Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256/ca49f9ac-fcd1-34a2-8bcc-f62abfc2a15d.roa
File:                     ca49f9ac-fcd1-34a2-8bcc-f62abfc2a15d.roa (raw, json)
Hash identifier:          pFxx8IcgeKVnrbU4bCsz8xweiR0fQLlF0VopxUheqYY=
Subject key identifier:   8B:C2:1B:40:96:50:37:78:52:9D:63:CE:E7:75:A3:A1:73:A2:29:3B
Certificate issuer:       /CN=6149478e-f569-499b-aa7f-d4e43260a256
Certificate serial:       010D0C9F4328584AC2E1082A10791F3C647B9900
Authority key identifier: 82:F9:F1:33:85:CE:98:E0:1B:58:D2:92:24:31:78:1B:F7:89:CF:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256/ca49f9ac-fcd1-34a2-8bcc-f62abfc2a15d.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     398826
IP address blocks:        172.82.16.0/24 maxlen: 24
                          172.82.17.0/24 maxlen: 24
                          172.82.18.0/24 maxlen: 24
                          172.82.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256/6149478e-f569-499b-aa7f-d4e43260a256.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256/6149478e-f569-499b-aa7f-d4e43260a256.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e1:08:2a:10:79:1f:3c:64:7b:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6149478e-f569-499b-aa7f-d4e43260a256
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=8c327413-dd28-4c4c-a430-a2d461dc402c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:7d:a4:11:c2:fc:b0:ef:bf:39:3e:05:ea:b2:
                    44:5b:91:89:98:1b:56:84:38:1b:ea:29:39:a8:0b:
                    d9:41:64:1c:ed:8e:49:9a:14:af:48:3b:f6:11:0c:
                    10:3f:27:7b:7b:dc:d7:88:c6:0d:2e:5e:70:4a:ae:
                    84:e0:3d:ea:fb:5c:9e:7d:04:d4:83:ca:e5:4e:d3:
                    9f:8a:91:cc:c3:c8:be:78:40:3f:8f:16:92:e7:ce:
                    0c:f5:be:f4:96:a2:e1:a1:69:c4:8a:9c:ad:93:b9:
                    db:02:4f:bd:da:d0:09:17:44:30:54:6f:83:b1:9c:
                    e0:07:9a:59:58:cc:69:be:b5:a9:7b:08:3c:79:3a:
                    22:5c:ca:58:36:e6:80:e1:4c:de:71:66:d8:7b:fc:
                    04:db:2d:ee:37:f4:c1:0b:fd:96:6a:5a:5c:95:93:
                    76:5d:3e:4d:f3:d4:ff:74:34:64:28:fd:de:2d:f7:
                    72:cc:fc:87:6e:a8:ee:73:da:1b:5b:96:da:88:10:
                    52:b8:71:e2:80:6a:14:fe:62:90:59:d2:5e:c9:e7:
                    4d:63:6f:c5:92:66:f5:61:ba:46:ea:e0:b3:95:89:
                    7a:26:ed:78:d2:0b:b6:bf:ec:bf:76:c9:18:89:78:
                    82:30:42:30:73:5e:90:6b:c6:1b:19:cc:49:bf:e4:
                    e9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C2:1B:40:96:50:37:78:52:9D:63:CE:E7:75:A3:A1:73:A2:29:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256/ca49f9ac-fcd1-34a2-8bcc-f62abfc2a15d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256/6149478e-f569-499b-aa7f-d4e43260a256.crl

            X509v3 Authority Key Identifier:
                keyid:82:F9:F1:33:85:CE:98:E0:1B:58:D2:92:24:31:78:1B:F7:89:CF:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6149478e-f569-499b-aa7f-d4e43260a256.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:13:ca:45:79:cf:1f:7c:d9:42:08:8d:e1:19:10:a5:56:f3:
         d9:97:af:81:9a:c0:7d:3d:40:c5:91:4f:d1:86:64:ad:da:cd:
         9f:60:b5:38:a2:88:82:58:b1:25:90:ba:1b:d9:45:70:c2:06:
         86:43:27:b1:b7:bb:63:b6:fb:52:45:64:ad:50:ed:66:91:ce:
         48:8a:12:4a:16:16:5a:6d:8f:18:d7:82:42:54:00:55:2e:8b:
         bd:3d:eb:91:f3:4e:f9:3e:f9:6b:c9:9e:37:8b:57:c6:2d:8f:
         7e:78:a2:80:3b:64:1a:0f:5a:c0:2d:d5:4b:d7:c8:a7:cb:27:
         51:7f:ec:a4:5d:c4:13:b3:70:4a:02:79:72:70:2b:83:e4:fd:
         6b:33:55:36:51:ef:71:e2:3a:60:6e:81:23:da:22:f4:df:ae:
         61:34:c5:1b:14:a6:3d:4a:95:7e:a0:32:23:14:82:94:c6:66:
         0a:d6:f8:a0:22:cf:5d:e6:50:b9:83:58:40:67:cb:be:5e:09:
         40:a4:bf:b8:c8:2a:20:a1:e0:60:7c:26:6c:5a:4a:12:ed:4a:
         81:e3:0b:79:cc:9f:7a:0b:cc:b4:2d:91:dd:de:53:fe:f7:ab:
         52:0a:78:a4:95:3a:90:0c:d3:90:31:06:65:39:d1:38:62:a8:
         08:b2:e7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:44:29 2025 by rpki-client