Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/31dd128e-6217-30ff-8b1a-469e384a6d67.roa
File:                     31dd128e-6217-30ff-8b1a-469e384a6d67.roa (raw, json)
Hash identifier:          Nl5lPCkSjLeFVH2kYr3gakiflPRNT5JBGwyllB8xZNw=
Subject key identifier:   31:F2:88:78:56:85:09:E7:22:4C:4A:D8:31:14:6E:23:ED:EC:E0:FE
Certificate issuer:       /CN=8a8443d1-5c7c-44eb-822c-62a1a1423a2b
Certificate serial:       010D0C9F4328584A506AECAC4EDB6F51E83082C0
Authority key identifier: 32:CB:80:43:03:D9:69:B6:1D:11:4D:8B:CD:61:3D:96:35:20:0B:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/31dd128e-6217-30ff-8b1a-469e384a6d67.roa
Signing time:             Thu 26 Jun 2025 01:00:49 +0000
ROA not before:           Thu 26 Jun 2025 01:00:49 +0000
ROA not after:            Wed 24 Sep 2025 01:00:49 +0000
asID:                     54004
IP address blocks:        162.118.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:50:6a:ec:ac:4e:db:6f:51:e8:30:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a8443d1-5c7c-44eb-822c-62a1a1423a2b
        Validity
            Not Before: Jun 26 01:00:49 2025 GMT
            Not After : Sep 24 01:00:49 2025 GMT
        Subject: CN=3df6c3a7-90ac-4496-abf7-c5a949627ee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:81:1f:09:88:2a:fb:ea:68:85:b0:ea:80:4c:
                    81:3d:54:41:01:a9:fc:dd:96:bf:34:4a:45:ef:0a:
                    6e:f6:c7:8c:4e:eb:8c:f0:84:9c:ad:e5:e9:cd:72:
                    07:61:f1:7a:6b:3f:d4:6e:b2:44:39:4f:a9:47:8f:
                    40:3f:7e:e1:a4:39:0c:53:bf:57:8c:4b:eb:98:8b:
                    aa:df:bf:22:29:a5:c9:a6:af:e2:92:3c:d7:c5:c6:
                    f7:a2:bc:e6:cb:25:be:63:cc:8b:90:54:29:fa:36:
                    3a:1b:15:7c:01:6c:f2:b1:6a:f7:a0:2b:3b:43:78:
                    c8:f6:72:4f:df:17:1f:4e:9b:c6:8d:f0:ef:14:68:
                    44:65:c2:b8:30:44:09:a4:38:05:33:89:a1:3f:b5:
                    14:f8:17:f1:8a:5b:db:05:e4:8e:8a:72:e7:6e:4f:
                    4c:e2:b7:44:d9:38:d0:b3:f5:a4:cc:2a:0b:11:22:
                    de:ff:c0:95:bc:f8:03:07:be:26:d9:cd:b5:0e:15:
                    67:3e:f4:97:b3:b9:fb:05:4f:70:6d:e3:dc:bb:30:
                    7d:a0:b1:c7:77:30:d5:40:e9:da:ca:7e:0a:1d:bd:
                    92:a7:b5:c5:ce:dc:14:7d:03:65:24:0a:66:99:0a:
                    47:9a:9d:67:36:1c:de:34:0a:0a:51:9d:ba:63:c7:
                    a8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:F2:88:78:56:85:09:E7:22:4C:4A:D8:31:14:6E:23:ED:EC:E0:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/31dd128e-6217-30ff-8b1a-469e384a6d67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.crl

            X509v3 Authority Key Identifier:
                keyid:32:CB:80:43:03:D9:69:B6:1D:11:4D:8B:CD:61:3D:96:35:20:0B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8a8443d1-5c7c-44eb-822c-62a1a1423a2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.118.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:14:2f:d3:8f:76:a2:62:19:92:3d:b4:b1:12:fc:92:bc:3d:
         17:dd:38:f0:c2:a8:0e:42:f5:9a:30:ef:cd:e5:84:2d:9f:aa:
         24:2e:fd:03:02:94:32:51:4f:b3:b5:dc:55:22:3a:93:7e:01:
         ff:ab:e1:9a:ba:65:0e:e4:7e:58:aa:34:1c:b9:18:73:ca:c0:
         45:d9:29:af:79:f5:8f:80:cd:08:3e:da:84:51:10:a7:fb:15:
         9b:d8:89:54:17:43:fb:21:7d:f4:ce:94:47:f2:fb:98:1a:ef:
         b0:97:ef:f9:e3:7b:85:ce:6b:ff:71:67:26:5f:26:39:c1:4a:
         a2:b6:f1:e5:a8:19:fd:aa:66:88:99:45:0b:c0:9c:41:8d:7b:
         c5:48:a9:03:f6:eb:12:72:05:62:56:4a:b4:9e:8b:b6:aa:1f:
         69:ed:ba:49:71:a8:7a:96:bf:c9:10:9d:38:17:82:c6:5f:1d:
         be:68:fb:35:41:0d:92:63:73:5e:78:b5:9a:7b:67:25:6b:61:
         62:a7:fa:b4:d3:49:77:7c:a2:73:29:72:8c:b5:ad:78:de:7d:
         fb:b9:5e:69:fe:6d:e9:82:b9:21:62:1b:7e:c2:45:cd:a5:df:
         f3:9e:78:f6:a1:1a:fd:15:56:38:22:dc:0d:0a:8b:73:55:9b:
         36:3b:d5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:30:09 2025 by rpki-client