Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/0be8b0af-8061-36c3-8885-a1d714a9af7a.roa
File:                     0be8b0af-8061-36c3-8885-a1d714a9af7a.roa (raw, json)
Hash identifier:          IKNW/WCQ68/lyoG7f1eN1O6xeqnXrPrTK7UJuvmSDt8=
Subject key identifier:   6D:BC:6B:71:B1:37:99:E5:B8:56:7D:30:E5:36:FB:43:86:88:A8:D6
Certificate issuer:       /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial:       010D0C9F4328584A3B7AFA6549AE9C1AB92EF940
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/0be8b0af-8061-36c3-8885-a1d714a9af7a.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     10430
IP address blocks:        164.116.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:fa:65:49:ae:9c:1a:b9:2e:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=7ff8c82c-28a3-4584-aa67-e42c7e5dc75c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9f:09:d5:ab:6a:57:06:eb:de:21:cf:22:07:
                    97:04:71:4a:fe:54:af:6e:44:d2:39:c6:f0:da:fc:
                    48:20:69:01:c0:5e:69:26:9a:b3:b4:85:6b:6e:2b:
                    e3:5c:b5:c6:94:cf:83:19:45:f4:70:8f:76:e0:1f:
                    48:cc:78:20:62:f4:ce:51:1f:6b:1e:3a:57:b2:49:
                    98:aa:cd:95:2e:35:77:ca:eb:8a:9f:8d:a4:81:3e:
                    3e:a4:82:b3:6f:11:47:85:76:87:66:50:94:69:54:
                    0e:80:cd:f9:ea:50:2b:2f:90:c5:cd:25:89:84:ee:
                    a4:81:b7:b8:8a:8f:96:8f:1a:9a:86:6e:79:f3:9e:
                    4d:d8:76:7f:32:d5:fe:dc:0c:c9:80:0e:07:58:b3:
                    04:a9:c8:d3:ac:25:80:bd:ad:3e:74:b5:df:10:82:
                    9e:d3:b1:5a:fd:f2:56:51:c1:9e:92:e9:95:65:33:
                    63:c5:de:95:12:03:db:c2:c0:0e:10:2e:a7:3e:22:
                    56:7d:1f:79:b5:cf:f0:78:aa:41:40:04:6f:b2:11:
                    0c:89:18:77:d2:56:91:ac:15:0c:81:b3:dc:23:b4:
                    ff:33:6e:ee:6d:b8:cb:50:5a:b5:57:44:d8:08:f2:
                    c5:b9:07:81:04:88:f0:94:7a:12:77:b3:62:35:4f:
                    8f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BC:6B:71:B1:37:99:E5:B8:56:7D:30:E5:36:FB:43:86:88:A8:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/0be8b0af-8061-36c3-8885-a1d714a9af7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.116.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:19:7b:7b:d0:55:b3:8a:45:15:4a:7d:cc:68:f6:67:75:db:
         da:2e:dc:ba:97:63:30:33:61:1f:e5:4c:02:9b:c2:2b:60:e0:
         24:bc:12:88:9f:40:e1:d4:04:4d:26:7a:d6:0e:fb:8a:77:14:
         84:6f:0c:0a:2f:4b:51:52:7b:dd:70:e5:3c:61:7d:2e:44:bc:
         dd:ea:ff:60:ca:d8:31:5b:c0:bf:5a:f7:1c:9c:67:dc:88:9a:
         71:99:71:46:ae:d3:90:93:7d:fa:d5:3d:2a:cf:f2:99:fa:c4:
         8b:0e:48:f2:6c:a9:21:8a:b2:3a:bb:a7:dc:a5:de:d2:51:9d:
         69:81:04:ac:2d:4a:86:31:ca:c4:a6:ba:12:ef:69:5d:ea:a9:
         3e:71:f8:56:50:22:a3:45:72:20:c3:c9:26:7b:e4:96:34:57:
         ec:93:0f:84:8c:45:5c:70:ca:b5:45:9b:97:b4:0e:01:b6:7f:
         c5:09:23:22:90:44:e5:a1:1b:15:4a:17:f1:7c:12:d8:db:bb:
         c2:7e:45:ef:86:2d:44:e6:9d:48:48:a5:2e:10:dd:c6:0e:1c:
         0d:03:b6:5e:2e:1b:b5:89:46:bf:28:cf:ba:1f:41:0d:b9:cc:
         d0:bd:03:07:9b:4f:d4:30:c9:62:d3:68:76:8b:a1:ad:68:64:
         ac:fd:98:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:25:18 2025 by rpki-client