Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/94acd883-c297-357e-9871-cdf706385cd5.roa
File:                     94acd883-c297-357e-9871-cdf706385cd5.roa (raw, json)
Hash identifier:          axQ3nJiIihFYZ8mDFld9B0luzbwOyKfrlAJVvttJylA=
Subject key identifier:   1B:6E:AB:55:3A:FA:63:45:A5:C6:6E:70:C0:ED:43:72:E3:12:12:52
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584B1AD18BBBCC54B5BA1A357650
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/94acd883-c297-357e-9871-cdf706385cd5.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     7992
IP address blocks:        216.121.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:8b:bb:cc:54:b5:ba:1a:35:76:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=4cfb83e5-ed83-47d5-99a7-f2b552e20f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:37:43:58:19:22:20:3e:d3:e8:47:f2:a7:8f:
                    78:1c:f7:f4:f8:76:66:66:7a:9d:a3:97:e9:c3:10:
                    8f:b4:06:bc:4f:ae:d2:b4:97:82:94:27:ee:b9:e6:
                    1e:12:67:08:ac:4e:c5:d2:1b:ab:5b:57:2e:8a:16:
                    86:e9:94:72:35:7b:ff:70:91:0e:42:c7:a9:fd:d6:
                    08:c3:f1:6b:9e:f9:e2:86:8b:c4:9e:80:4e:0c:cd:
                    b2:cd:5c:ad:37:8a:fd:09:3a:1a:20:f7:87:92:5a:
                    9d:a8:b8:df:86:34:77:43:db:e7:09:fa:07:3a:90:
                    7f:e3:41:4e:92:81:6d:fd:ec:2b:9b:f6:8c:de:f1:
                    85:f6:7c:56:bb:da:47:52:f4:06:a1:7f:b9:83:3f:
                    e9:1c:de:c2:a8:86:29:0d:23:e7:a8:f7:84:00:c5:
                    02:46:fc:8f:c9:eb:a6:5b:95:9c:1d:db:24:e4:d9:
                    cc:42:f8:9f:81:d4:88:4c:98:25:ec:44:06:ca:a8:
                    3f:3e:1f:22:cf:8d:b6:5e:7a:e2:eb:e5:c9:d9:09:
                    f1:0f:49:b8:2c:66:13:a3:03:29:df:30:23:90:21:
                    36:e3:a7:b0:4f:ea:f9:1f:f0:12:14:79:fc:cd:96:
                    bb:8d:0e:4a:57:26:f6:a7:b7:18:97:29:8b:e1:09:
                    c5:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6E:AB:55:3A:FA:63:45:A5:C6:6E:70:C0:ED:43:72:E3:12:12:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/94acd883-c297-357e-9871-cdf706385cd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.121.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:fb:5f:43:59:4c:fc:67:ee:1c:ea:16:11:1e:c8:01:a1:ce:
         6d:f6:f2:25:87:b4:45:0f:a0:10:c6:21:df:fd:e0:63:f4:54:
         da:4a:26:52:e7:84:69:fa:d6:bc:a3:77:ce:83:2c:62:54:5d:
         43:16:9b:00:8b:4f:cb:3b:ea:d1:84:05:07:83:86:4a:74:15:
         c8:41:f1:65:b1:6a:ed:15:9a:de:d0:96:4d:7d:08:1d:4d:ec:
         a4:1b:25:5e:a6:c7:23:2f:27:78:b3:7d:9d:12:a5:76:44:e2:
         64:84:dc:a0:df:a6:bd:b9:34:8b:eb:b2:41:48:cc:18:d8:a0:
         bf:15:f6:c2:84:29:92:c0:c6:69:df:ed:3b:0b:a4:89:32:c4:
         63:f4:9a:09:61:73:2c:0d:f8:4e:9e:3e:5b:d8:51:8e:a4:bd:
         71:2a:ff:54:fc:4b:f7:2e:87:11:93:e8:85:75:12:23:02:d7:
         de:40:59:77:1d:49:49:4f:c3:dd:0a:0e:6a:5f:54:be:16:6a:
         98:3b:2b:a9:6a:a0:7e:13:2d:69:c5:18:99:f2:40:a2:af:76:
         6e:1a:06:f7:99:17:c7:0d:bf:ea:62:21:c8:39:a0:f8:6c:2f:
         fc:7f:6b:12:50:11:0c:8e:8c:40:96:91:12:08:4c:5f:d1:4c:
         7f:5f:1f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:10:00 2025 by rpki-client