Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/69d73c84-d2dc-3e1e-a41c-6a4317fbb008.roa
File:                     69d73c84-d2dc-3e1e-a41c-6a4317fbb008.roa (raw, json)
Hash identifier:          cJ0naOOiAWiH4QT6D3wppMTtd9nsvlzbPHJ4UhVobXM=
Subject key identifier:   FA:50:C8:A6:B5:A5:51:96:9C:D4:35:87:90:88:15:96:DC:B5:84:05
Certificate issuer:       /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
Certificate serial:       010D0C9F4328584A6C55DB6047E5FF7C3866A980
Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/69d73c84-d2dc-3e1e-a41c-6a4317fbb008.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     10497
IP address blocks:        164.114.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:db:60:47:e5:ff:7c:38:66:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=8dbb9593-755c-4025-9bc5-dcdf2941a5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a1:e9:25:5a:ec:d5:a4:bd:00:bd:c2:67:3a:
                    06:23:36:74:73:79:39:7b:43:66:a0:06:57:01:91:
                    4d:29:76:13:41:aa:e9:aa:33:1b:f9:10:e5:92:a0:
                    c1:b9:9b:dd:8d:27:13:6f:9a:ab:23:ba:0f:0b:c9:
                    af:fc:c3:bf:eb:58:06:13:fe:a8:3c:55:5b:02:2f:
                    ad:1e:d9:f4:51:20:02:6a:8d:c7:9a:f0:b9:97:d3:
                    cf:8c:8f:52:fc:8e:42:e2:10:b5:42:8d:7d:46:77:
                    1a:bc:25:7a:83:52:8e:7b:92:6e:13:e3:de:4d:c7:
                    7d:4f:69:ff:e9:10:bb:45:36:68:68:ce:b4:cb:a5:
                    c5:ca:74:49:01:05:5c:20:64:f2:d6:d6:d3:35:dc:
                    06:56:a6:80:c4:91:fd:aa:cf:c9:42:13:5f:3f:50:
                    55:99:0c:3f:b9:0a:b2:cf:a3:5f:72:12:8a:a4:b3:
                    36:a2:2a:80:e6:6f:e4:9a:92:4f:b6:cf:d4:96:e7:
                    cf:a7:dc:ec:97:7f:b2:99:bf:0b:43:e5:48:17:8c:
                    90:75:45:1d:2f:df:e8:89:e9:68:eb:b1:3b:6c:51:
                    37:8d:ea:b5:84:a7:18:d8:78:47:3f:2f:7d:71:8f:
                    76:9d:fe:85:49:c3:8a:b4:1f:e2:e9:10:26:22:4d:
                    6d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:50:C8:A6:B5:A5:51:96:9C:D4:35:87:90:88:15:96:DC:B5:84:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/69d73c84-d2dc-3e1e-a41c-6a4317fbb008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl

            X509v3 Authority Key Identifier:
                keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.114.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a7:97:c9:79:c3:b1:b5:6f:78:3b:4b:f9:a8:9f:21:7c:cc:
         2b:39:18:33:c4:11:a0:c7:14:12:2a:83:3b:07:7f:f4:7a:8c:
         ce:0e:ea:d3:d8:08:22:20:d7:f8:0f:1b:d9:76:d9:17:07:ef:
         4d:65:3d:04:f8:d9:d7:2f:bd:ce:57:4b:4d:9c:20:a3:bb:8c:
         8e:5c:4a:98:1b:55:9c:65:09:9f:5e:95:b5:b0:ee:c9:ff:8e:
         ae:79:bc:f1:3f:9e:c5:f5:02:69:c4:c0:f9:f8:4b:e2:14:10:
         de:69:a2:bb:2c:92:ec:be:69:37:01:7f:ca:32:d4:3f:1a:46:
         88:d6:28:8d:30:93:ca:32:9e:35:0b:fc:39:3b:44:47:48:db:
         12:61:b8:4a:8c:b9:bd:53:34:8e:32:3f:8e:fc:c5:31:f3:68:
         03:2c:3c:4c:7a:55:82:40:bd:f1:50:dd:c3:bc:5c:4d:3d:de:
         1f:71:d2:10:88:81:f3:c5:6c:1a:50:a0:e4:e0:42:88:01:39:
         b9:88:e5:ab:05:46:40:b2:ce:b1:ca:b9:cf:88:dd:c4:a3:98:
         e0:44:b6:3c:c5:e7:76:49:72:59:e0:81:ad:3d:58:3b:bb:f6:
         89:28:78:43:3a:ce:1c:f0:0b:53:26:96:4d:e9:eb:66:f6:14:
         35:f8:1e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 8 20:54:45 2025 by rpki-client