Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805/5874b833-6913-3906-9866-9820a7d437e5.roa
File:                     5874b833-6913-3906-9866-9820a7d437e5.roa (raw, json)
Hash identifier:          rZt/8w7cQxqPT+mJwmHzEw+rpJKH7vEpFXHfD6XgcgE=
Subject key identifier:   6B:C3:68:A1:F1:35:C1:51:57:17:6F:2B:CF:79:08:62:23:66:47:C0
Certificate issuer:       /CN=fc35b16c-01db-45a7-859c-93dd80a44805
Certificate serial:       010D0C9F4328584B56E4CB861BEDBC74E6060180
Authority key identifier: 0D:A5:89:D3:B2:5F:09:29:8B:4A:47:DD:A2:B0:1D:82:4D:5D:D5:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805/5874b833-6913-3906-9866-9820a7d437e5.roa
Signing time:             Sun 28 Sep 2025 01:28:13 +0000
ROA not before:           Sun 28 Sep 2025 01:28:13 +0000
ROA not after:            Sat 27 Dec 2025 02:28:13 +0000
asID:                     16509
IP address blocks:        192.170.16.0/21 maxlen: 24
                          192.170.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805/fc35b16c-01db-45a7-859c-93dd80a44805.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805/fc35b16c-01db-45a7-859c-93dd80a44805.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:56:e4:cb:86:1b:ed:bc:74:e6:06:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc35b16c-01db-45a7-859c-93dd80a44805
        Validity
            Not Before: Sep 28 01:28:13 2025 GMT
            Not After : Dec 27 02:28:13 2025 GMT
        Subject: CN=df088356-c5bb-477f-8e17-d59db6d0425c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:27:be:7a:f2:3f:15:8a:4a:53:41:4e:9f:63:
                    96:ff:f7:6d:f1:26:e7:5d:37:77:81:91:a2:e7:56:
                    44:e9:bc:25:71:e8:5b:62:53:4e:74:e2:6c:7c:44:
                    2a:cf:e9:a8:89:cc:60:29:e8:42:f4:d0:72:d9:83:
                    28:91:7e:fc:8e:59:91:d2:7f:f2:b0:83:fe:b1:8e:
                    a2:9e:7e:5a:3f:cf:68:ea:f2:f6:43:37:da:88:88:
                    ab:ef:e7:84:64:ce:4b:67:65:8b:d6:3d:54:0b:7e:
                    33:16:e5:f6:3c:eb:c8:2e:77:76:23:5e:fe:0d:b7:
                    1c:ba:08:ec:ad:ac:87:e3:97:8f:3e:50:32:b5:37:
                    f6:89:24:49:22:5c:bd:6a:81:32:c4:ab:00:d5:e0:
                    79:a0:dc:ac:5a:79:c5:33:c4:a3:79:22:13:7a:aa:
                    a2:e1:b9:ba:55:9a:8b:c8:a2:8a:03:93:41:6d:68:
                    90:2e:cf:6d:4b:33:3b:08:08:5e:fe:eb:7a:af:9a:
                    95:98:c4:a6:c3:c2:5f:b6:93:35:15:12:80:56:67:
                    a6:3c:d3:d7:fa:6c:6e:58:e7:36:60:fd:47:01:79:
                    19:63:4d:9f:51:0c:11:d2:7a:82:c5:a9:a4:d5:a8:
                    c3:bd:84:77:58:1e:01:1c:0a:18:35:67:f7:fa:55:
                    3e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C3:68:A1:F1:35:C1:51:57:17:6F:2B:CF:79:08:62:23:66:47:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805/5874b833-6913-3906-9866-9820a7d437e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805/fc35b16c-01db-45a7-859c-93dd80a44805.crl

            X509v3 Authority Key Identifier:
                keyid:0D:A5:89:D3:B2:5F:09:29:8B:4A:47:DD:A2:B0:1D:82:4D:5D:D5:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fc35b16c-01db-45a7-859c-93dd80a44805.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.170.16.0-192.170.27.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b5:a2:0f:fd:14:78:10:47:70:98:51:50:ad:2f:c6:53:25:
         5e:13:b9:f1:d7:f0:cf:62:1f:80:a1:c7:56:c7:f4:5a:cd:45:
         07:15:ce:a5:7e:21:9e:0f:56:3a:c6:08:f4:d2:4c:bb:b6:db:
         53:d0:48:29:6c:c6:de:de:ca:43:21:2a:9f:20:d0:75:1a:0b:
         8a:85:b5:47:88:d4:c1:e0:96:b5:65:40:72:30:a6:f6:ab:bb:
         3c:64:01:9f:3c:bb:66:7f:6f:a0:06:24:39:4a:46:ba:40:c2:
         ed:aa:75:bd:1b:60:d3:8d:90:29:62:14:a4:43:b7:29:24:c6:
         d6:64:1d:f4:57:c9:a3:48:e2:af:4f:be:c9:c4:d5:64:57:17:
         9a:c2:3f:5d:60:08:02:17:f4:73:ee:f3:80:96:26:cd:14:78:
         6a:c2:f0:4e:bc:7b:eb:b0:55:28:77:6c:4d:37:6c:de:a6:39:
         c8:c9:f6:d6:0e:da:9e:a6:ca:da:3b:39:9c:de:98:1e:e8:f5:
         cb:e7:e7:d6:7d:07:ce:4d:47:81:1a:3f:4d:c5:bb:7c:30:ca:
         87:27:9f:c8:d7:17:3a:13:36:44:df:d3:12:b1:be:33:2d:dc:
         3c:bb:c0:bc:1e:56:46:8f:b3:ea:6a:14:78:e6:eb:f8:14:d9:
         76:38:67:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 20:58:48 2025 by rpki-client