Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/69d73c84-d2dc-3e1e-a41c-6a4317fbb008.roa
File:                     69d73c84-d2dc-3e1e-a41c-6a4317fbb008.roa (raw, json)
Hash identifier:          NKmDD1FXqevUSyWNModFI29VgmsbQ7LR4Dxq5WkVeLU=
Subject key identifier:   B6:6E:F2:D3:0E:CE:3A:69:F8:C7:E4:93:E7:EA:B8:B0:AC:D2:A4:5C
Certificate issuer:       /CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
Certificate serial:       010D0C9F4328584B4D11DAD39F327C445E492738
Authority key identifier: 56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/69d73c84-d2dc-3e1e-a41c-6a4317fbb008.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     10497
IP address blocks:        164.114.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:11:da:d3:9f:32:7c:44:5e:49:27:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=a47fb3e2-5514-4eb2-a0e8-d5524cbd6610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3b:eb:9b:e8:a9:1e:f7:66:5c:3a:9b:b0:0e:
                    2b:ca:7e:60:2e:86:26:4f:ac:e4:63:4d:a7:96:1c:
                    a5:ad:77:0b:fd:06:a3:e1:72:5f:f7:79:59:8b:a0:
                    a9:a5:0d:67:9c:10:2d:4e:06:88:d3:3b:96:03:7d:
                    a3:5c:24:41:db:25:3d:c6:e0:a6:2f:03:3c:b8:f8:
                    e2:8b:a5:b8:df:66:2b:97:54:5a:48:2b:64:57:2e:
                    19:c4:d1:84:aa:e1:4c:03:dc:1c:41:de:bc:3b:3f:
                    e2:df:7c:51:78:8a:13:ef:53:42:48:48:2c:86:b1:
                    c2:8b:4f:f9:01:6a:68:6a:3a:ab:63:87:f6:f7:2f:
                    fd:5e:37:39:7c:32:e2:be:c6:cf:62:8d:30:3d:bb:
                    6b:d1:7f:9e:c4:6e:83:55:63:2f:f3:ec:27:60:55:
                    eb:fb:55:83:32:53:85:f5:b5:fc:52:9e:e9:57:b1:
                    48:d1:ca:45:99:4a:11:f1:9f:1b:39:26:cd:6d:5b:
                    77:d4:bf:92:87:63:94:09:dd:31:d6:23:fb:af:15:
                    19:e7:a3:93:6d:58:9f:7d:2b:cd:09:79:d8:b9:a0:
                    5c:8a:0d:70:56:b2:40:f0:d1:77:1c:6b:de:66:59:
                    da:d7:31:35:19:4f:1f:aa:78:ec:10:8c:30:ee:b4:
                    cb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6E:F2:D3:0E:CE:3A:69:F8:C7:E4:93:E7:EA:B8:B0:AC:D2:A4:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/69d73c84-d2dc-3e1e-a41c-6a4317fbb008.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.crl

            X509v3 Authority Key Identifier:
                keyid:56:34:70:D9:2B:60:85:B1:A7:7C:A0:97:7D:A5:7A:1D:B8:27:54:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3b635fdd-81a7-4c5d-8f90-9e7513b3dcdc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.114.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:77:85:91:73:46:b6:b4:f1:62:4a:e3:19:54:d5:bb:5a:57:
         eb:06:17:84:41:42:82:0e:f7:a5:53:8d:c6:84:2d:44:0f:11:
         8e:83:0b:e2:7c:20:f5:6e:bc:e9:78:eb:03:ae:76:a1:8a:05:
         a0:6f:39:ea:85:29:23:72:2c:ea:5a:1b:26:21:b7:1f:0c:a3:
         ea:ca:33:3d:4e:d1:be:cd:fe:25:06:d5:73:7b:ae:1d:e2:0b:
         49:e1:c5:01:94:13:83:e9:fd:f1:43:05:7a:6d:3e:ce:16:3a:
         3e:ac:b3:f5:91:76:c5:a5:df:22:aa:6a:ef:4f:6c:d5:43:a8:
         2c:15:47:45:cc:36:6b:02:34:8b:7f:4c:cd:c0:ce:f4:b9:3a:
         5e:a5:a5:02:15:c5:80:1b:6e:4b:a9:60:30:6a:8e:ba:e4:9d:
         2f:71:33:f8:b9:5a:db:9b:a3:e8:9e:57:39:ad:20:8a:f9:ce:
         93:42:37:cd:a4:1a:51:56:1f:75:45:2e:96:68:f9:33:be:1c:
         a8:cf:e6:96:ef:08:3f:a9:4b:96:4b:10:19:be:96:b9:26:ae:
         2c:08:43:95:5d:cd:ea:ef:61:d9:10:f2:66:7c:ce:4d:9d:38:
         e5:1f:eb:5b:8b:17:b1:b0:bb:4f:76:b1:26:4c:e8:60:bf:69:
         1f:a5:75:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 05:10:09 2025 by rpki-client