Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7/c1fd1ff1-1cd9-3f6e-8bf2-aadb0d5516c3.roa
File:                     c1fd1ff1-1cd9-3f6e-8bf2-aadb0d5516c3.roa (raw, json)
Hash identifier:          QXAuX4LB9IFr0X7iX5uTj1keYSNsb1BnwdELyJGsuFs=
Subject key identifier:   62:98:EF:C4:FA:1D:B1:A5:49:5C:CF:CA:7B:9C:4E:36:B9:D4:B2:44
Certificate issuer:       /CN=16ef2847-f477-40df-9a9e-50bd5864acb7
Certificate serial:       010D0C9F4328584B2496D4B56D9FE2F0684BDC40
Authority key identifier: 7E:83:15:D8:9C:3F:F4:DE:0F:35:34:4F:AF:E7:29:43:2B:31:30:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7/c1fd1ff1-1cd9-3f6e-8bf2-aadb0d5516c3.roa
Signing time:             Wed 10 Sep 2025 01:00:33 +0000
ROA not before:           Wed 10 Sep 2025 01:00:33 +0000
ROA not after:            Tue 09 Dec 2025 02:00:33 +0000
asID:                     399034
IP address blocks:        134.195.169.0/24 maxlen: 24
                          172.98.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7/16ef2847-f477-40df-9a9e-50bd5864acb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7/16ef2847-f477-40df-9a9e-50bd5864acb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:24:96:d4:b5:6d:9f:e2:f0:68:4b:dc:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16ef2847-f477-40df-9a9e-50bd5864acb7
        Validity
            Not Before: Sep 10 01:00:33 2025 GMT
            Not After : Dec  9 02:00:33 2025 GMT
        Subject: CN=43065fec-23b3-4889-9219-86d7f199a1ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bb:a4:e9:ee:a0:bf:5b:fe:f5:6c:4e:24:de:
                    e8:88:39:97:f9:d8:82:f2:c4:f4:e5:0b:68:3a:8e:
                    9c:3b:f1:90:3a:fd:45:f4:d4:1f:df:79:85:8a:a5:
                    6e:b0:1c:46:3b:ae:9f:70:c6:1e:0a:2d:e8:57:fc:
                    f2:46:01:45:9c:b3:3b:86:54:b8:f1:cc:7d:1f:72:
                    a9:85:c1:2c:65:e6:28:06:1f:00:09:f1:f7:a7:92:
                    2c:b4:a0:10:7b:d7:22:8f:3e:21:1b:00:af:ba:49:
                    75:6f:07:0d:46:87:db:b1:de:9b:ee:4d:75:f2:22:
                    8d:f9:11:19:b4:de:2f:af:70:d6:cd:16:59:37:13:
                    86:a3:8e:70:53:b4:13:7c:f1:08:0d:e3:52:9d:6f:
                    e1:d3:fb:37:b5:a7:21:43:3c:e5:21:5c:d0:ec:d1:
                    ac:f5:79:03:9c:ba:ab:c6:6a:ce:82:ef:02:26:80:
                    05:f0:7a:3f:35:c6:24:ab:96:7e:ce:f6:07:b2:b2:
                    01:57:44:bd:4a:3a:ea:a9:e0:cf:9c:3c:6f:2b:f6:
                    a8:cf:c3:a8:61:e4:1f:c4:6a:f3:18:c9:7a:34:b0:
                    c0:9e:d5:7f:53:6b:66:ea:c0:2c:cb:bb:30:cc:05:
                    79:00:02:19:77:bc:79:21:3f:34:c8:f1:98:96:92:
                    2e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:98:EF:C4:FA:1D:B1:A5:49:5C:CF:CA:7B:9C:4E:36:B9:D4:B2:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7/c1fd1ff1-1cd9-3f6e-8bf2-aadb0d5516c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7/16ef2847-f477-40df-9a9e-50bd5864acb7.crl

            X509v3 Authority Key Identifier:
                keyid:7E:83:15:D8:9C:3F:F4:DE:0F:35:34:4F:AF:E7:29:43:2B:31:30:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/16ef2847-f477-40df-9a9e-50bd5864acb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.169.0/24
                  172.98.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:03:55:71:67:c9:2f:31:a8:ef:54:a4:bc:b3:a1:74:63:63:
         f4:c6:11:79:65:37:75:be:19:2e:ed:e9:44:95:aa:49:0c:ad:
         13:ef:58:db:64:ce:b2:a7:9d:1a:2e:6f:44:e3:ad:78:be:59:
         80:cf:cd:94:c9:13:80:09:d7:25:e2:7d:f3:ba:13:58:7a:9c:
         00:3a:7c:58:ea:a3:5a:71:97:44:16:35:90:bb:5a:f0:b1:53:
         54:9a:4d:d8:73:41:36:f9:9d:57:26:5c:4b:79:ff:7d:1f:23:
         d9:a5:d2:96:5c:62:ed:c3:ae:96:c2:85:3a:6b:e3:3c:14:90:
         72:8a:7c:1c:f0:fe:d1:dc:30:6b:11:d4:2f:c6:bc:ce:27:47:
         f7:c9:86:8e:3d:63:9a:7f:1a:f5:ec:c8:46:06:22:be:84:08:
         fd:f7:ec:44:e9:0a:b5:18:98:8f:fb:be:28:98:12:8e:9e:9e:
         18:2c:4d:9a:54:e2:3b:90:d6:84:65:23:6b:67:d3:42:19:64:
         0b:1f:6f:0a:b8:26:40:5a:d3:fe:d5:1c:b9:7b:35:3c:34:72:
         11:5e:c3:cd:41:d5:14:08:de:dc:0d:91:65:58:a9:9b:ca:08:
         f1:16:d9:bc:18:4b:a4:10:26:37:4b:a2:88:f2:f8:b4:8e:b6:
         9a:24:ac:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:12:38 2025 by rpki-client