Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8e60b95b-d7e2-3711-ad83-b04417fa834a.roa
File:                     8e60b95b-d7e2-3711-ad83-b04417fa834a.roa (raw, json)
Hash identifier:          KJNiKmrSt4oON6xfOyTrhK3nP4fFgtOUTLmZX/Jx7Hc=
Subject key identifier:   FA:93:22:F9:80:CC:B1:CC:23:AB:57:64:42:78:A3:54:8C:D7:4D:83
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAB42041731878627D9900
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8e60b95b-d7e2-3711-ad83-b04417fa834a.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     3848
IP address blocks:        216.208.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:b4:20:41:73:18:78:62:7d:99:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=cbea1227-3ee2-4530-b602-5ce81bcf002f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e8:b3:86:67:74:6f:b2:ab:93:76:d3:93:e6:
                    28:3c:00:2f:40:e7:5f:33:9f:03:4c:fd:8d:7e:ec:
                    cb:e1:65:99:5e:8c:6f:4b:61:36:a2:e3:34:5e:f2:
                    fb:fa:33:fa:aa:a2:97:83:9d:14:ba:54:53:68:05:
                    08:a0:2e:f7:08:23:10:8c:20:76:29:41:da:7c:8d:
                    3d:5e:1f:90:0f:03:40:bf:72:57:69:ef:f0:c1:85:
                    95:46:ad:49:48:58:0a:f7:41:c4:41:d4:aa:e1:b2:
                    f9:05:12:99:b8:1f:8b:d9:56:a8:e4:16:77:fb:c2:
                    82:8a:03:fd:db:c7:3d:97:c3:65:f2:b5:be:7e:3a:
                    d8:26:d4:57:64:fe:cf:4c:3e:45:bf:36:87:0b:f0:
                    1d:3d:64:41:17:40:02:34:66:34:ed:fa:3e:e3:c8:
                    76:e7:7e:a2:68:77:3b:51:cc:3f:d1:9a:f6:97:b5:
                    62:5f:f1:15:50:ea:ca:06:69:e3:3e:2d:fd:9a:05:
                    a2:ea:fe:ba:83:de:e0:74:de:37:c9:43:8e:e9:38:
                    1e:a1:b9:14:ab:09:a3:2e:e8:98:d2:be:4a:0d:ad:
                    ee:10:1d:a2:a1:7f:1f:7c:0f:d1:99:d0:92:95:fb:
                    5e:64:95:1f:12:2b:3e:d2:bc:7e:79:91:cd:a1:ea:
                    3c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:93:22:F9:80:CC:B1:CC:23:AB:57:64:42:78:A3:54:8C:D7:4D:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/8e60b95b-d7e2-3711-ad83-b04417fa834a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:d9:53:91:e7:d4:c5:08:04:1d:1d:80:eb:03:fd:8c:16:2c:
         16:7d:86:ba:27:fa:cc:c2:33:76:34:d3:5f:dc:b4:f2:9e:55:
         a3:03:25:a7:bb:c6:9c:ff:39:14:84:43:d8:dd:e7:a1:1a:ba:
         1e:e3:aa:9a:3d:ee:07:9d:2c:26:82:13:36:6a:b1:74:d1:a2:
         66:9f:aa:c1:b8:93:20:ad:14:6b:19:21:48:f5:43:5d:2d:9c:
         5c:43:8b:eb:54:6e:91:c6:94:b3:b0:c1:5b:d2:70:f0:8d:c6:
         92:ec:c8:24:d5:71:c5:79:64:68:25:ce:87:ab:ff:0a:87:b4:
         fe:e9:53:ab:1b:b9:31:9f:74:1b:e2:03:07:3f:ce:aa:d6:ff:
         04:0c:5d:68:74:7e:05:d2:ed:2b:5e:12:56:98:c9:75:b4:f8:
         cd:fc:0f:34:b5:c1:b5:a7:f6:40:8b:a7:c1:e1:3e:c8:39:29:
         52:1a:ae:c4:a5:46:61:b6:a3:96:1f:f2:57:92:f7:35:67:65:
         e0:de:3e:b9:d0:51:fb:21:e8:41:1b:f6:1c:86:8a:81:10:61:
         79:20:82:ce:2e:c6:b5:74:35:fb:ab:ef:46:cc:6a:ca:d2:82:
         b8:d3:f0:c3:8d:fd:40:48:11:62:b8:b4:25:6f:e9:e3:24:5c:
         af:d6:bc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:43:46 2025 by rpki-client