Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/7c93e3f3-a129-33a8-bb54-4bd2abe6ff39.roa
File:                     7c93e3f3-a129-33a8-bb54-4bd2abe6ff39.roa (raw, json)
Hash identifier:          iJqFpeliNowuJwmzm0/vgLVzjt30aGnt6OMB8eC0ftw=
Subject key identifier:   FA:16:DD:27:F5:8B:72:81:6D:29:E7:B3:35:B8:B6:9E:2A:1A:47:A6
Certificate issuer:       /CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16
Certificate serial:       010D0C9F4328584B1AD191FC9E793B8271503B50
Authority key identifier: 04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/7c93e3f3-a129-33a8-bb54-4bd2abe6ff39.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     33501
IP address blocks:        72.250.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:91:fc:9e:79:3b:82:71:50:3b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=693bf772-b1c2-4f2f-976c-528b6f1d8e16
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=11cf4610-584a-40c8-b76a-517c77816cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:46:be:14:66:8a:ae:4f:c6:81:5b:03:ea:ab:
                    f7:59:50:ad:5a:e2:ac:7d:04:a4:d0:72:60:b5:b4:
                    aa:5f:a8:d3:3b:af:9c:16:c1:cc:9e:96:0f:3f:36:
                    f0:c3:09:40:61:56:a9:19:a7:47:ba:e5:de:d1:2c:
                    c6:56:b9:fb:a8:36:a8:5b:23:8f:9a:d2:e9:35:17:
                    b6:32:a7:9a:1f:48:bb:76:93:2e:30:53:b6:73:90:
                    de:dd:cf:c4:d9:a1:1a:24:b3:de:35:a9:a3:9f:3d:
                    0f:38:7e:74:06:2e:40:89:2d:5f:cd:2b:a2:e5:ac:
                    ef:b4:6c:ff:a9:09:bf:a2:90:f3:94:03:50:d4:c3:
                    c6:5b:ad:e7:1f:08:53:31:5e:c2:73:e9:1e:5f:9c:
                    32:c5:cb:01:21:ae:c6:b8:5e:73:29:e1:75:b7:16:
                    50:a4:d1:8b:7e:8d:fd:c1:fc:51:3b:87:09:e7:bc:
                    80:f8:80:e7:db:14:53:54:e4:13:72:8b:ca:9c:89:
                    0e:6d:c5:cc:27:5a:11:76:3c:1f:e3:85:c0:3c:c0:
                    b2:0b:82:0a:16:43:51:7e:fe:67:d8:8f:ca:49:b7:
                    8e:83:df:22:98:46:5a:84:c5:9b:66:16:0c:d1:3d:
                    97:2c:6b:01:85:98:fc:f3:17:c8:6e:c7:a9:e8:56:
                    ef:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:16:DD:27:F5:8B:72:81:6D:29:E7:B3:35:B8:B6:9E:2A:1A:47:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/7c93e3f3-a129-33a8-bb54-4bd2abe6ff39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16/693bf772-b1c2-4f2f-976c-528b6f1d8e16.crl

            X509v3 Authority Key Identifier:
                keyid:04:3B:91:26:43:5A:E5:3D:B9:21:35:BF:18:C6:36:D0:DA:9D:41:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/693bf772-b1c2-4f2f-976c-528b6f1d8e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.250.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:50:0e:13:d9:73:fd:e6:b9:d5:89:76:b8:90:57:f7:2a:7c:
         b4:ab:1e:5d:55:f6:bc:58:d5:aa:b3:24:ae:87:5a:95:fe:20:
         9e:39:72:4b:d5:3a:08:5f:d6:43:4d:c0:7b:96:36:ef:b0:87:
         ad:a3:be:5d:ba:d9:cf:d4:4f:9d:ad:f7:83:e4:42:f3:62:4b:
         91:e5:32:57:12:a2:f9:ba:51:9f:b7:35:78:88:79:01:7d:61:
         52:89:aa:36:dc:fb:81:63:13:bf:bb:1d:32:f8:05:4b:a9:ff:
         ae:b2:36:bf:49:73:69:26:2b:a1:50:c2:5a:5d:65:58:27:58:
         32:c4:dd:71:62:d9:7f:5a:71:62:8b:1b:71:83:27:b1:41:2f:
         7d:03:93:3b:03:42:45:e5:62:90:e4:42:a0:55:2b:01:a7:93:
         0b:9e:63:9e:16:12:f6:b0:f0:e1:47:14:ce:ff:cd:9a:ec:16:
         f3:30:8d:0d:85:c4:4c:9e:fc:55:97:36:b2:44:d2:1b:7e:2d:
         1f:86:e9:51:41:e2:3a:59:de:fb:36:b4:3a:a5:06:ec:9b:2a:
         27:db:9e:ad:d7:25:56:9c:91:7b:af:50:2c:f3:09:f9:c8:96:
         20:08:29:9b:55:3c:45:f6:8e:9e:6c:94:5e:0e:d4:bc:27:69:
         fe:42:47:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 00:11:09 2025 by rpki-client