Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756/f013c061-c284-3462-80b8-386f10ec2f9e.roa
File:                     f013c061-c284-3462-80b8-386f10ec2f9e.roa (raw, json)
Hash identifier:          6X2hoBbGWAv5LYI9sqTK57XmvfKJT2ewCubj2RNEzYg=
Subject key identifier:   24:E3:4B:E7:F2:1D:1F:66:92:16:AB:0D:DB:59:4F:CB:92:97:2C:DA
Certificate issuer:       /CN=dc22c315-14c5-4de2-83f3-01be353fd756
Certificate serial:       010D0C9F4328584A9FFB94AE5FD897F52C703580
Authority key identifier: D8:A0:C9:C8:C3:15:9B:A2:31:C8:75:EE:6B:7E:3F:3E:B5:88:3C:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756/f013c061-c284-3462-80b8-386f10ec2f9e.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     2568
IP address blocks:        104.192.16.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756/dc22c315-14c5-4de2-83f3-01be353fd756.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756/dc22c315-14c5-4de2-83f3-01be353fd756.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:94:ae:5f:d8:97:f5:2c:70:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc22c315-14c5-4de2-83f3-01be353fd756
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=85b781ac-152b-4815-b067-6c5c5f0d53aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:86:c7:8f:0f:f0:cd:cc:d7:42:d6:5b:d9:38:
                    10:4d:2c:b5:fd:e9:a5:7c:82:65:a1:37:e6:5a:85:
                    f7:01:83:40:a0:f7:a7:4e:e0:17:fd:ad:f5:48:b8:
                    0d:2b:97:e8:8f:2e:1c:5b:0f:01:99:3c:be:cc:0b:
                    2b:72:56:dd:a3:ef:f2:7b:df:95:da:34:b9:ce:20:
                    38:39:9c:c2:a5:22:8e:8c:20:ad:54:34:75:6a:bb:
                    f4:01:31:6c:7a:be:5f:0b:e1:18:8f:30:04:92:ab:
                    7f:ac:49:b9:fa:c7:28:30:fb:f9:3a:1b:34:df:47:
                    cb:95:0d:a5:a1:78:3c:ac:0d:bc:6a:5f:58:da:db:
                    0d:d6:89:ad:6b:4b:49:b2:ba:fd:ad:5b:bb:09:ca:
                    e3:c4:9e:ea:bd:29:96:1b:4f:59:07:a9:4d:95:59:
                    11:63:4f:9e:2b:7b:df:88:57:37:56:25:86:f1:67:
                    7b:c2:fb:a6:9d:90:0c:b5:7b:46:f0:65:3a:03:4e:
                    7d:35:d9:34:20:10:e2:6a:ee:b0:38:fe:c7:83:c6:
                    eb:75:2a:2e:33:6c:53:df:9e:bf:e9:9e:bd:94:c4:
                    74:cf:1f:95:eb:03:19:9f:da:0b:14:0d:aa:38:fd:
                    39:b3:0c:3a:a4:db:c0:71:3b:7a:0b:d9:a8:c0:d6:
                    de:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:E3:4B:E7:F2:1D:1F:66:92:16:AB:0D:DB:59:4F:CB:92:97:2C:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756/f013c061-c284-3462-80b8-386f10ec2f9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756/dc22c315-14c5-4de2-83f3-01be353fd756.crl

            X509v3 Authority Key Identifier:
                keyid:D8:A0:C9:C8:C3:15:9B:A2:31:C8:75:EE:6B:7E:3F:3E:B5:88:3C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dc22c315-14c5-4de2-83f3-01be353fd756.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.192.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:a4:e5:92:da:87:4b:d6:8c:ec:d0:76:e4:c8:91:03:dc:81:
         2f:ad:bc:03:94:29:8a:2a:53:a1:d1:67:c2:87:1e:60:70:cf:
         a1:69:80:c3:1d:fb:ec:23:75:ec:52:0c:dd:3b:14:c8:0f:31:
         7c:1a:f7:d1:13:8f:76:91:19:1f:f7:43:dd:4d:2d:35:59:25:
         4e:ca:96:f8:76:38:05:e3:11:9b:88:18:42:73:66:86:e9:cf:
         7e:da:fb:b4:aa:c7:f4:f5:99:47:8e:13:7e:6b:5f:98:79:0d:
         fc:ab:55:97:07:03:56:04:49:2f:5c:cf:40:be:78:81:9a:02:
         0f:0b:7e:3e:22:f3:07:83:00:1d:20:2e:65:cb:60:65:c0:54:
         1b:36:96:b4:ec:d4:c9:d5:b4:5a:73:61:8b:91:59:05:be:d9:
         af:47:e6:5d:4d:17:fb:c7:db:7a:10:f3:68:6f:7c:72:b5:b0:
         f2:76:af:13:c5:c3:25:c3:8d:68:d7:1f:62:1b:e1:e7:d2:b8:
         59:a6:3a:52:88:11:df:61:f6:b3:d7:42:3e:f4:8d:3f:ae:bb:
         12:22:8b:cc:ca:de:73:76:eb:76:3d:3e:9d:6f:a3:d3:db:14:
         a8:29:1a:e5:73:a7:cd:b1:db:d6:55:70:db:f5:aa:90:78:c4:
         47:16:45:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:39:16 2025 by rpki-client