Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/a6c73c7a-1d9c-319f-a05d-b106338c766b.roa
File:                     a6c73c7a-1d9c-319f-a05d-b106338c766b.roa (raw, json)
Hash identifier:          UAXMoOjae8rpwpvNjc03M2IolJzXkJF7btB1KRj15Mw=
Subject key identifier:   CF:1A:7C:98:46:53:53:BF:D9:6E:69:6B:42:6F:FD:1E:E3:DB:52:FC
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F4328584A74B5CD4FC7E0532CFF2FE3C0
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/a6c73c7a-1d9c-319f-a05d-b106338c766b.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     11404
IP address blocks:        199.102.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:cd:4f:c7:e0:53:2c:ff:2f:e3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=f50247ce-ffea-470c-9f3a-cf4f8ffa3a4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ec:77:80:24:3c:d8:7e:2d:01:6e:b5:5e:60:
                    df:f9:57:6c:92:54:17:30:b3:3d:68:c8:e2:5f:46:
                    b7:0d:c3:e0:94:51:eb:3c:0f:c8:de:18:08:8d:5f:
                    87:08:a7:0a:8f:73:06:96:f4:7d:1d:56:c2:b3:83:
                    99:82:c6:02:81:40:25:fa:c9:bc:28:4a:4c:5d:6a:
                    14:ce:95:7f:6b:7c:c6:1b:35:04:7b:74:3f:f1:eb:
                    d6:0c:8d:38:78:89:97:2c:18:74:cd:08:ee:e5:e1:
                    b3:d7:83:91:93:6f:9b:8c:41:90:17:59:a2:6f:1b:
                    39:e7:69:33:80:99:ae:f5:06:d4:80:b9:af:35:62:
                    7f:ee:34:6d:24:16:f5:ab:0e:db:e2:a9:59:6d:30:
                    92:7b:27:8c:f9:8b:48:25:8f:f0:77:fc:ae:f0:31:
                    7e:4e:b3:24:d2:0f:e8:50:34:23:37:7d:3b:b6:40:
                    ba:d6:44:96:2c:c9:02:05:94:2c:7c:97:52:7b:ee:
                    aa:d7:eb:51:de:d1:6b:eb:52:1a:de:7b:80:88:22:
                    0a:5c:c9:7d:39:23:8a:ae:46:94:e1:0e:f6:b4:a0:
                    ae:47:c2:cc:86:1a:93:5f:42:f7:bc:75:80:5a:ac:
                    b4:73:b3:a2:04:3b:cb:8c:94:0a:db:d2:b0:66:d1:
                    b5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1A:7C:98:46:53:53:BF:D9:6E:69:6B:42:6F:FD:1E:E3:DB:52:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/a6c73c7a-1d9c-319f-a05d-b106338c766b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.102.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:13:45:68:db:15:05:ca:39:18:bf:1a:0f:95:d4:6e:a8:2a:
         85:3c:45:14:29:a3:aa:7e:da:78:b6:5b:29:c6:3d:14:55:2d:
         42:15:46:18:69:5a:5e:60:ba:ce:63:da:30:62:2c:5f:b7:56:
         38:d1:89:62:00:1a:df:52:58:49:99:11:c3:3b:88:3d:c1:7a:
         c6:16:78:d5:ff:0a:36:0c:f4:bf:d4:c0:96:a0:ec:98:7e:61:
         b0:fe:e9:78:bb:57:22:eb:16:6d:a6:1e:8e:e0:af:d9:a4:31:
         1b:1d:7b:09:73:9e:18:27:4b:33:01:71:95:6d:f3:1a:74:33:
         24:d3:a5:c8:19:23:5d:c3:04:65:86:57:52:60:6d:60:ee:46:
         1c:99:3b:cc:b9:5e:e8:3b:bf:e4:42:dd:43:cb:20:6f:21:51:
         c5:52:6c:35:5a:81:f2:4b:5c:54:8e:68:59:ab:f6:e1:36:a8:
         a5:36:55:7c:db:78:60:a2:10:13:13:12:64:b9:5b:9a:2f:b2:
         3b:f7:11:c8:54:da:1f:da:22:c4:e9:68:91:73:ea:0f:c3:39:
         ce:2e:1a:54:21:dd:35:da:68:e3:2f:d1:57:a4:57:29:3e:6c:
         2f:e4:5d:09:43:aa:85:00:d9:f3:59:e0:e4:10:0a:f2:f4:bd:
         04:99:e3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 16:00:41 2025 by rpki-client