:6c:43:36:e4:e6:15:
         0e:1b:10:fc:11:e0:6a:de:cc:37:b8:fc:b5:5b:ad:75:01:ea:
         8d:af:fc:19:67:f4:f8:c1:de:cb:ad:4a:ed:29:35:2e:49:31:
         73:3e:35:fc:b3:83:39:c8:1d:24:97:9c:d6:ea:c8:6b:f7:10:
         d0:cc:ab:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 01:01:42 2025 by rpki-client