Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539/1dc0cef6-7c40-3dd1-8370-a84290834e1e.roa
File:                     1dc0cef6-7c40-3dd1-8370-a84290834e1e.roa (raw, json)
Hash identifier:          LgcjL21A0N9KgYYvdiYCRnZp3SGWRXed3bYQ0Pj1eHg=
Subject key identifier:   BC:B4:6F:EB:52:05:91:1E:35:FB:58:C0:67:CC:10:2D:4F:9A:8E:95
Certificate issuer:       /CN=c1543a00-25db-43b0-8b17-26161baf1539
Certificate serial:       010D0C9F43285849C0A4E4884BC0942B8457EB80
Authority key identifier: 31:B9:83:72:F2:5B:11:99:03:9E:EA:08:BE:5F:DD:55:CD:9D:21:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539/1dc0cef6-7c40-3dd1-8370-a84290834e1e.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     14051
IP address blocks:        216.230.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539/c1543a00-25db-43b0-8b17-26161baf1539.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539/c1543a00-25db-43b0-8b17-26161baf1539.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:e4:88:4b:c0:94:2b:84:57:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1543a00-25db-43b0-8b17-26161baf1539
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=38c59d15-cc6e-4545-99aa-bf17e90e6136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a8:92:b4:c6:32:9a:38:df:be:1c:1b:b9:b9:
                    9e:76:15:70:b1:c5:d4:75:ef:5d:26:b2:d2:17:5b:
                    a5:a5:94:63:b6:2e:e0:5f:51:76:2b:2e:19:32:7f:
                    a7:7c:eb:4c:85:27:aa:b0:19:fd:89:cd:90:3d:d4:
                    98:eb:7e:b5:30:ed:9f:61:49:cc:8f:dc:e6:cb:82:
                    c6:4b:0d:8f:56:0a:8a:83:2e:ed:de:ff:f1:aa:17:
                    ef:88:7a:44:2a:ec:9a:2e:2f:a1:65:a0:d1:e6:1d:
                    3d:28:bd:0e:f0:c3:a7:53:ef:b8:a9:c0:0a:38:8d:
                    6f:76:02:ed:d2:99:27:98:7d:49:fc:76:7d:51:b9:
                    35:3a:2f:34:25:3c:eb:98:ca:e6:f5:6c:50:fb:2f:
                    09:63:d6:24:84:09:20:55:0a:71:48:2a:28:2d:b5:
                    f7:93:91:39:c9:fb:b3:76:5a:22:da:e2:72:21:f3:
                    a4:30:e8:ff:f4:cd:d5:25:21:02:e5:fe:1d:90:54:
                    0e:99:cf:20:eb:0a:0f:d3:e2:1a:c4:d8:a9:6b:ca:
                    fd:29:90:83:c2:a9:d1:cb:28:a5:37:20:38:de:e7:
                    84:66:87:7d:48:ab:d2:73:38:fc:2d:87:2d:33:88:
                    e1:ab:bf:b6:56:d7:77:6a:37:59:39:0c:4a:64:6b:
                    7b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B4:6F:EB:52:05:91:1E:35:FB:58:C0:67:CC:10:2D:4F:9A:8E:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539/1dc0cef6-7c40-3dd1-8370-a84290834e1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539/c1543a00-25db-43b0-8b17-26161baf1539.crl

            X509v3 Authority Key Identifier:
                keyid:31:B9:83:72:F2:5B:11:99:03:9E:EA:08:BE:5F:DD:55:CD:9D:21:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1543a00-25db-43b0-8b17-26161baf1539.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:5d:fd:bc:bf:d0:03:64:a7:cf:87:0f:c7:70:0c:d4:80:9c:
         10:be:f2:2e:79:3d:cc:46:6b:f0:7c:da:bc:b8:b7:c8:16:a7:
         cd:21:3b:7b:bb:ed:1c:3f:5c:f0:bd:87:23:3a:34:8a:e7:66:
         d7:97:15:de:e4:74:dc:b8:e3:56:7f:cf:70:07:60:cb:75:eb:
         69:09:b9:38:ea:b2:b9:2d:70:cc:06:63:ed:bc:c0:9a:bc:bf:
         ff:82:b9:ea:31:52:b4:0d:ca:c4:43:a5:3d:9b:4a:72:1b:d7:
         6a:5c:f5:12:12:68:25:d3:1a:eb:11:65:64:89:f5:56:46:94:
         05:e3:27:62:21:22:c6:87:ca:a2:d7:98:b6:1b:8e:01:a3:26:
         22:cc:ca:14:f5:dd:a9:7a:5f:3a:71:68:0b:87:75:3c:8d:cc:
         fa:ce:9b:38:4c:f5:3a:bb:ca:9b:2b:c6:a6:60:44:58:54:44:
         ed:b2:df:f4:cf:a8:fb:57:50:c1:43:1e:cf:a3:74:0f:db:cf:
         c6:ec:81:55:35:48:e0:93:2b:db:4c:a8:f0:c2:7e:64:55:cf:
         49:40:7b:ff:8c:18:97:dd:49:bb:a6:9d:4f:1e:9b:25:63:77:
         42:3f:39:6d:2a:cb:60:dc:5c:ce:ee:f8:18:5f:3d:1c:a5:ed:
         33:e3:d9:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:51:27 2025 by rpki-client