Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/36662260-e268-3f6b-b84f-abb203cc78ac.roa
File:                     36662260-e268-3f6b-b84f-abb203cc78ac.roa (raw, json)
Hash identifier:          85dcOFuCUyUcnIxPKPYLr49y205kRMmSCbFvpNcWTQw=
Subject key identifier:   ED:2B:50:E8:CE:52:3D:87:F0:59:DD:6B:3F:A5:B2:B6:2F:62:3E:17
Certificate issuer:       /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial:       010D0C9F43285849F9DFC5EF4F2EB93202126E80
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/36662260-e268-3f6b-b84f-abb203cc78ac.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     394708
IP address blocks:        216.255.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:c5:ef:4f:2e:b9:32:02:12:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=27c62464-9b59-4eba-8376-7039c96c0742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e0:a3:04:5e:cb:76:84:84:5b:be:d7:d4:49:
                    0e:0c:58:f4:be:8b:80:5a:d3:72:97:43:eb:82:5b:
                    54:20:08:4d:96:53:87:8e:12:0a:ea:53:e9:f1:b5:
                    c5:4b:6a:c9:c3:ba:e7:d9:31:13:8c:59:25:24:70:
                    31:e4:ae:6b:16:33:86:13:77:b2:14:64:cc:dd:c1:
                    ac:70:05:f6:9a:43:1d:c3:74:b2:e4:67:67:c8:10:
                    82:d8:48:f1:be:6a:1d:f8:19:65:fd:c3:97:56:0e:
                    ef:23:d0:2c:2c:a7:88:18:36:3c:e8:7c:42:be:54:
                    16:ce:e7:9b:5c:35:11:a0:b6:08:5f:58:a0:20:6d:
                    be:01:9a:12:e7:47:00:19:e6:2c:5a:2e:cc:7e:41:
                    28:93:fe:51:59:0c:b7:7d:4b:de:d3:d8:b4:b4:8e:
                    5b:ed:48:b6:f8:1c:d5:a5:f0:21:52:62:80:96:b8:
                    0c:74:0c:38:6a:7d:54:43:54:69:be:7a:c2:21:3e:
                    7a:a9:1a:ae:cd:cf:f0:21:59:c5:30:8b:f1:9b:4f:
                    c7:57:87:68:da:a1:43:94:f6:7a:e9:cc:7c:07:36:
                    56:1a:ad:dc:7f:67:93:9d:32:39:8a:df:c0:a6:e6:
                    42:60:c5:5c:1f:4c:96:da:8b:15:4f:66:bb:99:9c:
                    6d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2B:50:E8:CE:52:3D:87:F0:59:DD:6B:3F:A5:B2:B6:2F:62:3E:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/36662260-e268-3f6b-b84f-abb203cc78ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl

            X509v3 Authority Key Identifier:
                keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.255.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:40:6c:c7:f9:c9:bf:98:79:37:a6:13:53:d7:77:82:99:54:
         88:3c:7c:f3:d2:29:7b:a6:62:04:7a:d2:fb:42:b4:62:7e:6a:
         0f:76:21:11:f8:c6:9d:33:f8:d5:3b:c9:4a:a0:d4:38:f7:c2:
         1c:71:fe:5a:f9:9d:74:d9:e4:9e:ff:45:af:74:77:26:48:0c:
         98:80:c1:69:2d:0c:d6:2c:65:5b:18:8e:e3:c4:48:f5:fa:88:
         5d:7c:0a:85:33:bd:cc:a8:7d:d6:49:83:13:c7:35:69:ea:dc:
         41:83:53:da:3f:db:70:26:2f:be:b8:28:41:3c:f7:5f:5c:a8:
         43:77:bb:fd:96:d9:03:0f:9a:88:2c:19:f6:58:9c:22:96:97:
         2a:45:1f:a1:9a:c4:bf:41:2a:45:ab:f6:a6:b9:66:7d:22:fc:
         58:12:48:93:67:dc:2f:bc:69:d9:6a:9b:0c:46:9a:26:8e:cd:
         d9:37:0b:19:6d:c6:24:b2:6c:41:82:1d:d5:24:20:af:b4:d7:
         7f:06:e2:2d:a1:78:c3:82:93:82:57:5f:56:bb:a9:77:37:04:
         f3:98:da:82:de:f9:2f:4b:ee:2e:5f:c2:1c:2e:99:cf:9d:d1:
         0c:0d:40:3c:61:89:27:3b:9f:34:7b:b6:00:2a:9d:d4:50:de:
         d0:3b:01:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:45:25 2025 by rpki-client