Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/4a03bb71-d8cc-38ec-8234-2d7210c7144c.roa
File:                     4a03bb71-d8cc-38ec-8234-2d7210c7144c.roa (raw, json)
Hash identifier:          WQQN4HbEkquaGBbGKL/XMVJOGfvLFW9wcbvp8QbBOGY=
Subject key identifier:   29:8E:94:6D:C3:A6:0D:5A:97:D0:A3:D0:4B:DB:C7:69:19:F6:54:E2
Certificate issuer:       /CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
Certificate serial:       010D0C9F4328584A3A1587AA25F8A22FFF164300
Authority key identifier: E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/4a03bb71-d8cc-38ec-8234-2d7210c7144c.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     7992
IP address blocks:        80.86.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:87:aa:25:f8:a2:2f:ff:16:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f2847d-53ab-4abb-a5e5-26b998c7ff98
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=9b01203f-3409-434e-8876-65829a6ede6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a5:65:e6:66:29:35:dd:50:41:41:f0:5b:99:
                    89:62:8f:3f:9d:34:f4:b4:ff:cf:b9:df:c9:c1:05:
                    62:04:f4:d4:6d:e8:72:23:e0:15:ea:e4:c7:0d:1e:
                    cf:25:9c:34:82:1f:33:e1:09:f4:8e:96:95:47:6c:
                    02:a6:ff:f7:00:62:f5:e3:74:76:ee:8d:3c:c1:f3:
                    5a:1a:7c:d7:c0:51:33:c1:db:e6:ff:c2:e4:c2:c4:
                    ed:6a:2e:80:75:60:2c:e2:2a:d1:6f:68:f2:db:d5:
                    04:88:cc:fb:4f:24:1a:75:60:35:c3:d9:f1:48:a0:
                    8a:ca:ed:df:8b:18:83:ab:7b:a2:12:20:89:2c:0c:
                    27:b1:be:9c:ba:bc:08:9e:12:ac:97:dc:fe:cb:67:
                    6c:e9:49:70:f9:6d:e8:74:89:0b:89:3b:bf:ff:67:
                    b8:75:4b:5b:5e:6b:a5:8c:ca:a8:5b:ef:6b:ec:86:
                    32:b7:7a:4e:15:41:97:39:10:eb:2f:f4:6b:e1:55:
                    97:16:22:3b:07:d3:c2:8c:e4:64:31:14:c1:a0:86:
                    46:15:c0:13:3c:15:61:b9:1b:58:6e:51:2f:63:40:
                    5b:77:71:d7:60:dd:93:bd:83:9e:7f:15:09:47:d8:
                    e0:9f:b4:5f:5b:02:c4:90:04:fd:3c:80:c1:73:d3:
                    74:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8E:94:6D:C3:A6:0D:5A:97:D0:A3:D0:4B:DB:C7:69:19:F6:54:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/4a03bb71-d8cc-38ec-8234-2d7210c7144c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98/73f2847d-53ab-4abb-a5e5-26b998c7ff98.crl

            X509v3 Authority Key Identifier:
                keyid:E3:3F:43:4B:85:C3:26:0D:9C:56:B0:BB:C8:3F:B6:4D:E8:3B:7D:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/73f2847d-53ab-4abb-a5e5-26b998c7ff98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.86.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:8b:97:c2:79:01:38:41:a2:aa:f4:e7:df:e0:4d:ff:8b:29:
         43:39:2f:d3:e8:c7:a7:3c:25:c4:5c:78:01:e2:c6:16:42:13:
         9b:54:8b:a9:82:df:f3:ea:79:5d:07:bd:c4:59:6f:55:2c:61:
         ee:d4:25:8c:85:f2:29:e1:7c:a6:af:7c:f9:9a:9f:39:66:f0:
         a9:47:99:df:f7:dc:d6:11:32:62:cc:91:14:76:a9:5d:db:8a:
         1b:04:5a:9d:24:44:56:f6:2b:c4:9e:ff:f4:dc:22:f8:d8:93:
         25:d6:d5:9d:e5:19:e4:8a:67:8d:0a:b1:1d:15:06:ba:c8:8a:
         c6:71:f7:0b:61:6d:e7:01:d7:bb:98:df:be:08:3e:3c:d1:81:
         3f:ad:ea:71:f8:96:6f:77:2d:39:cf:4b:63:44:85:b8:67:a8:
         72:9a:18:e9:86:e8:b5:ed:03:2e:49:77:5c:90:f1:c5:c8:e6:
         3d:fe:ec:5b:87:2f:20:9b:6d:6c:65:02:54:68:ca:1f:24:5d:
         2a:3c:7f:f5:01:d4:5d:01:e8:50:a0:88:63:f5:06:7e:83:2f:
         ee:5f:fe:b5:50:77:f0:3b:c8:3f:45:d8:32:18:ef:72:f2:e8:
         38:99:33:c7:e4:46:ca:47:d8:c1:fd:6a:d2:a7:15:10:f1:f1:
         2b:6a:9f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:13:09 2025 by rpki-client