Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5cc41769-a8f8-3609-a674-3c555a34b77b.roa
File:                     5cc41769-a8f8-3609-a674-3c555a34b77b.roa (raw, json)
Hash identifier:          hmLFHkXMNEptbNuSJOQtxCyb58wnKJXWHKLXTfapeV4=
Subject key identifier:   E1:D4:B7:B8:C1:86:CA:86:8A:2C:6C:18:6E:44:CB:17:E3:5B:BB:17
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B5B0737DCB202999092913280
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5cc41769-a8f8-3609-a674-3c555a34b77b.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     852
IP address blocks:        199.126.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:37:dc:b2:02:99:90:92:91:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=8ed1afd0-7322-4e16-9ccf-4bf874fc2276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:47:b5:18:28:f4:39:3b:c2:e1:33:8d:a8:10:
                    c8:2a:0e:53:ad:7c:c8:f8:11:49:02:1c:1e:9c:d0:
                    c8:98:15:ef:29:2d:2d:d1:78:f5:9e:4c:ce:1c:77:
                    44:1f:1e:a5:61:b2:ea:f9:cf:07:71:9a:7b:27:de:
                    eb:ee:78:be:1f:27:f9:92:37:ee:e8:ba:34:83:ba:
                    5a:95:8a:c7:e3:a5:4d:47:18:bd:27:97:6a:7f:f0:
                    b4:dd:5d:ea:a7:6f:1c:96:e8:43:a4:b2:4d:9c:29:
                    4c:17:77:97:98:9f:a4:b8:4d:9e:76:8c:e9:f5:f7:
                    fd:46:31:ca:4f:eb:7e:f4:a6:9d:67:f1:7e:95:64:
                    c3:c0:c4:c2:ad:71:ff:89:be:f3:c5:97:7c:d8:64:
                    20:f3:3b:23:2d:e1:1a:ac:4d:cf:a7:cf:9f:ee:34:
                    af:54:bf:6e:63:0b:7b:43:3f:ed:ca:b1:b4:29:ea:
                    ce:be:22:d2:08:aa:a8:59:f2:c3:c0:ce:56:b4:6b:
                    cd:9d:9e:d2:b0:ca:dc:30:59:fe:f3:85:de:c9:94:
                    a2:12:f8:86:63:bc:f2:c7:93:33:ff:c0:2c:fe:67:
                    79:ed:41:1d:21:35:0a:b4:99:96:bf:2d:73:ff:77:
                    13:ed:08:12:4c:44:aa:42:4b:ab:e3:ee:2e:29:a5:
                    0c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D4:B7:B8:C1:86:CA:86:8A:2C:6C:18:6E:44:CB:17:E3:5B:BB:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5cc41769-a8f8-3609-a674-3c555a34b77b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.126.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:89:7e:4b:08:8d:d5:e5:49:23:8f:09:22:89:7c:06:25:0e:
         0f:44:04:0f:9e:de:bb:bd:72:96:3d:87:20:4c:1b:20:10:66:
         a1:40:1d:ad:23:e8:da:2f:d3:b2:60:97:f8:0a:cb:fe:2a:df:
         b2:87:42:31:ca:ae:47:e4:5f:a5:7c:8f:a0:f0:33:71:67:ed:
         64:a8:08:b9:b0:8c:a6:84:48:8e:e6:58:40:8e:33:e2:a0:eb:
         97:db:cf:d1:ad:6d:19:2d:18:89:5a:59:6d:5e:33:01:8c:06:
         df:af:e1:44:9e:d8:ac:ed:9e:91:90:66:70:c4:7c:85:91:fe:
         77:fa:26:f4:f4:ac:78:29:a3:af:1a:ca:91:b2:47:28:6c:1e:
         0f:22:89:0a:aa:bf:f7:45:73:b4:c7:ec:ce:19:4b:9c:96:bf:
         50:3e:6a:ee:06:ea:c3:75:3b:ec:00:a5:90:4a:cb:36:6f:ac:
         92:68:22:13:df:5d:9f:39:ca:25:64:a9:80:83:9b:16:68:8d:
         79:85:36:bb:9f:11:26:52:8a:f1:83:77:6f:2b:9b:46:67:00:
         a6:c7:77:73:12:c3:90:a2:97:fc:3d:55:94:11:e2:dd:f4:94:
         e1:c9:1d:bf:40:be:49:cf:94:47:7f:71:1d:a2:bd:3b:f4:32:
         03:da:8c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:00:08 2025 by rpki-client