Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f081b6e7-ddd3-3548-ad84-0c4e7f1e97bc.roa
File:                     f081b6e7-ddd3-3548-ad84-0c4e7f1e97bc.roa (raw, json)
Hash identifier:          SQeICddX+v09zb70NzgB7H5cn52ATpOC8gypXjDfzGo=
Subject key identifier:   93:09:D9:81:62:EC:37:38:0C:CA:18:09:F1:57:34:90:DC:60:7D:0B
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584B8EACD40A33B8C79AABA92180
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f081b6e7-ddd3-3548-ad84-0c4e7f1e97bc.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     16509
IP address blocks:        173.199.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:d4:0a:33:b8:c7:9a:ab:a9:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=667caba0-ac91-4001-b14d-48ea09238ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:72:44:71:cb:a9:da:b9:0a:ee:38:54:e5:fb:
                    65:48:e5:2c:75:25:ba:19:41:40:e5:15:50:0d:f7:
                    45:2d:95:32:35:7b:90:da:02:c2:8e:e7:7c:e0:38:
                    17:d9:eb:3f:ba:0d:c5:e8:ac:0a:f1:f9:71:f9:21:
                    56:05:f6:f1:88:54:b0:e0:8f:35:b3:d2:d8:b4:0e:
                    6e:41:f2:97:47:b3:4c:aa:be:4b:1b:c3:8f:2e:61:
                    fd:ee:38:67:38:48:d9:97:08:ed:a6:56:0f:1e:67:
                    00:e5:c9:46:01:96:fb:09:4a:d1:15:05:32:12:09:
                    e3:84:ff:1c:17:d9:7d:53:bf:b1:44:25:25:05:ed:
                    ab:3e:e5:30:ac:82:dd:e7:b7:31:79:23:2e:a5:83:
                    de:c2:fc:fd:3d:be:16:57:e9:ea:26:db:da:50:8e:
                    05:6b:a0:1c:b9:05:97:c2:1d:84:19:be:a8:e2:c3:
                    5a:0c:57:f3:e6:27:24:03:3e:72:ad:c1:59:05:f1:
                    11:14:de:f0:25:a5:0e:b4:e6:88:8f:61:6a:d7:4e:
                    c7:95:bb:f1:52:e8:fe:92:83:fb:11:55:a1:ba:65:
                    d0:51:69:c1:88:12:45:55:24:d1:11:4f:62:72:b5:
                    c4:81:a8:49:d1:d0:dd:88:12:64:bf:4a:d8:71:22:
                    a6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:09:D9:81:62:EC:37:38:0C:CA:18:09:F1:57:34:90:DC:60:7D:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/f081b6e7-ddd3-3548-ad84-0c4e7f1e97bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:95:25:2e:89:17:99:59:93:40:bc:84:cf:60:3b:ae:b6:9e:
         fc:51:11:d2:9b:f4:5c:a5:5b:47:8c:99:e6:d3:bd:58:f6:b0:
         88:c7:04:1b:67:69:b2:66:da:c3:5d:f3:61:9d:1b:14:cd:2b:
         fd:7b:71:69:c1:73:57:20:a2:2b:ee:55:54:c7:76:68:86:72:
         5a:71:61:60:ef:ae:1c:27:44:9f:0a:75:0d:0f:73:37:67:dc:
         2d:fe:64:55:41:e1:0e:71:7c:1e:db:07:a1:80:ed:e3:a8:5d:
         e6:1b:6e:3c:5b:cd:68:48:64:11:af:c4:fd:65:be:c6:2e:2b:
         cc:13:34:ab:e6:2d:c5:47:ea:7e:5e:a3:0a:11:20:78:29:14:
         c0:d8:6f:55:e1:19:74:64:9e:45:a9:30:ac:18:3d:0c:cf:f5:
         f9:fb:30:c6:35:44:69:65:f2:ba:90:23:4e:6b:d9:0c:f9:2f:
         aa:81:2c:26:d2:c5:c6:67:88:40:cf:1a:5e:8a:22:be:18:e2:
         94:a1:f1:20:31:34:81:7f:d7:16:96:1f:2a:e5:1c:9c:47:47:
         62:c8:05:09:b4:13:8a:bd:df:49:76:2e:92:01:26:4d:60:2f:
         f3:4d:09:c4:31:e6:02:5a:35:85:56:71:3f:4b:e2:ee:24:96:
         51:7d:0f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:05:41 2025 by rpki-client