Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5cc41769-a8f8-3609-a674-3c555a34b77b.roa
File:                     5cc41769-a8f8-3609-a674-3c555a34b77b.roa (raw, json)
Hash identifier:          FqzhfNejR2zj7an8SE25uXtAVmGxM93QPUvBU4zBeZs=
Subject key identifier:   81:04:7C:FB:AB:A5:AD:F3:C2:40:AA:00:B9:0D:09:9F:ED:33:96:E6
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A7A4B3D071762581A4D4ECD00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5cc41769-a8f8-3609-a674-3c555a34b77b.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     852
IP address blocks:        199.126.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:3d:07:17:62:58:1a:4d:4e:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=79171fed-a3aa-47a7-a8c8-066cff909a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:4b:45:22:38:1f:7e:ad:8a:f7:ad:8e:47:3b:
                    49:4e:11:22:9b:e8:1c:b3:26:8e:18:0b:c0:ce:83:
                    07:34:ac:39:dc:3e:b7:aa:e8:c6:aa:54:85:59:a6:
                    bd:f7:59:45:73:1d:2c:ac:a0:4a:38:5d:cc:b8:4a:
                    10:68:85:b0:8f:8f:8f:fc:10:1c:6e:c6:ea:e3:b6:
                    82:c4:1a:10:80:58:1c:4e:6f:e9:b7:cb:c5:3a:b3:
                    be:e8:5b:5f:76:b6:10:5e:e6:b1:d2:ec:cd:d9:bc:
                    75:a4:2d:10:46:7c:4a:2e:1f:06:4b:06:41:e7:8e:
                    26:4a:14:47:1f:73:8d:2e:ea:77:2f:fd:96:af:ba:
                    2a:52:14:3b:30:24:8e:a2:cf:b6:4d:b0:fe:a4:d9:
                    2a:11:cf:85:79:83:13:1f:ad:5e:8b:78:93:c1:d7:
                    9d:20:b2:1c:a6:7a:0e:27:f5:aa:cc:79:79:25:b0:
                    2c:e7:a1:46:0a:38:23:78:35:2e:98:b1:5a:7e:b3:
                    ce:9f:56:11:73:68:89:cc:41:20:92:1d:7c:ab:37:
                    ac:b7:14:cf:1d:f3:23:a6:ce:c8:e2:42:90:6f:9b:
                    f5:cf:23:62:3d:fc:e9:70:68:87:29:48:73:d4:bf:
                    82:1f:c1:f7:94:22:6f:8f:98:95:79:af:d7:24:54:
                    39:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:04:7C:FB:AB:A5:AD:F3:C2:40:AA:00:B9:0D:09:9F:ED:33:96:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5cc41769-a8f8-3609-a674-3c555a34b77b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.126.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e1:f5:17:df:a6:73:ea:ec:5c:f7:8e:73:94:71:ef:c9:ae:1e:
         d5:b1:d2:d1:e5:2c:c2:db:1a:b5:c1:79:4c:15:f4:e1:c2:30:
         61:b2:00:d6:bc:4f:da:84:78:2e:5a:03:9d:04:23:d9:83:22:
         18:77:2b:52:05:6d:5a:1b:15:a4:fd:e4:18:8d:50:ab:c6:c6:
         28:ca:6f:fb:e0:c9:56:fc:73:31:21:91:48:f5:37:69:19:cf:
         ef:ac:79:10:9c:c7:6c:c2:4a:05:fb:f2:5c:46:13:65:fe:26:
         c1:4d:14:6a:28:45:97:36:5b:83:63:c0:42:c8:40:3a:3d:4d:
         c3:d7:02:f3:20:56:c6:71:25:28:75:bd:3a:81:0c:e8:85:b6:
         d6:ee:ca:ac:6a:28:db:2b:56:0c:df:d0:2e:d2:8b:71:99:ff:
         87:35:4b:82:eb:16:a4:9b:77:ab:bb:f0:05:6c:8c:01:e8:64:
         8a:27:4d:86:9c:ea:ba:5c:ea:b7:e7:5e:49:ac:8a:9e:05:90:
         ad:30:f2:64:49:f7:eb:e9:f4:3e:88:77:86:d5:31:0a:a2:4f:
         23:10:56:ad:d2:4c:df:7c:85:ce:ee:68:0a:d1:ea:dd:b1:fa:
         36:bc:28:42:09:9a:57:a9:6e:8c:7f:dd:6c:19:7c:53:ca:5f:
         41:6e:1a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:21:44 2025 by rpki-client