Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b97501a5-c1f0-3b1d-b523-c4703b659f7b.roa
File:                     b97501a5-c1f0-3b1d-b523-c4703b659f7b.roa (raw, json)
Hash identifier:          yKOp1wX8BBxhrwx/RLGDc/189noWcATWR7QWNcHvewE=
Subject key identifier:   20:06:10:75:86:FE:F1:34:00:83:26:4C:4A:3D:E0:47:09:AC:7F:02
Certificate issuer:       /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial:       010D0C9F4328584A348020958AA13EF140F94F80
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b97501a5-c1f0-3b1d-b523-c4703b659f7b.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        216.157.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:20:95:8a:a1:3e:f1:40:f9:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=52e0b4ca-b6d6-4365-aa19-a2ce8b6b4f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:24:1e:3f:50:4a:ca:0b:54:49:1a:e3:c2:86:
                    b9:c0:95:c4:dc:47:c7:b9:df:e7:69:98:27:bb:ae:
                    a1:ec:c7:94:c2:23:99:ce:2c:b6:7e:bf:67:a7:60:
                    4b:14:4c:c2:13:ba:10:3c:f9:18:3d:94:cd:12:c9:
                    6b:54:4a:f3:b6:7d:d3:e4:e3:7f:14:b2:13:0a:c2:
                    e7:cc:44:cd:c5:cd:f6:23:91:07:95:2b:f0:2e:83:
                    f6:96:ee:82:84:07:1c:fc:19:4a:22:95:e0:f2:d2:
                    8a:1c:2a:78:a1:f2:cc:5b:4f:d1:ff:1a:20:2d:62:
                    2b:ac:ab:4e:8f:3d:79:5b:20:a4:0b:27:ab:54:26:
                    e0:b7:b6:d9:a2:1d:e0:fd:f7:38:09:62:46:9b:7c:
                    17:0a:e2:ed:6e:c1:57:fd:3b:3d:6f:d5:a3:5c:e6:
                    9f:47:79:a1:47:9e:ff:8e:46:d7:7d:a8:33:4a:76:
                    8e:cf:85:46:3e:6f:3b:97:d5:8c:96:51:6b:4f:2b:
                    9b:65:2c:7e:e3:c2:64:7a:d5:10:08:0b:60:46:7c:
                    d3:97:43:2a:af:0f:91:52:96:fb:a8:46:1a:70:93:
                    e7:1d:6c:1f:4b:53:33:87:e8:35:c3:22:25:df:e1:
                    b3:6a:d2:fe:93:d7:38:8e:4d:83:2f:31:63:c5:59:
                    36:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:06:10:75:86:FE:F1:34:00:83:26:4C:4A:3D:E0:47:09:AC:7F:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b97501a5-c1f0-3b1d-b523-c4703b659f7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl

            X509v3 Authority Key Identifier:
                keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:f2:d6:ff:57:de:ed:2f:2b:b1:0a:c5:01:f1:63:8f:86:39:
         05:05:1a:15:dc:7a:a0:b2:cc:8d:87:7a:27:fe:ee:a0:db:2c:
         d7:03:e4:27:50:74:16:ee:f6:23:64:10:02:0f:c4:93:98:a4:
         a7:bf:cd:55:c1:74:d4:f8:ba:54:6d:b1:16:66:15:4c:c3:29:
         06:0b:71:fa:a2:e6:64:8f:1a:f2:e4:51:a0:3f:7f:81:3f:9c:
         29:83:7d:d6:a8:0a:8f:31:e6:83:67:4e:94:b4:c3:f9:3f:01:
         3a:28:f8:c3:1c:31:ee:db:91:54:f0:39:dd:b3:e9:73:b1:5d:
         1e:14:6e:d4:bc:44:60:b5:ee:67:43:bc:bb:5e:3f:dc:08:0b:
         88:7f:50:3e:de:1a:2b:0b:57:8f:a0:8c:7f:98:4b:bf:08:0d:
         1a:d3:a6:0c:08:3a:cc:4c:68:7d:a5:c7:bb:a2:6d:5a:1d:c6:
         37:e1:f4:e1:2d:42:c0:db:53:f9:e3:ff:a3:a4:83:92:fc:7b:
         2f:9b:06:1b:10:a4:bf:ab:d9:20:33:6f:c6:31:a3:ef:a8:f5:
         98:89:0a:df:c6:ab:c2:87:6f:33:3e:b8:ad:7a:f6:a8:74:3b:
         85:9d:39:9c:3d:d0:dd:b6:61:85:c3:79:3a:51:5b:71:63:e4:
         17:10:e9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:32:18 2025 by rpki-client