Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/1ae4996e-0a4b-3bfd-9fb1-20f2aa7f8ba7.roa
File:                     1ae4996e-0a4b-3bfd-9fb1-20f2aa7f8ba7.roa (raw, json)
Hash identifier:          QeO9LdbrYemr3mP9sGsSjqKdtnS1If8MkB1xu0nQsFc=
Subject key identifier:   51:9F:B0:DB:C0:B3:2F:63:77:D6:7F:1C:C6:A5:9C:5A:F7:4A:37:90
Certificate issuer:       /CN=a47e2843-16e1-4ed0-acc2-7a942bfc46ce
Certificate serial:       010D0C9F43285849E7BA7D698BBC130A16903180
Authority key identifier: EF:9F:F6:47:56:F0:E2:3D:69:AA:68:94:D7:E1:F8:8E:B7:CE:01:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/1ae4996e-0a4b-3bfd-9fb1-20f2aa7f8ba7.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     397373
IP address blocks:        216.87.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:7d:69:8b:bc:13:0a:16:90:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a47e2843-16e1-4ed0-acc2-7a942bfc46ce
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=a26f1fe1-01a7-4fcb-832d-0a2cdf629055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8a:3a:08:b2:84:92:57:92:16:32:0d:c6:b9:
                    4d:25:bf:ef:5a:b6:cd:1a:c8:f8:c3:b5:7a:a7:24:
                    67:3c:0d:5f:24:42:6c:c1:85:c4:32:e5:22:1c:2d:
                    19:90:a0:6d:60:78:3a:f0:95:ef:ca:fe:44:94:25:
                    1f:fe:ef:6e:54:a4:f3:91:8c:4c:9a:e3:d6:8a:03:
                    a9:33:e8:c7:e2:ca:a2:ad:c6:a8:8d:3f:0c:24:60:
                    a4:6f:91:1a:7d:a7:ea:bd:74:a9:2f:e2:8b:07:67:
                    0b:9f:e0:ff:e0:ac:77:72:a5:54:f9:c0:0e:3e:fb:
                    60:bd:1e:45:3b:db:56:64:b2:32:b0:7b:73:58:d8:
                    5d:be:f9:71:54:2d:22:cd:89:dd:23:54:b8:50:14:
                    b5:f8:92:6f:b1:41:6c:7a:49:99:d8:0c:8b:7d:db:
                    f1:7d:f5:9a:73:02:90:66:74:ff:4d:75:71:6d:0e:
                    4d:b8:56:0b:e8:af:16:95:23:33:69:ed:cf:eb:38:
                    1b:a0:10:2b:df:05:92:07:98:50:fe:94:e0:b6:68:
                    a8:c6:ee:20:a6:30:04:cd:0a:38:0a:5e:c1:04:94:
                    5b:c6:0f:cc:d4:7e:2d:2e:e3:96:90:40:f3:58:ca:
                    70:7b:bb:5c:7f:60:8c:a4:a8:0d:ae:8f:e9:8b:8f:
                    3e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:9F:B0:DB:C0:B3:2F:63:77:D6:7F:1C:C6:A5:9C:5A:F7:4A:37:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/1ae4996e-0a4b-3bfd-9fb1-20f2aa7f8ba7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.crl

            X509v3 Authority Key Identifier:
                keyid:EF:9F:F6:47:56:F0:E2:3D:69:AA:68:94:D7:E1:F8:8E:B7:CE:01:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a47e2843-16e1-4ed0-acc2-7a942bfc46ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:77:e2:ce:6f:fe:f0:91:b8:52:89:6d:b9:22:c6:cf:2b:40:
         e8:c5:2d:63:4b:16:0f:1c:5b:77:e2:82:bf:68:4e:d0:b0:48:
         98:94:b4:42:a0:7a:14:d3:3f:bb:98:e6:41:20:70:64:52:0b:
         85:68:56:14:c2:50:2a:f6:80:18:04:28:91:41:2c:3b:41:49:
         6e:b8:a6:44:ce:21:90:8d:fe:0a:0b:15:52:37:f2:ec:6c:18:
         dd:bc:95:dd:01:a4:e1:41:65:34:ec:8b:43:cd:15:bb:ce:74:
         c0:41:90:89:4d:3a:66:13:b9:0c:c3:2c:a4:20:d3:04:e1:5e:
         0f:65:9b:4f:27:bf:13:3a:45:e1:43:0f:88:e7:70:85:a0:62:
         f5:45:05:b4:36:32:7d:5a:95:32:9d:8b:68:00:bd:e9:58:ba:
         cf:34:c3:e9:81:62:9a:ee:73:55:cc:da:8e:b4:f9:10:45:fb:
         62:54:a1:8d:f8:12:f9:f2:d2:77:b5:1d:9f:94:88:44:5c:84:
         b8:05:e7:cc:76:0c:91:10:70:87:ea:b2:da:1c:62:8c:e1:91:
         0f:8b:16:5c:2b:58:41:84:c0:ca:b7:03:7c:d5:c8:d6:c0:29:
         ec:a1:b8:13:f7:4d:32:99:aa:26:30:bf:ee:dc:bf:40:b5:10:
         60:ed:45:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:28:09 2025 by rpki-client