Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/23e5cf56-849b-318f-9c25-4b23275c5477.roa
File:                     23e5cf56-849b-318f-9c25-4b23275c5477.roa (raw, json)
Hash identifier:          uYYE53nt2mI4a6dR/tjNBbre78hz8Jbr9Nf4kohHRTY=
Subject key identifier:   AE:EC:C9:94:93:BD:03:50:BE:6B:B7:00:D8:C4:91:81:28:25:CD:C0
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584B7A0C6902A073C5A62AF95A00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/23e5cf56-849b-318f-9c25-4b23275c5477.roa
Signing time:             Fri 10 Oct 2025 15:41:19 +0000
ROA not before:           Fri 10 Oct 2025 15:41:19 +0000
ROA not after:            Thu 08 Jan 2026 16:41:19 +0000
asID:                     13371
IP address blocks:        152.16.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:7a:0c:69:02:a0:73:c5:a6:2a:f9:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Oct 10 15:41:19 2025 GMT
            Not After : Jan  8 16:41:19 2026 GMT
        Subject: CN=16b5e56c-0be5-485d-9a40-cca46535c741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:06:f5:3d:20:de:72:b3:51:7f:93:3f:38:d7:
                    41:dc:03:99:1a:6d:0c:72:96:20:d2:e2:91:90:ac:
                    24:11:c3:1d:96:f5:87:5b:08:b4:7e:94:1c:ad:26:
                    65:47:34:96:85:d7:f8:35:79:df:2f:9b:9c:1d:ca:
                    18:15:35:3e:57:bf:76:cb:b6:41:d0:7e:ce:1f:b6:
                    e8:85:81:2d:66:6e:00:80:cf:16:35:c5:d5:b1:83:
                    0f:db:01:78:64:44:f5:84:a7:66:08:7a:3e:35:ca:
                    89:ab:17:92:af:64:bf:e8:1d:de:c2:92:e9:99:b9:
                    5b:fe:00:06:ad:38:bd:75:3f:82:15:08:85:9e:c4:
                    ac:d3:57:4e:b1:94:c8:de:c4:6b:2a:e4:23:64:ec:
                    cc:e9:2c:58:42:8f:f8:a6:b0:cd:c6:be:c5:2c:28:
                    b1:1c:36:fe:74:c1:59:dd:1b:30:3a:8c:d4:6d:a1:
                    fd:a6:eb:be:d7:ea:fe:d4:8d:44:c5:72:f5:91:c2:
                    08:11:74:60:99:36:f9:3b:8c:05:c9:fb:ad:01:ea:
                    56:50:29:8d:be:f7:89:d5:85:c4:4c:70:39:1c:60:
                    9a:c6:52:48:c4:8d:85:9b:b1:85:78:4d:84:27:d1:
                    25:8d:3d:20:dd:ad:69:5b:41:c4:7c:1c:eb:a3:91:
                    7b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EC:C9:94:93:BD:03:50:BE:6B:B7:00:D8:C4:91:81:28:25:CD:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/23e5cf56-849b-318f-9c25-4b23275c5477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.16.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:1d:8d:c6:91:da:79:11:34:28:9b:71:a3:3f:95:90:56:ba:
         02:2d:bf:2c:c6:66:a5:53:97:e1:98:ad:61:da:b3:8b:7e:f8:
         bb:ad:09:2e:ca:bc:aa:ba:fc:bf:fb:f4:ec:2f:b9:c0:0e:6e:
         56:3a:6c:ac:81:fd:bd:ef:ec:3a:52:a5:85:9e:bd:b0:19:a9:
         52:57:a7:13:2e:4c:01:fb:e6:19:e8:5d:20:e0:7d:f2:5e:e9:
         e1:7a:5d:fd:68:b7:e2:09:12:b0:72:25:57:02:24:05:22:14:
         b6:ad:20:4f:58:f0:3e:1d:78:65:6f:20:d2:74:80:ba:3d:0b:
         4b:15:2f:13:a2:06:76:82:08:7e:ea:d3:73:3b:45:15:53:84:
         8d:eb:cd:95:7e:ac:85:06:52:fd:4a:8b:03:f8:30:67:f1:c3:
         a6:0d:3e:71:7d:ca:62:f6:ca:68:d7:ae:9f:e4:44:d1:d1:30:
         c9:13:25:16:51:cd:bb:53:99:f3:75:21:eb:f3:cc:99:fa:36:
         49:67:fc:b3:9f:72:50:f1:e6:09:43:aa:b2:60:ec:82:77:69:
         1b:e3:31:5e:19:45:6b:88:c1:69:ad:98:d8:b1:a4:3b:6c:eb:
         1e:a9:91:ba:9b:9d:54:5d:95:2e:ed:e7:4a:23:16:c6:80:df:
         35:b3:94:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:26:59 2025 by rpki-client