Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/9d7b7313-436e-3af4-96c1-447c283f9afb.roa
File:                     9d7b7313-436e-3af4-96c1-447c283f9afb.roa (raw, json)
Hash identifier:          xDNQ0jd7YSOFXPX04nnPFh+bvI5CdHNUUZ7i8kll810=
Subject key identifier:   4A:47:66:DD:78:71:17:85:CC:85:70:A3:63:10:EE:AE:B6:25:DF:1C
Certificate issuer:       /CN=16ef9480-24de-4ac2-bd6e-b8d3d5320b5d
Certificate serial:       010D0C9F4328584A103549870ED497A300C92980
Authority key identifier: 9E:40:FB:15:1B:25:50:97:6E:71:50:4B:D8:A5:E9:6A:9E:5E:9D:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/9d7b7313-436e-3af4-96c1-447c283f9afb.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     206804
IP address blocks:        198.181.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:49:87:0e:d4:97:a3:00:c9:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16ef9480-24de-4ac2-bd6e-b8d3d5320b5d
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=f82dad88-8056-4fb6-ae78-33bdb8fadd4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0a:90:ce:b0:d4:ee:87:bf:d0:a7:b3:0e:f7:
                    fb:54:d6:bb:29:90:33:f9:50:25:b7:27:c8:6b:83:
                    d6:36:ee:1b:b4:7a:ce:f3:71:5c:10:f7:7f:60:5b:
                    d4:7d:00:7a:0e:81:37:14:de:47:1d:d4:e7:7a:df:
                    76:7a:b8:a0:04:4e:df:e1:4f:79:9c:fa:ae:19:3c:
                    55:cd:c0:f8:f3:08:37:83:8a:8e:d4:dc:c9:56:8c:
                    9b:da:64:b0:35:a7:17:b0:a5:d5:09:5e:f7:f4:9f:
                    f1:2d:96:a4:60:1c:00:7d:8c:0f:48:6f:d9:95:66:
                    50:c4:6e:d7:42:e3:1e:a9:88:1f:16:50:8d:33:23:
                    58:f3:9d:4b:21:97:8c:79:3f:04:77:5f:9e:2d:4a:
                    17:ee:df:56:1d:cf:f9:81:cb:71:a3:84:1d:a7:2b:
                    e4:cc:b4:c6:55:1b:bb:23:da:bf:d3:61:8d:b4:44:
                    10:10:c3:83:3d:ea:f8:33:a4:e0:63:a3:c8:85:d1:
                    5d:0c:6f:7f:39:75:c6:7a:3e:33:19:b4:0e:00:58:
                    16:4c:7d:42:b3:c0:db:27:7b:67:3a:ac:df:a4:02:
                    2d:9b:5d:b0:7d:2b:1e:1e:28:d8:9f:14:f9:81:92:
                    07:88:4c:3e:49:35:88:82:b0:12:4e:ab:ef:21:e4:
                    98:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:47:66:DD:78:71:17:85:CC:85:70:A3:63:10:EE:AE:B6:25:DF:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/9d7b7313-436e-3af4-96c1-447c283f9afb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.crl

            X509v3 Authority Key Identifier:
                keyid:9E:40:FB:15:1B:25:50:97:6E:71:50:4B:D8:A5:E9:6A:9E:5E:9D:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/16ef9480-24de-4ac2-bd6e-b8d3d5320b5d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.181.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:10:d9:b6:31:79:00:9a:14:76:57:2b:b3:a0:9c:e7:be:05:
         9e:76:1e:e2:57:36:d0:25:4b:ba:a6:c0:34:dc:0f:2a:b8:0a:
         c4:45:e1:eb:e1:e5:f6:d6:f5:fd:20:7b:48:5a:2d:f6:98:9d:
         2e:27:2c:21:9d:87:a5:e4:50:86:dc:ca:2e:03:81:e6:b6:dc:
         8c:8f:46:82:a8:a3:65:f5:cd:45:b3:01:7d:50:ce:8c:f3:a3:
         e6:0e:9c:e6:be:20:80:bd:ba:bd:54:9c:29:45:48:fe:75:5c:
         35:cc:89:3d:ae:7e:00:2d:56:bf:90:31:6a:b0:82:b1:ae:82:
         6b:ac:ce:53:c4:7f:dd:15:1f:01:c0:ea:b5:12:bd:82:3a:eb:
         f5:ce:e3:66:9f:70:b0:b3:fb:42:82:5e:1f:7f:c2:69:e8:94:
         d3:f0:fc:58:5c:4c:e6:91:3d:cd:08:56:9a:70:c7:43:3e:1f:
         88:8b:d3:b0:4c:68:13:e6:09:20:5f:a3:cf:a8:25:89:60:69:
         28:fd:15:57:4f:c0:5c:78:3c:88:4b:8c:a4:78:f8:4c:23:59:
         94:53:bb:58:66:f0:27:52:7d:77:bb:43:7b:61:97:b2:59:04:
         a8:1c:02:a7:83:b4:6e:e8:a5:2c:92:a3:c7:e0:39:16:22:63:
         45:47:e5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:25:44 2025 by rpki-client