Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/eae8b5f3-7bb8-3e84-8723-a0bfd933cc3b.roa
File:                     eae8b5f3-7bb8-3e84-8723-a0bfd933cc3b.roa (raw, json)
Hash identifier:          vNRnHcPPERZFmPUi0RcQqnnHrMmX3q86PmbByd+I8ZA=
Subject key identifier:   B2:E0:90:51:B3:93:DF:BE:75:1F:82:1E:2A:1A:E9:F2:06:67:05:76
Certificate issuer:       /CN=29c6a19e-a83c-43ad-8d10-68daeb160033
Certificate serial:       010D0C9F4328584AD3A0F1EE4C24E8EE6E8A9DC0
Authority key identifier: 45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/eae8b5f3-7bb8-3e84-8723-a0bfd933cc3b.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     3257
IP address blocks:        216.73.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a0:f1:ee:4c:24:e8:ee:6e:8a:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29c6a19e-a83c-43ad-8d10-68daeb160033
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=e1da1ca8-12a8-4146-aaa3-0d5271bf546b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9c:95:f5:30:34:eb:19:75:1d:60:7d:0b:40:
                    d2:77:48:0c:01:40:1f:e6:14:e8:5c:78:30:2d:e7:
                    73:10:b7:6f:64:93:cc:6e:79:ad:81:3a:43:4b:90:
                    d3:57:e0:66:cb:f6:6e:d9:fc:62:e9:70:e7:1d:ac:
                    95:a6:ff:7c:bf:a0:60:24:29:99:0b:32:0f:c2:e0:
                    3c:3c:cf:33:c7:47:c0:d6:c2:f3:ef:0a:04:76:11:
                    1c:78:62:41:d1:ba:e1:a9:28:d5:b1:c6:fa:89:ed:
                    b9:23:9a:46:39:50:9a:74:08:3f:08:88:51:61:5e:
                    a0:99:8e:55:28:a6:40:63:9a:9a:d1:57:a4:99:1a:
                    1d:a5:b7:04:06:53:c6:f3:bd:d7:fb:18:da:98:3b:
                    1a:c5:a3:38:0b:0f:aa:55:b7:d3:7e:36:2b:c7:5a:
                    f0:95:da:22:6c:e3:9c:16:d4:27:f4:03:56:1a:19:
                    99:13:dc:66:00:0c:f7:8a:c3:e5:cb:dd:73:48:e3:
                    77:b9:ff:a2:15:f6:86:9f:09:34:3b:ba:d8:94:11:
                    c8:00:06:da:fd:2f:c1:5c:b9:e8:80:79:40:57:b0:
                    74:d0:e5:15:cb:23:1c:d9:8e:5c:f9:61:5a:64:b2:
                    a5:f7:b6:32:dd:88:09:e3:c0:62:b2:08:1e:3a:05:
                    cc:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E0:90:51:B3:93:DF:BE:75:1F:82:1E:2A:1A:E9:F2:06:67:05:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/eae8b5f3-7bb8-3e84-8723-a0bfd933cc3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033/29c6a19e-a83c-43ad-8d10-68daeb160033.crl

            X509v3 Authority Key Identifier:
                keyid:45:8B:83:8A:98:13:A0:1F:97:D7:3D:75:9F:15:74:D6:DD:BD:6A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/29c6a19e-a83c-43ad-8d10-68daeb160033.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:4b:a8:91:90:10:e3:d4:61:03:31:be:b2:25:3f:28:40:67:
         01:9d:e0:fa:69:bb:6f:5f:15:62:61:89:34:51:bc:d1:47:3d:
         0a:17:4f:fe:84:62:97:de:73:37:40:1c:1c:70:6d:84:16:53:
         8d:95:17:2e:fe:4f:62:65:db:54:03:a0:33:29:1e:11:6b:90:
         eb:a9:2e:ad:20:ba:a0:fb:35:38:bf:97:22:12:dd:0c:d8:8e:
         cf:94:3e:cf:63:32:45:79:cf:c2:5c:8a:91:be:8c:35:aa:41:
         42:cc:e4:3a:9c:ef:0f:c0:9d:89:a5:43:28:37:e4:70:50:d6:
         1a:8d:4c:b4:a4:4b:4c:38:0e:1a:93:d7:e5:34:6a:42:72:b9:
         ad:0a:d0:66:32:7c:c1:03:8e:8f:ff:bc:02:57:b1:fe:17:fe:
         94:82:06:6b:96:a5:61:0a:aa:ab:d1:8f:3d:e1:ca:0e:62:09:
         fd:f0:a4:91:d5:21:a7:9c:45:ed:02:87:39:cc:27:b5:1e:91:
         7c:6b:4b:6c:4f:c0:67:80:a4:93:f7:4b:ed:f3:1d:21:9b:68:
         3a:05:70:7f:8c:9d:9b:0d:14:d5:b7:61:d7:63:2b:fb:bf:71:
         ce:2f:e0:2d:68:b2:e1:d4:27:e5:8e:f4:e5:95:84:c4:60:d4:
         ce:5a:76:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:27:37 2025 by rpki-client