Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/c21abfa5-eb96-3f30-bc67-c4138423851d.roa
File:                     c21abfa5-eb96-3f30-bc67-c4138423851d.roa (raw, json)
Hash identifier:          tENtRLca6Nk0ZoGd00GFyMn5nGijPL+hWQdDmV6emdg=
Subject key identifier:   1E:DE:F9:33:E8:AD:A6:BA:F8:48:AF:39:BF:4C:80:A8:EC:1B:79:61
Certificate issuer:       /CN=916b9afb-9e46-4ab0-8029-7f4d1168bb37
Certificate serial:       010D0C9F4328584A8410F7E2546638027B6AE4A0
Authority key identifier: A3:6F:EC:7E:8D:B6:99:E5:70:51:07:00:95:68:86:2D:6A:10:2D:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/c21abfa5-eb96-3f30-bc67-c4138423851d.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     400765
IP address blocks:        173.249.160.0/22 maxlen: 24
                          2602:fb15::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:f7:e2:54:66:38:02:7b:6a:e4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=916b9afb-9e46-4ab0-8029-7f4d1168bb37
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=ff83d0ff-7e98-45e2-9bb0-0f294dc16a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:1d:7a:d7:5b:a5:a4:1f:bb:f8:73:1d:e5:ed:
                    13:6a:fc:17:df:1e:dc:b8:8a:8c:d2:fd:cf:07:50:
                    18:73:f8:4e:ec:ac:a9:53:61:90:de:2d:76:55:55:
                    60:17:64:bd:7c:43:dd:0c:29:cf:64:e4:fd:62:1f:
                    60:93:d4:e3:86:22:be:55:50:8b:d4:de:c3:b8:da:
                    17:36:b4:78:bf:cf:2f:61:3a:cc:ee:c1:2a:2d:e8:
                    dd:2b:57:3f:85:e0:0a:14:e9:f9:2c:4d:b6:9d:6a:
                    ed:8a:6e:80:3f:76:0d:58:c7:f2:a6:9c:2f:49:ce:
                    f0:a1:90:b5:8f:54:bd:1f:5f:f4:ef:ff:6c:ac:c0:
                    e1:56:27:6a:41:2c:ef:0a:59:eb:fe:67:a1:85:c2:
                    dc:a4:1c:85:d5:fc:d5:7c:77:80:ca:94:b0:39:01:
                    a2:4f:df:32:cb:2c:b7:51:6d:f3:1a:01:94:3b:07:
                    11:5d:00:c1:46:bd:11:ef:cf:c6:f3:23:4b:50:49:
                    83:60:86:bc:75:02:56:41:03:19:bf:c0:40:10:63:
                    1e:35:16:af:ca:5d:5c:a2:72:3f:af:9c:d4:b2:f9:
                    5b:37:6e:90:21:69:5e:80:52:ab:72:6a:ff:2a:c2:
                    03:7e:0c:e7:82:81:65:03:75:04:4a:d5:4f:97:0e:
                    a4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:DE:F9:33:E8:AD:A6:BA:F8:48:AF:39:BF:4C:80:A8:EC:1B:79:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/c21abfa5-eb96-3f30-bc67-c4138423851d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37/916b9afb-9e46-4ab0-8029-7f4d1168bb37.crl

            X509v3 Authority Key Identifier:
                keyid:A3:6F:EC:7E:8D:B6:99:E5:70:51:07:00:95:68:86:2D:6A:10:2D:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/916b9afb-9e46-4ab0-8029-7f4d1168bb37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.160.0/22
                IPv6:
                  2602:fb15::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:7f:8a:94:a3:a1:6f:ac:d6:97:43:d3:1c:ca:64:89:30:3f:
         24:04:30:a9:86:0b:6d:1d:ac:f9:c2:84:17:3e:83:42:06:d0:
         74:59:00:45:bc:1b:9c:6b:88:24:b0:85:ca:54:5f:a4:a2:81:
         30:80:71:ea:b7:4b:14:52:08:28:89:69:a1:96:58:55:4a:39:
         4a:bb:04:61:a4:3e:10:b2:f1:ec:ca:47:14:4f:f2:56:f2:24:
         59:62:2f:ac:f9:7a:fd:41:90:cf:e7:06:e5:2b:df:99:c5:59:
         66:8f:73:68:4b:ec:55:79:5c:f0:fe:04:ec:c5:fa:8e:c7:4f:
         91:b5:7c:76:f3:c2:7a:89:19:44:da:6c:b0:06:82:3c:b5:09:
         65:c0:fa:d1:0f:f0:45:44:df:ee:bd:fb:5a:65:9e:56:8e:05:
         34:5f:c1:e1:79:f6:81:22:4c:cc:01:8f:01:52:ee:22:c8:4b:
         ca:74:7e:5e:49:a5:c5:66:98:b6:ae:c1:94:c2:1c:9b:7a:e1:
         6c:3d:84:5b:0a:b0:c0:8e:ba:10:f4:d9:7e:1b:9f:ae:b1:cb:
         81:7b:2b:3c:e1:bb:d8:15:56:2e:be:18:f5:b8:08:66:23:3c:
         ed:4e:5e:e2:b8:dd:2b:ee:33:c6:29:20:f8:07:95:44:90:5e:
         be:2b:08:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:12:59 2025 by rpki-client