Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/c217b43a-96c4-3cd4-a384-3d4effff1bd9.roa
File:                     c217b43a-96c4-3cd4-a384-3d4effff1bd9.roa (raw, json)
Hash identifier:          vTPJc6v6S2In81kd6ufFBJQ3jlg2xLCFoHCHhCCebAU=
Subject key identifier:   98:31:CF:0C:1C:60:A6:9E:C8:6C:B6:0A:A3:75:1C:CE:14:9B:7B:C5
Certificate issuer:       /CN=69df89b1-6446-4f76-b802-330eeb5819c6
Certificate serial:       010D0C9F4328584AF5215774537D36D422C8E100
Authority key identifier: 3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/c217b43a-96c4-3cd4-a384-3d4effff1bd9.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     1706
IP address blocks:        128.196.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:57:74:53:7d:36:d4:22:c8:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69df89b1-6446-4f76-b802-330eeb5819c6
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=14212a9d-bac6-4a8c-ad45-f1f886a13a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ca:db:8c:6d:6f:3b:9e:7f:f0:cd:c4:4c:71:
                    1f:c4:67:d6:f8:81:ea:8f:44:57:61:64:57:f8:a1:
                    ab:e5:ba:36:d7:74:21:6e:88:4d:d8:77:d2:22:b4:
                    76:cb:39:9f:52:fd:9c:a2:f4:8b:c0:91:a0:28:5a:
                    28:36:07:a1:7d:2b:3e:23:25:d8:34:91:1d:ff:f5:
                    c7:36:1b:a5:84:75:c1:88:c8:44:04:40:6b:be:5a:
                    59:49:1e:c7:b2:5d:d4:ff:f5:0d:6b:a1:0e:6e:fd:
                    71:91:b6:ec:a3:2e:10:20:54:33:de:0c:36:30:16:
                    99:0d:0e:f4:d9:4a:2f:d4:af:b9:c3:f5:1d:8b:c2:
                    1b:a3:bb:44:87:18:43:af:34:60:3e:3a:18:1b:87:
                    16:1c:69:dd:bd:81:8b:47:85:c4:5b:bc:9e:76:c8:
                    ee:2f:62:e9:63:c1:91:65:cb:93:2e:fa:06:5e:17:
                    37:3c:86:2a:dc:67:26:3e:5b:81:c1:c5:6d:07:4e:
                    be:40:dd:bd:21:b9:bf:54:38:0b:86:e3:7c:17:28:
                    a6:ea:9a:5a:60:47:99:2b:71:31:ac:93:0a:84:b5:
                    d5:de:f0:96:79:53:12:76:ce:1d:ea:aa:d9:e0:e3:
                    a5:2e:7b:da:c8:cd:28:9f:43:a5:fe:f0:3c:ee:f5:
                    ea:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:31:CF:0C:1C:60:A6:9E:C8:6C:B6:0A:A3:75:1C:CE:14:9B:7B:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/c217b43a-96c4-3cd4-a384-3d4effff1bd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.crl

            X509v3 Authority Key Identifier:
                keyid:3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.196.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:6e:1c:af:bf:3c:dc:d1:f4:4d:b7:bc:c3:8c:a8:e4:96:d0:
         b3:17:62:de:f2:1a:7c:e1:24:57:13:7c:43:73:05:d1:20:c0:
         76:21:57:e9:55:a2:99:10:31:d9:1e:42:84:07:a7:a9:ec:f9:
         21:51:39:b8:cd:5c:5a:62:f3:a2:3e:17:4b:6f:55:57:d9:a5:
         68:cc:9b:e8:48:65:aa:46:7c:41:aa:2c:12:ec:53:1e:13:d0:
         1c:12:4a:06:72:62:20:b7:e5:2b:9c:95:7a:a1:8a:a1:0e:14:
         c3:a0:fd:98:60:31:57:d9:bb:30:28:8b:81:59:f7:77:27:98:
         84:18:d7:35:bc:6c:ce:e7:06:0f:d4:c9:f9:99:42:14:36:ec:
         c4:e1:18:10:9e:fd:7d:0a:f5:b6:c4:ff:f8:66:fd:99:b7:e4:
         23:91:e0:d9:5f:19:85:22:97:02:7a:07:37:2d:42:43:8b:5b:
         af:c3:a2:e2:44:85:44:aa:bb:fa:95:d1:f6:f5:e0:43:c4:49:
         a0:4e:52:d3:a3:70:ae:c5:fa:15:51:87:54:f1:7e:60:02:89:
         23:98:8b:58:be:65:6d:9d:4c:55:c9:b1:69:d4:4f:c8:32:e3:
         79:70:15:4b:9b:16:29:a1:dd:21:50:eb:37:8d:97:8b:e8:16:
         8f:d6:c7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:41:43 2025 by rpki-client