Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/663c53c6-48f7-33d3-92a5-6d8a1faaa728.roa
File:                     663c53c6-48f7-33d3-92a5-6d8a1faaa728.roa (raw, json)
Hash identifier:          cCVtErD+3l1VQt4LquzBuNPiQADMtuKY2sdvLtc17gs=
Subject key identifier:   2A:0C:5D:5D:B5:22:3C:67:34:EF:6A:DF:C3:29:13:FA:33:FF:83:DF
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F4328584A963697B184D29B0BB3B3E200
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/663c53c6-48f7-33d3-92a5-6d8a1faaa728.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     6181
IP address blocks:        216.196.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 31 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:97:b1:84:d2:9b:0b:b3:b3:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=a055bad1-7787-4d15-9bfc-163b88a1d2c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:46:82:f5:0a:e6:04:f1:2e:e8:9b:d5:ec:cb:
                    88:69:c9:af:01:63:16:1b:37:e7:11:ac:f7:4a:8e:
                    e9:1b:f7:3b:c2:b3:fd:ad:4d:f7:14:b2:71:b1:0b:
                    3b:38:11:ef:d6:6e:83:7b:86:2b:ac:23:7b:0e:e4:
                    16:3f:a4:09:c8:58:e5:b6:04:6e:55:9f:ec:9f:24:
                    f3:ba:89:5a:25:7a:7e:45:2c:9e:57:f2:65:df:9b:
                    28:26:99:08:24:86:58:23:f0:85:c8:27:4e:0e:fb:
                    93:81:06:63:13:03:41:59:73:e9:18:58:5a:80:3c:
                    b9:84:2e:82:79:1d:5d:0f:a1:35:c6:31:e2:dd:cd:
                    dc:a9:c2:1d:ea:9f:a9:c6:04:ae:a7:1b:b2:94:95:
                    ee:80:e5:fc:eb:50:bb:13:7b:0a:49:8a:9b:8d:06:
                    17:9b:8b:9e:f2:82:e4:f0:62:99:a9:cf:0d:c1:d8:
                    fd:0c:01:da:51:fe:95:ec:37:74:df:31:a6:7b:56:
                    18:c9:f3:40:7b:eb:d6:c5:0f:3a:c2:c8:a8:39:0b:
                    04:cb:b6:d3:1d:f3:6e:31:35:49:2f:42:76:74:93:
                    fa:03:fd:21:34:d4:aa:7e:91:59:68:41:24:12:f0:
                    32:d0:ef:80:5d:97:36:9a:a9:5e:e5:92:a8:2d:79:
                    2c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0C:5D:5D:B5:22:3C:67:34:EF:6A:DF:C3:29:13:FA:33:FF:83:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/663c53c6-48f7-33d3-92a5-6d8a1faaa728.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.196.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:69:02:bc:6e:e6:46:be:74:54:e0:be:ce:d1:a9:f6:ab:b2:
         d6:da:aa:f8:9c:83:92:70:0b:7d:c3:ea:05:02:0f:ee:d3:e6:
         ee:75:18:53:e2:d3:f4:96:ba:a9:05:40:39:f1:63:7f:f2:d5:
         a1:0d:a0:ce:52:4b:d0:77:81:cb:e1:e4:9f:10:5d:94:75:bf:
         63:aa:10:ba:fd:f0:ff:98:13:3e:e6:fe:92:b7:e7:1f:30:1a:
         d5:09:f1:ef:1e:1a:11:c9:d4:04:1a:ef:de:31:a9:2f:bb:1a:
         cf:33:9c:d3:ba:63:21:94:04:7f:dd:f3:58:9b:c2:ad:75:d8:
         d4:08:7b:6f:3e:c7:9b:de:b3:e6:63:b8:a2:15:64:6a:ed:2a:
         0c:ec:63:13:4c:22:ce:95:1c:2c:18:36:14:8d:f5:04:50:b8:
         86:04:d6:90:e7:30:ab:8e:bb:b7:68:e9:91:3c:54:12:8d:08:
         8c:91:26:4a:01:fe:63:b4:8c:6b:f3:4b:f9:f1:d9:df:c4:a7:
         03:ba:71:24:05:2b:f1:74:14:6f:9d:61:f6:f1:70:32:da:05:
         9d:8e:8b:84:9a:18:8b:53:75:90:70:a6:8e:c7:89:a8:d4:91:
         94:f1:fa:ab:a5:f1:5a:50:ce:12:5b:a3:48:c7:54:ff:1a:16:
         25:0e:b3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 13:15:15 2025 by rpki-client