Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/16b0d617-d1af-3e51-844b-d5e315727c07.roa
File:                     16b0d617-d1af-3e51-844b-d5e315727c07.roa (raw, json)
Hash identifier:          3GZfMm3e/Yk5wW2uWm4+92Ikq1hu4CI7GeaMf1TKWJs=
Subject key identifier:   3E:C7:6B:DA:F3:B0:E0:E2:2C:46:AF:DE:3B:70:70:96:67:19:F1:E3
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A7D15F1821536ECB135981600
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/16b0d617-d1af-3e51-844b-d5e315727c07.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     852
IP address blocks:        208.181.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:f1:82:15:36:ec:b1:35:98:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=e0a977e8-3193-407d-ade0-22820f735f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fe:32:a7:66:82:f1:e7:85:ea:c2:16:a3:e8:
                    cd:15:ea:8a:7b:e4:a4:f1:be:2e:9e:dc:33:48:ea:
                    d2:69:85:1a:ff:6d:eb:57:af:bf:43:de:36:ed:99:
                    9f:90:cf:c7:ff:d7:01:72:84:88:38:a3:6b:2f:c7:
                    59:a4:f6:8c:63:73:05:5b:48:14:6a:f5:16:36:ae:
                    1b:f8:ad:c5:e6:c1:f8:de:59:f9:9d:b5:fe:10:6e:
                    7c:3b:74:1d:5e:6d:6f:72:fc:35:5d:7e:d2:93:96:
                    f5:39:75:5b:09:c1:40:01:86:78:2b:23:ef:60:7d:
                    1d:b4:40:59:f4:a1:45:d9:b1:5c:15:39:b9:4a:67:
                    6b:4e:4c:39:ab:d6:4f:8c:85:41:9f:da:a0:b9:00:
                    67:c9:63:9b:b0:b6:d0:a6:87:74:07:34:d1:b8:44:
                    87:c7:ee:68:4d:f2:be:2a:fb:96:6c:5b:f8:7a:f2:
                    87:e7:76:03:87:0b:b0:68:42:04:c6:45:ea:07:10:
                    9c:ed:61:14:f0:e3:1c:58:4d:d1:b7:c2:33:63:16:
                    c5:df:5e:86:6d:31:08:dd:ce:2a:b6:70:e5:ba:f3:
                    b5:f4:bd:17:6d:0f:28:7b:83:79:2a:32:fa:80:6b:
                    24:e9:4f:b8:ab:5a:ae:d6:74:8a:8b:70:39:6f:ca:
                    06:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C7:6B:DA:F3:B0:E0:E2:2C:46:AF:DE:3B:70:70:96:67:19:F1:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/16b0d617-d1af-3e51-844b-d5e315727c07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.181.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:4e:8f:9f:03:65:fe:11:2c:8f:f6:90:b7:af:d7:24:52:3b:
         89:88:7a:f2:9b:20:62:79:29:72:9a:58:75:e6:93:10:60:2b:
         16:0f:b6:61:18:b4:c5:ff:06:6e:cd:11:3e:bd:b8:39:e3:bb:
         09:1a:73:75:f7:78:14:bc:7d:53:86:58:c8:83:e0:f0:0b:a6:
         c7:2b:ef:fb:72:76:37:96:ae:98:fe:c3:92:ed:91:93:29:0c:
         0c:cf:3b:a3:88:75:a1:b4:b5:b7:f3:04:ea:94:d9:de:a0:fc:
         f0:62:7c:4b:03:c3:22:1d:4a:89:79:48:0f:6f:e7:59:88:45:
         b3:5b:f7:c5:f0:76:0b:84:bc:5f:a9:42:a4:79:0f:07:f6:14:
         8e:b5:05:80:9c:b6:52:61:86:e6:27:96:7e:83:d3:0d:6b:66:
         d9:2c:32:75:4e:ab:a4:32:1a:d1:b7:69:8b:04:24:6e:88:42:
         db:53:5e:9c:ea:ac:19:e1:26:47:fd:1a:a2:8b:e7:fc:dd:5d:
         95:7c:4c:5a:6d:78:03:07:e2:eb:9e:46:75:1d:5d:6e:6d:6d:
         d6:07:f5:60:66:92:28:29:44:96:1e:60:20:e6:4b:92:e8:0b:
         36:f6:01:dc:a7:9e:71:a9:2c:55:61:46:f4:0a:7d:49:90:1c:
         ec:46:08:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:41:40 2025 by rpki-client