Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ed91c2f-e660-358f-8205-7d3850ec790b.roa
File:                     5ed91c2f-e660-358f-8205-7d3850ec790b.roa (raw, json)
Hash identifier:          64gpjWsZz+ImW55dpOVZ4TXPOdBCL59pHB6xfBugkJA=
Subject key identifier:   A2:9E:54:38:6C:5D:06:55:2C:81:D2:E8:A9:AC:01:9F:C2:99:5B:FE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584AD23C13472B7D28BDEB7F82C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ed91c2f-e660-358f-8205-7d3850ec790b.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     701
IP address blocks:        100.16.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:13:47:2b:7d:28:bd:eb:7f:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=fcd26333-d7fe-4b1b-a141-bf3ea68b5462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:95:6a:38:00:a3:1c:5d:f1:32:28:33:d9:ff:
                    e8:75:a0:da:5c:c3:0b:87:a1:44:dc:e7:1c:25:7b:
                    c2:cb:fd:94:c8:f8:39:a6:5c:8a:fa:4c:a8:b6:f4:
                    25:44:5d:bb:9a:b4:50:7b:59:fb:c6:02:05:18:90:
                    b9:04:6e:ef:f4:a4:e0:d3:07:a3:ad:a2:d4:e4:d6:
                    a3:54:03:61:c6:23:09:13:ea:e6:c6:db:03:f0:b7:
                    1f:15:b5:d9:50:a8:e3:cd:7b:a6:61:f0:34:64:ec:
                    33:6b:87:58:96:66:f8:f9:75:cd:dd:d7:45:72:36:
                    c0:34:8c:da:e6:52:fc:2f:73:5a:a9:56:ef:2a:5e:
                    d2:96:ab:5c:8c:81:9d:43:d0:fe:45:ba:fa:d8:44:
                    1d:d6:b7:f5:ab:1f:04:14:ca:6d:9e:38:a3:58:99:
                    ab:c9:6f:5f:28:e5:91:fd:43:95:2c:11:7a:4b:79:
                    e9:67:68:25:f9:8b:da:55:7f:58:89:24:bc:63:dc:
                    94:3d:0c:b7:6d:20:07:57:0f:65:93:e5:97:39:ef:
                    0e:af:b7:f7:2b:ef:74:09:42:cf:9d:24:e0:67:1b:
                    32:10:ff:99:91:14:fd:d2:c7:3d:30:82:4f:5b:7f:
                    37:3c:07:1d:f4:70:c2:36:22:f8:d5:7e:19:8b:2c:
                    2d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9E:54:38:6C:5D:06:55:2C:81:D2:E8:A9:AC:01:9F:C2:99:5B:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5ed91c2f-e660-358f-8205-7d3850ec790b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.16.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:51:25:b1:4a:32:77:c3:f8:5e:d5:47:63:43:2c:c2:ce:3d:
         d0:34:f9:e1:08:c4:f2:5e:1c:fb:c1:6e:a0:5c:1c:70:12:17:
         fa:a4:fa:39:e4:c0:a7:69:90:42:b9:19:3f:c0:02:5e:86:48:
         7a:1b:f5:9f:5a:2f:37:0d:f0:ec:b3:e4:15:31:60:36:58:1c:
         b5:94:90:81:56:27:1e:52:ab:4c:64:f2:d4:cc:26:b2:a3:fe:
         26:5a:d4:48:35:8e:74:9f:c0:15:7a:da:65:cd:76:db:fc:ea:
         93:9f:85:98:69:d8:c0:44:d8:88:25:5f:3b:23:c1:1e:f2:b5:
         69:80:c3:58:22:3a:a5:e6:0b:0c:f7:e2:c1:fc:32:ba:0b:d9:
         17:a2:89:97:62:d3:f6:d8:d9:06:f7:21:83:42:e3:07:dc:a6:
         9c:44:86:fb:06:20:84:a2:d5:81:a9:3e:36:81:11:db:3a:8e:
         d6:95:05:4e:8b:23:3d:cc:6f:35:a4:0f:19:bf:e3:75:ef:0d:
         a2:a7:86:a5:82:71:60:4d:b8:c1:f2:5c:ba:6d:45:af:fe:e9:
         62:e4:0c:05:dd:9c:e1:00:88:a3:3d:10:d9:9e:41:8a:cc:b3:
         7c:99:ed:f3:f9:02:08:c0:9a:a0:01:c6:a4:3f:21:9f:52:9a:
         5e:13:9f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:16:32 2025 by rpki-client