Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/77ff4321-a6aa-3770-a76f-656f4a193421.roa
File:                     77ff4321-a6aa-3770-a76f-656f4a193421.roa (raw, json)
Hash identifier:          Er5xIjKtJdZTYY8ZDVNx1zRzctRgCB+ISBU77qbY47o=
Subject key identifier:   EB:15:FA:F6:6D:91:43:55:C6:1A:E5:F8:15:26:24:28:A1:8E:D6:B0
Certificate issuer:       /CN=916b9afb-9e46-4ab0-8029-7f4d1168bb37
Certificate serial:       010D0C9F4328584B1806D496DC0462E0F54BC500
Authority key identifier: A3:6F:EC:7E:8D:B6:99:E5:70:51:07:00:95:68:86:2D:6A:10:2D:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/77ff4321-a6aa-3770-a76f-656f4a193421.roa
Signing time:             Fri 05 Sep 2025 13:00:41 +0000
ROA not before:           Fri 05 Sep 2025 13:00:41 +0000
ROA not after:            Thu 04 Dec 2025 14:00:41 +0000
asID:                     6939
IP address blocks:        173.249.160.0/22 maxlen: 24
                          2602:fb15::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:18:06:d4:96:dc:04:62:e0:f5:4b:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916b9afb-9e46-4ab0-8029-7f4d1168bb37
        Validity
            Not Before: Sep  5 13:00:41 2025 GMT
            Not After : Dec  4 14:00:41 2025 GMT
        Subject: CN=abfa07a9-4dfd-4502-be8a-e697b9069ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:94:29:02:6b:50:f2:6f:e6:7e:d9:47:ef:f2:
                    0d:23:cf:26:c3:a4:07:be:7a:a9:27:2f:63:f3:e3:
                    2e:de:b2:f9:74:97:d8:3f:08:62:50:da:07:2c:12:
                    0d:08:d0:57:a0:9d:0a:99:d6:02:b3:e6:2c:a6:3e:
                    c7:2c:28:9f:65:89:85:43:5b:c7:94:0f:76:fa:2c:
                    d7:7b:48:6c:7a:84:ce:ee:d0:58:76:1f:6a:91:61:
                    dc:ce:15:08:e5:84:1b:df:18:a1:f5:01:80:c4:89:
                    28:c3:8d:ea:a5:af:39:ad:b4:02:0c:a8:42:c3:6d:
                    36:4a:c0:cc:fc:c0:2e:35:68:2e:b0:6d:dd:53:7a:
                    5f:5c:ef:d4:c0:2a:91:34:62:bf:6c:c5:ac:16:1d:
                    cc:07:77:59:b2:6c:a7:5d:71:47:79:f8:a9:39:19:
                    76:c2:83:82:29:80:91:21:9d:3a:20:53:c5:0f:0f:
                    64:7f:8c:ee:ef:c2:f3:a4:25:c8:cb:fb:a9:5b:06:
                    c6:4d:5f:8f:98:26:a6:ff:48:6c:9c:60:cf:73:53:
                    e2:b5:df:e6:80:fd:c7:b9:06:81:6e:0f:d6:a9:c6:
                    62:c8:de:8c:ec:f0:cf:a7:b8:85:18:7b:c6:38:28:
                    19:ff:29:27:80:54:b1:84:2b:96:a7:87:27:68:53:
                    a3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:15:FA:F6:6D:91:43:55:C6:1A:E5:F8:15:26:24:28:A1:8E:D6:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/77ff4321-a6aa-3770-a76f-656f4a193421.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.crl

            X509v3 Authority Key Identifier:
                keyid:A3:6F:EC:7E:8D:B6:99:E5:70:51:07:00:95:68:86:2D:6A:10:2D:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.160.0/22
                IPv6:
                  2602:fb15::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:59:25:c9:61:54:1e:25:8c:48:91:ef:ad:6e:e5:82:8e:c0:
         a5:f5:08:12:37:68:72:6f:48:a4:55:4e:b2:50:bd:28:13:af:
         f1:31:83:c0:65:60:c7:9a:97:10:b1:fb:f4:78:72:f8:d5:aa:
         6d:6a:d0:41:87:f7:05:d3:60:80:21:9b:13:f0:34:ad:e2:f9:
         36:a0:39:3e:82:04:e5:03:c7:8d:01:80:af:23:2a:81:f6:5f:
         54:72:5f:cb:aa:3e:ef:da:44:80:21:27:34:77:86:a2:73:70:
         4a:d2:e1:ed:6d:62:24:4a:c7:d9:52:f7:c1:dd:a1:17:18:a8:
         a5:c8:23:ec:f4:3d:ab:31:f9:88:46:14:48:4b:3b:cf:7e:25:
         94:c4:c5:f4:30:6c:2e:43:83:fa:9f:af:53:4e:f2:3c:07:f8:
         42:0e:20:17:05:74:02:4e:ed:42:d3:0a:81:f0:c7:e7:f4:a8:
         e9:29:12:58:86:37:e2:02:e7:83:c7:a4:a9:36:85:a8:2f:ec:
         b8:97:84:25:c3:8d:a4:48:27:64:16:51:46:6c:64:5f:ae:b2:
         1a:9b:57:b4:d6:5e:46:ed:a8:13:74:1a:86:30:6a:c6:7f:7d:
         31:f3:fd:75:b4:e3:38:35:b7:05:6c:fb:eb:3e:1d:c4:e8:32:
         7b:68:68:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 17:27:10 2025 by rpki-client