Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/2613f3f7-60d2-3644-87f5-381f608c7546.roa
File:                     2613f3f7-60d2-3644-87f5-381f608c7546.roa (raw, json)
Hash identifier:          ZIU+P7PFKj3UbXlJIdSpBSxmU63mA+bAbFbqUb+mQZM=
Subject key identifier:   B6:0F:D2:42:89:D3:F5:99:07:4C:05:A0:3A:EA:1D:F6:0F:9E:B0:EC
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584AF0F13406E087BFA3F3E81000
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/2613f3f7-60d2-3644-87f5-381f608c7546.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        216.157.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:34:06:e0:87:bf:a3:f3:e8:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=ea6fe18e-e5db-4934-adfe-1b801bba2cfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a0:24:71:3f:a9:55:96:0b:e4:3c:82:43:ae:
                    ec:ce:17:77:97:48:bb:ac:25:11:01:75:3f:a0:7e:
                    6e:c2:77:3a:5e:8c:63:78:f6:c5:d1:6b:36:e3:07:
                    39:0c:8c:58:d6:24:4d:cb:65:85:8f:8f:e5:8e:cb:
                    37:82:b3:0b:1c:4b:1e:fd:60:2d:21:0d:5c:be:ee:
                    fb:31:48:ec:58:ee:91:b4:ad:6d:4a:a4:bb:6e:85:
                    80:d8:1d:e3:e5:f7:7f:9b:6d:ed:05:ee:3f:b5:15:
                    d1:ea:eb:1d:dc:91:4e:dc:1d:cc:9b:55:66:ac:8f:
                    c8:17:66:6d:6e:26:9c:80:3d:63:de:8f:2e:f7:27:
                    bc:4b:29:70:29:9a:08:5a:bd:d8:b2:21:25:3c:80:
                    35:09:bd:78:9c:f5:e4:9c:9f:59:9b:3e:72:82:44:
                    26:4a:66:9f:73:59:12:15:7f:c7:e0:3c:5b:6d:6a:
                    1c:4b:5f:67:f9:37:8b:ae:8b:9b:69:c3:23:3d:e5:
                    60:55:1e:25:db:58:f7:9b:31:fc:bc:08:02:f9:6f:
                    c2:cf:f2:ea:d6:f7:47:cd:95:82:15:99:b8:1b:bf:
                    7a:5d:f2:14:64:24:71:c3:e2:df:a1:40:8a:fe:de:
                    e7:fd:94:c0:33:fc:bc:2e:3e:c9:d8:aa:91:c8:e8:
                    95:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:0F:D2:42:89:D3:F5:99:07:4C:05:A0:3A:EA:1D:F6:0F:9E:B0:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/2613f3f7-60d2-3644-87f5-381f608c7546.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:14:b0:77:0c:53:18:99:78:7b:e9:d4:f4:23:a4:a2:26:ba:
         89:e9:85:9b:e9:29:79:32:f1:ad:f8:15:5d:bd:23:a2:57:a6:
         d0:b3:d3:f0:79:63:7f:68:ab:f6:e2:2e:01:07:90:98:43:6e:
         f2:a0:e5:a6:84:3e:2a:76:b1:fe:16:b0:f0:ef:1c:58:ba:3f:
         6c:af:c4:a1:21:33:35:c1:4d:98:9a:a0:6d:f5:8c:df:21:80:
         66:44:cf:68:62:fa:11:9f:9b:3b:ac:04:53:55:e1:db:86:f7:
         53:ac:36:f2:ab:19:7f:8a:d3:c1:6a:d5:aa:9c:e9:e8:88:48:
         b2:44:d3:e2:83:0d:8a:3b:a6:3c:4c:ad:81:ca:c8:fd:cc:79:
         92:7d:42:7c:4e:56:e8:a9:ec:b5:6c:f2:5d:b7:19:1d:9f:00:
         b2:86:e5:07:8c:06:b2:97:ec:8c:33:f7:0a:75:4f:7b:70:26:
         6f:e7:f3:f0:83:b6:56:5e:ab:6b:92:f4:d4:21:9d:ea:f7:88:
         6b:72:51:d5:a3:b5:d7:6a:b0:1d:6a:a0:f5:a2:dc:04:39:07:
         0e:94:bc:b8:9c:a1:88:42:72:04:c3:55:b4:82:df:c1:5f:09:
         b0:fe:82:33:96:13:62:3c:9b:50:2a:e7:67:a4:fe:57:70:f3:
         0b:29:67:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:46 2025 by rpki-client