Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/0162589f-0dbd-3625-94d1-68de961598e8.roa
File:                     0162589f-0dbd-3625-94d1-68de961598e8.roa (raw, json)
Hash identifier:          96JX5WCaMCqFdLQfsDmkFfri4WXhfhnEq1ZrV4TpcTw=
Subject key identifier:   96:3A:8D:50:F9:AD:F1:28:1E:35:BD:3C:19:06:B1:A4:FB:74:86:D4
Certificate issuer:       /CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3
Certificate serial:       010D0C9F4328584B0FA6B7A31598F300EA110C20
Authority key identifier: 1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/0162589f-0dbd-3625-94d1-68de961598e8.roa
Signing time:             Tue 02 Sep 2025 13:00:42 +0000
ROA not before:           Tue 02 Sep 2025 13:00:42 +0000
ROA not after:            Mon 01 Dec 2025 14:00:42 +0000
asID:                     30083
IP address blocks:        173.201.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0f:a6:b7:a3:15:98:f3:00:ea:11:0c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efc68aa3-abc5-4d34-8f1c-17bb11d92ba3
        Validity
            Not Before: Sep  2 13:00:42 2025 GMT
            Not After : Dec  1 14:00:42 2025 GMT
        Subject: CN=72a96903-4768-4293-9c23-638125239010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e6:2f:b7:01:bd:18:07:8a:da:fe:eb:b3:d1:
                    bb:67:a1:9b:ae:4e:d7:8b:80:9b:f8:42:0e:bc:d7:
                    4b:59:83:b6:53:99:d9:9c:75:cf:93:7e:e2:60:14:
                    0d:cf:fd:cc:3a:20:57:cf:d2:33:34:6e:4a:9d:8b:
                    f1:0c:2f:40:62:c5:31:9b:a6:81:33:17:90:67:09:
                    e6:6e:a8:05:28:19:03:c7:72:59:4b:a5:9c:ed:75:
                    59:02:6b:52:d8:71:18:9a:a5:21:55:c6:59:8d:6c:
                    76:ef:ce:a6:fb:74:0b:65:0d:83:00:d6:b9:07:a4:
                    55:10:56:36:70:ec:80:d8:45:39:b6:37:91:b7:63:
                    dc:30:42:df:f0:bf:1e:4e:6c:d3:8b:08:b9:8b:53:
                    7d:21:3a:7b:92:20:0a:5d:3d:38:f9:2d:be:f6:90:
                    50:6f:53:39:85:4f:14:f1:0d:51:b0:3e:a0:c7:f2:
                    e5:e4:17:08:cc:98:03:c1:61:f9:07:df:a8:4b:e9:
                    a1:79:3e:7d:e0:1d:37:71:c2:c5:7a:38:5b:2a:44:
                    02:1f:5d:7b:07:7c:89:fb:2f:b9:58:2a:8b:a5:cb:
                    2d:ef:e9:60:e9:9e:b1:8a:5e:a8:95:7d:38:91:84:
                    7e:ab:30:75:66:60:c7:9a:e2:4e:5c:7b:67:89:7e:
                    c3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3A:8D:50:F9:AD:F1:28:1E:35:BD:3C:19:06:B1:A4:FB:74:86:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/0162589f-0dbd-3625-94d1-68de961598e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.crl

            X509v3 Authority Key Identifier:
                keyid:1A:35:74:FA:E0:D3:CE:39:83:44:81:6B:E8:22:EE:27:25:8E:17:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efc68aa3-abc5-4d34-8f1c-17bb11d92ba3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.201.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:62:fc:74:7a:37:ac:ba:ec:96:3c:82:60:13:d6:3a:16:6f:
         1f:b9:a4:8c:57:96:b6:96:40:d6:16:fb:93:c4:4f:6e:8f:03:
         84:a7:0f:d3:ee:04:92:ef:9c:36:61:94:65:33:34:b8:ea:52:
         ac:58:e2:b3:71:96:1b:9a:00:7e:89:80:78:db:18:03:af:e3:
         58:93:29:7e:01:d8:d7:3c:fc:a7:a8:36:9a:77:b1:88:36:b7:
         a6:90:1e:bc:ec:90:92:68:95:24:c7:4c:54:03:d2:35:bc:42:
         4a:ed:8d:03:ef:03:12:57:b9:a7:58:b0:45:d1:b2:49:bf:19:
         7a:7b:71:6f:0d:a0:6e:30:e2:af:a8:d3:de:89:1a:c5:6d:45:
         26:03:36:7b:6a:30:64:de:95:93:35:01:56:c4:77:64:0b:35:
         51:5b:e3:28:84:cc:d2:5c:4f:6d:aa:3e:70:47:12:82:dd:98:
         73:e8:71:61:47:c7:74:64:63:3f:74:df:5d:6e:57:ed:5c:4d:
         88:8e:71:e2:16:8c:04:ec:ed:56:ff:04:cf:96:0c:33:16:6f:
         89:5b:11:99:89:46:39:49:ac:bb:99:85:54:e3:2f:ab:51:ce:
         ab:35:b1:26:c7:4f:31:e8:0e:30:2e:16:f5:9f:6b:e9:89:85:
         27:97:13:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:33:58 2025 by rpki-client