Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/7eddb92a-8a5c-3566-83ca-aff75e0901f8.roa
File:                     7eddb92a-8a5c-3566-83ca-aff75e0901f8.roa (raw, json)
Hash identifier:          pLG5sEhgpDUdAZzn1VaHBSgDs1XzNj3RVVGIrYTSw98=
Subject key identifier:   CD:90:02:25:FE:95:A3:39:BA:37:99:93:F3:E6:9B:51:1D:D6:37:8D
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F43285849CBCF9495E5D7C7E4285EE880
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/7eddb92a-8a5c-3566-83ca-aff75e0901f8.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     20457
IP address blocks:        216.170.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:94:95:e5:d7:c7:e4:28:5e:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=d219bb90-41c3-4bac-be10-91d24cb1c30a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a1:9f:d4:26:9a:79:1e:e1:ed:90:fe:67:be:
                    6d:27:21:a0:68:a6:a2:f5:5d:a8:17:05:ba:ce:78:
                    5e:de:3b:2f:4d:5f:98:07:06:05:4b:69:19:88:a8:
                    5d:5b:ce:ab:c7:6c:7e:92:93:ed:29:19:53:b8:29:
                    5a:3a:a1:54:fd:92:c3:26:90:6c:ac:09:58:06:75:
                    2d:32:ec:b4:59:db:91:ed:68:82:99:ec:26:c6:05:
                    fd:d9:b6:81:d7:52:c8:6d:2a:b3:6a:bd:82:6c:fa:
                    85:30:9f:b9:dc:02:59:ec:5d:f9:bf:00:17:ae:c6:
                    18:26:60:0d:0f:46:a7:6b:c1:69:a4:88:76:2f:70:
                    d0:ae:e6:c9:a2:cb:5b:ea:4c:47:8f:af:11:f9:26:
                    fe:14:35:bc:a6:a3:51:0b:1a:b7:1a:30:a2:f8:51:
                    d9:3c:91:b7:4b:5b:a9:6f:95:64:68:52:cf:48:25:
                    eb:8b:6f:79:3d:4a:e8:8e:50:1a:78:ba:2f:4e:a8:
                    9d:12:a3:f0:e7:25:79:d6:ee:21:ba:40:ed:6f:a9:
                    fb:72:41:b4:36:78:1c:f4:88:a9:63:ad:18:46:ad:
                    91:84:f3:05:44:69:35:b4:f1:fe:78:95:b8:3a:0a:
                    cf:02:97:29:3e:cf:ee:7d:cd:59:bc:c6:4e:8a:43:
                    d9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:90:02:25:FE:95:A3:39:BA:37:99:93:F3:E6:9B:51:1D:D6:37:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/7eddb92a-8a5c-3566-83ca-aff75e0901f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.170.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:aa:59:f5:47:ca:18:70:2d:63:0e:52:a4:5f:f3:9b:f9:3c:
         61:15:08:4c:cc:14:db:b2:96:79:41:5e:af:c3:b7:7c:a2:70:
         fc:6f:d3:83:54:73:0e:48:a5:53:1c:de:ca:0a:ef:61:48:27:
         0d:d5:5f:34:d8:4b:09:8f:25:91:e6:ed:77:3d:e6:be:d8:5e:
         69:ee:ae:eb:d7:b3:8e:4e:be:71:bc:eb:82:95:2e:c3:fd:1c:
         58:d7:c2:e9:4c:8a:c4:82:0e:01:cd:53:6e:25:d8:be:e7:9b:
         d8:2c:ba:11:7f:ab:e4:b0:ef:e1:36:d4:74:71:5d:88:f2:b1:
         ff:de:fb:a0:eb:d0:96:f5:5b:46:79:4c:8f:bb:a0:c4:a2:91:
         2e:f5:eb:df:e0:34:5a:d1:70:98:5c:35:16:a8:c3:ed:e0:4e:
         b1:1e:37:9c:1f:64:a9:9b:c1:7e:35:47:5c:65:1b:57:ee:46:
         63:06:a3:52:ee:7f:6e:6a:66:61:d7:f9:35:50:c7:bd:0d:ce:
         e1:2b:f8:3c:fe:47:06:bf:29:65:18:06:6e:14:8c:6a:9d:4b:
         36:15:c0:90:50:52:ab:c5:24:e1:84:58:dd:a4:76:5c:2b:cb:
         42:a8:a3:6e:76:b9:7a:fa:b1:34:3b:6f:b6:d7:a7:3e:38:c6:
         6f:cf:65:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:07:30 2025 by rpki-client