Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/116379f2-90de-3113-bcd7-0acdd6895596.roa
File:                     116379f2-90de-3113-bcd7-0acdd6895596.roa (raw, json)
Hash identifier:          Af36RPHgK0Isbpzd6AI8xLCj5qjwsFmheB2ItnOmfns=
Subject key identifier:   B1:C2:FE:A7:E1:77:F7:E3:5D:0C:D8:3F:CA:98:53:3A:23:08:2E:FE
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F4328584AF0F14A42EADE54638BD307D0
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/116379f2-90de-3113-bcd7-0acdd6895596.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     13213
IP address blocks:        69.4.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:4a:42:ea:de:54:63:8b:d3:07:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=8336803c-3cb2-4aa1-b0c0-dbef161481f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2a:99:ab:1e:d2:ef:16:53:65:c2:9f:11:84:
                    61:28:9f:f5:27:6e:a5:33:8a:23:66:c4:e9:e7:69:
                    1f:96:c6:ed:66:2c:19:0a:9f:60:d3:83:ae:7f:3e:
                    2c:70:07:47:bf:b0:9e:ab:e3:e9:9b:80:4f:0c:fb:
                    05:29:c0:3d:81:5a:dd:a0:e1:88:86:9e:fa:90:9a:
                    b2:ee:e2:fc:18:bc:23:02:b6:fa:b2:3b:9f:bb:f6:
                    86:d9:83:38:cc:64:56:ad:61:46:1d:f4:50:7c:67:
                    36:b7:2c:99:d2:fa:36:0d:b3:e4:d3:bf:96:50:b4:
                    31:d9:57:43:7f:07:b4:a3:fe:29:60:6c:7a:07:f0:
                    e5:d2:0d:4e:a8:87:ca:25:d2:b0:46:87:74:9d:25:
                    00:e2:e8:e4:18:6b:ce:8e:03:86:c5:9d:3d:43:72:
                    ca:d1:61:36:96:e3:c8:82:6e:9e:43:39:d7:87:96:
                    9a:3e:90:25:db:5c:fb:ae:4f:84:03:8d:45:90:72:
                    91:4b:d7:74:ce:ab:52:37:0c:ce:57:18:49:76:d3:
                    29:bc:19:50:cd:80:18:08:cb:9a:56:ce:ad:a9:8e:
                    81:54:35:dd:a6:4a:aa:38:bb:fa:4f:1f:70:71:de:
                    81:f2:26:08:dd:3c:21:b2:87:4f:01:b3:f1:85:be:
                    b6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C2:FE:A7:E1:77:F7:E3:5D:0C:D8:3F:CA:98:53:3A:23:08:2E:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/116379f2-90de-3113-bcd7-0acdd6895596.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.4.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:8c:21:b9:48:87:27:16:22:f9:30:a8:45:9f:06:84:50:1c:
         20:6a:0d:3f:b1:7c:24:f3:a0:df:63:d3:bb:ff:03:5c:6a:37:
         cd:f6:1f:83:03:a6:19:49:c5:6a:77:e6:46:d7:df:41:58:0b:
         d7:f9:97:46:f3:f0:2b:f4:6f:96:b2:1d:af:0f:67:63:ac:21:
         e0:03:b2:80:60:75:3d:de:6b:6d:4b:db:3f:d9:58:e8:b4:c5:
         2f:06:2c:11:6c:c5:b6:70:1a:51:61:c3:a6:bd:b6:7f:47:f1:
         c1:1e:55:44:bd:2d:61:d5:e6:37:63:5a:42:5b:39:23:ec:75:
         ab:58:a0:cd:70:dd:01:8b:b4:25:59:0a:03:94:d3:90:94:2d:
         91:54:3a:82:9a:7a:be:19:ac:27:88:64:d8:a3:3d:36:61:56:
         81:5f:50:c8:b2:ea:89:37:e5:8e:ea:2e:d2:46:5b:17:1c:0d:
         ce:a7:e6:03:18:45:ea:77:64:e7:c2:40:f9:33:a0:63:7e:95:
         aa:21:1f:f8:e2:b1:91:0d:b8:32:8b:bd:6c:a5:90:54:9e:d2:
         83:1e:a9:a0:bd:37:f8:45:59:c1:8e:9f:a3:d1:cd:79:45:7b:
         42:7e:7b:bb:eb:54:c0:79:a8:f0:70:24:60:3d:7e:de:be:10:
         b6:70:5b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:32:24 2025 by rpki-client