Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/116b93d1-3c44-3036-ad69-53d76a64b354.roa
File:                     116b93d1-3c44-3036-ad69-53d76a64b354.roa (raw, json)
Hash identifier:          9pDV+Ab00R09Welodfn0w5/NhjAwjfRGbSZq8eDHEE0=
Subject key identifier:   EF:C7:88:85:C2:98:56:A2:0C:4B:54:36:24:B7:9E:F0:8C:E0:AD:71
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD23BE31BFDA51DEDB73C14C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/116b93d1-3c44-3036-ad69-53d76a64b354.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     701
IP address blocks:        100.12.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:e3:1b:fd:a5:1d:ed:b7:3c:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=b3dab973-9ebc-4a19-9f0d-f36c92c62d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b8:08:33:57:e3:27:79:68:90:9c:7a:d8:a9:
                    e6:87:d1:a1:c6:ea:1a:aa:20:3b:f4:ff:5f:d9:f5:
                    9e:5a:1c:f0:19:30:f6:ba:3a:f6:34:c3:fa:6e:44:
                    1f:84:97:9a:07:a8:0e:39:33:39:2c:37:73:fc:da:
                    85:76:5a:2a:a6:73:e5:61:8b:7a:ef:e8:1f:59:21:
                    89:fd:86:de:2f:77:e5:57:c2:dc:a2:60:e8:d0:c4:
                    f0:4c:6e:91:c7:61:e5:90:fd:00:aa:68:a8:68:71:
                    22:04:b9:f7:4d:9e:e6:a6:f2:ae:16:d5:57:6e:c4:
                    a4:49:28:c5:af:fd:cb:00:5c:c5:1a:07:cd:d8:5c:
                    54:71:2f:fe:c1:88:78:f0:f7:4f:35:e0:94:0c:7a:
                    79:21:72:6a:21:28:60:ff:4a:fa:0f:aa:b4:ff:73:
                    6f:bf:7d:96:2f:a2:85:81:b1:3a:9c:29:f0:62:7f:
                    e6:86:59:70:90:bf:40:c1:34:48:cb:c0:d7:9f:24:
                    10:61:e6:72:d3:02:34:b1:54:ee:16:cc:a1:cd:4c:
                    f2:bc:f6:3c:ab:85:bb:8a:83:c8:aa:45:da:09:13:
                    8e:53:8f:16:a1:3e:0a:51:2e:b5:4e:c8:46:86:3d:
                    bc:9b:c2:f6:79:71:86:af:b6:62:0a:01:e0:57:b3:
                    ef:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:C7:88:85:C2:98:56:A2:0C:4B:54:36:24:B7:9E:F0:8C:E0:AD:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/116b93d1-3c44-3036-ad69-53d76a64b354.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.12.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:ed:16:a3:b5:cc:f6:8e:ec:3a:78:ef:1b:3d:e1:dd:93:cb:
         31:52:54:07:03:7b:20:6e:86:5f:ef:99:49:0e:48:13:e7:c7:
         70:ea:6d:79:bd:c9:7d:8c:f1:81:60:d5:f5:b8:bb:94:35:ec:
         a0:3e:70:3f:24:2b:24:36:8b:94:de:f2:d7:af:7d:d1:d5:23:
         c5:37:d1:c2:fe:16:b3:4e:15:e5:21:36:60:9e:7d:52:5e:5b:
         22:7e:03:20:f9:c9:2c:47:06:58:3e:8a:7a:e8:92:b5:17:4a:
         6c:24:b9:e3:51:a3:21:ad:f2:0b:9a:c1:0e:d8:3b:dd:a2:a9:
         42:c8:4b:89:3a:d4:05:c1:38:87:7c:9c:4c:61:ed:8f:9d:c0:
         3a:0e:a0:25:68:01:ba:07:ef:f9:63:c3:2a:6a:14:cc:bd:d0:
         ee:78:37:ca:46:f7:3c:8a:95:b8:98:cc:6f:ee:ed:ff:0d:91:
         0e:4a:bd:58:d1:1d:55:b3:6a:1b:f3:b8:89:aa:b5:8b:9d:11:
         f3:75:a1:3b:70:85:47:af:68:02:bf:72:c5:f3:da:73:33:61:
         03:9c:8d:2f:7e:15:f9:56:70:66:69:06:0d:30:6f:18:e5:61:
         f3:70:e9:0f:94:3f:e9:ab:6b:07:16:3e:90:0f:d3:46:60:76:
         65:b0:ef:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:28:40 2025 by rpki-client