Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/fa30a889-abf9-322d-8e03-0076a19d3556.roa
File:                     fa30a889-abf9-322d-8e03-0076a19d3556.roa (raw, json)
Hash identifier:          jbh2+KHcBH2d4Y2rjY+p+DTY/BxK9r9HhJdkPeadxvM=
Subject key identifier:   CC:AA:A1:2F:86:51:4F:AC:0C:88:B0:94:7D:8E:89:D8:C9:B2:D7:02
Certificate issuer:       /CN=c235459b-705a-42fb-9059-b6a9bf0c853f
Certificate serial:       010D0C9F43285849ED4FCF076C3B8C3BA4C64A80
Authority key identifier: 15:F5:EC:4A:5E:00:41:2A:E7:D7:5D:8E:11:BF:89:80:9E:D7:3E:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/fa30a889-abf9-322d-8e03-0076a19d3556.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     393905
IP address blocks:        216.245.176.0/24 maxlen: 24
                          216.245.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:cf:07:6c:3b:8c:3b:a4:c6:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c235459b-705a-42fb-9059-b6a9bf0c853f
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=81e3f596-83e4-4fe5-9b93-5577a41c0627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b1:a1:0f:18:4a:2d:ce:49:04:cb:85:89:42:
                    53:5a:f2:0d:b2:32:35:c6:ae:a6:90:e7:9a:71:a2:
                    9e:e7:cb:93:a7:fb:7a:5f:4d:93:57:0e:60:f2:44:
                    23:53:1c:84:a8:3b:6e:d6:39:33:8c:92:f1:7c:cf:
                    98:08:3f:9d:13:84:ad:ca:c6:d4:d4:14:31:aa:cf:
                    f5:12:94:95:44:a7:dd:af:84:57:e8:e8:63:1e:6a:
                    1f:61:c2:66:50:46:92:31:94:97:bc:32:8c:93:b5:
                    34:a2:69:37:f7:c7:a0:04:d1:c2:8f:58:dd:de:dd:
                    d5:1e:26:48:27:a7:0a:84:3b:98:95:35:f8:7a:80:
                    a9:e6:e2:0f:d5:8a:53:5b:d9:97:2b:f2:56:15:f8:
                    66:4d:31:14:ef:06:0a:76:b8:ad:28:00:22:2a:b8:
                    53:15:fa:50:49:a0:27:55:10:65:c9:22:af:00:0e:
                    5b:b4:04:fc:7a:61:1b:b5:5b:68:58:63:14:f1:9a:
                    00:f2:dd:53:9f:ac:06:38:3a:dc:ac:95:fd:93:5b:
                    15:d0:80:6b:76:dc:36:40:8e:6c:81:69:aa:ac:77:
                    bd:62:83:62:5f:fe:1c:c9:56:31:1b:0e:20:af:46:
                    d9:56:a0:f2:90:34:f9:08:7a:23:c6:61:14:7c:6f:
                    e6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AA:A1:2F:86:51:4F:AC:0C:88:B0:94:7D:8E:89:D8:C9:B2:D7:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/fa30a889-abf9-322d-8e03-0076a19d3556.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.crl

            X509v3 Authority Key Identifier:
                keyid:15:F5:EC:4A:5E:00:41:2A:E7:D7:5D:8E:11:BF:89:80:9E:D7:3E:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.245.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:60:38:60:8e:94:22:fa:70:55:6a:c2:2c:02:b8:95:1c:f5:
         ae:75:b5:fb:c0:88:cf:0f:06:fa:fb:4e:e6:82:df:67:a8:26:
         84:cc:52:cf:80:41:a2:20:05:bd:3e:a2:0a:6b:73:b5:b8:48:
         f5:73:3d:0d:cc:3d:09:de:a7:a9:5c:06:79:39:90:65:16:83:
         46:86:e3:c9:81:23:7f:b3:f4:7e:01:02:f4:1f:9d:bb:32:6a:
         9e:5a:c1:4f:29:55:cc:df:df:b9:79:9c:66:83:4e:30:e5:e6:
         78:3b:51:dd:3c:b4:65:b0:90:c9:4f:60:e8:7a:c8:93:09:89:
         fd:07:5b:49:12:78:e3:e7:13:38:f0:18:01:70:3a:b6:ad:53:
         74:bb:02:fb:e5:85:c6:00:cf:20:63:37:9e:d8:8c:0c:55:61:
         30:2d:33:f1:ea:c2:6e:d9:fb:43:8c:94:0a:b6:4c:11:51:34:
         30:85:56:d1:8b:33:99:e3:b9:9b:d4:a9:55:4f:3c:58:fa:76:
         e7:87:c9:55:6e:27:86:60:43:1e:69:00:c9:6b:bd:b1:bd:13:
         6c:32:88:ea:59:30:d9:a8:ba:15:11:23:7d:e1:f2:8e:07:a1:
         c6:d7:00:9e:d7:76:1b:b1:c9:d6:c3:3e:2c:f6:22:ff:42:06:
         94:7a:54:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:21:53 2025 by rpki-client