Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/9bd9ff1f-87f9-3f00-bb6b-1f8e248b0b02.roa
File:                     9bd9ff1f-87f9-3f00-bb6b-1f8e248b0b02.roa (raw, json)
Hash identifier:          dhLMMwysDAQWkpvlbmDocN7UrCuVcAD7nvQc3S7BkdQ=
Subject key identifier:   15:77:8A:94:3B:C3:32:93:5A:89:06:CD:3F:81:7C:3D:F8:3D:02:FB
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F43285849FE0FF1094F43CFDDE3318B80
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/9bd9ff1f-87f9-3f00-bb6b-1f8e248b0b02.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     11426
IP address blocks:        216.158.207.0/24 maxlen: 24
                          216.158.211.0/24 maxlen: 24
                          216.158.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:f1:09:4f:43:cf:dd:e3:31:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=f6d7fe93-5dc6-4fb4-b390-49cf2f3bcb77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:63:b2:aa:2d:e6:99:47:97:74:b9:b2:3e:ab:
                    62:44:1b:db:80:af:f0:f4:e5:34:0b:56:ad:f9:04:
                    02:a5:1d:d4:0c:e5:ab:19:f4:e5:59:8d:71:da:e9:
                    43:86:12:be:d3:36:5f:c5:eb:8a:76:bb:a4:44:88:
                    87:fd:89:1d:2a:25:9d:d8:5e:72:18:89:43:58:25:
                    22:f0:93:20:2d:7c:ea:14:40:d9:54:48:86:51:a0:
                    09:59:f3:ea:a7:ac:6f:ef:5e:ef:13:87:0b:3b:b7:
                    98:bc:16:05:57:1e:c6:40:53:53:0f:f1:5b:58:0a:
                    21:10:96:39:f5:23:94:85:48:9b:b6:e8:00:ff:fd:
                    c7:a8:56:23:23:93:39:c2:50:cd:8f:d9:b0:47:b3:
                    eb:f6:e6:98:b5:99:a0:8e:1e:d4:77:92:8d:d9:ef:
                    70:75:f7:bb:f1:d3:f1:ea:cf:3c:c0:33:20:94:ba:
                    8d:32:17:62:2c:5b:c1:81:6f:24:ab:f7:72:24:ba:
                    c2:f6:cd:6c:9c:58:5d:ef:a5:c6:ac:a8:c9:5c:28:
                    74:00:72:95:37:44:1c:27:f9:93:db:a9:86:7f:ef:
                    9e:79:90:ba:f5:5f:55:3b:29:a1:80:ae:e6:a1:85:
                    e8:30:6e:c5:a4:e8:24:1d:87:05:1d:81:6c:17:2e:
                    66:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:77:8A:94:3B:C3:32:93:5A:89:06:CD:3F:81:7C:3D:F8:3D:02:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/9bd9ff1f-87f9-3f00-bb6b-1f8e248b0b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.158.207.0/24
                  216.158.211.0/24
                  216.158.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e6:1a:b6:2d:be:8d:c3:89:aa:0f:5b:dc:08:63:22:14:03:
         27:40:c0:79:1d:dd:7d:a5:2a:81:7a:14:bc:8a:d9:7f:fc:04:
         f2:0a:32:1b:0f:f2:ce:36:19:ab:d9:b7:a5:97:2c:53:86:13:
         be:2f:21:fe:12:df:2d:da:26:89:dc:e9:32:57:d1:c2:78:d4:
         bb:1f:37:61:7b:e9:39:b4:97:29:03:b4:ad:e2:b3:3e:2d:4b:
         98:03:a2:b3:84:a3:4b:94:17:9e:1a:3b:63:15:05:9b:8f:81:
         dd:56:39:8d:89:c0:85:41:68:7b:dd:9f:46:9a:6a:b9:97:dd:
         d7:ab:f6:ed:08:83:cd:67:14:fd:97:15:04:d9:d3:ad:30:56:
         a3:ca:26:9b:aa:a1:99:39:ad:ab:c7:ef:5e:b1:ff:2d:dc:cb:
         8d:12:3f:aa:5c:c1:48:90:87:40:2b:7b:49:5a:f8:1a:b5:41:
         fb:2f:fb:b1:4d:4a:37:dd:89:f2:88:4f:b1:fb:cb:7e:4d:22:
         89:0f:34:03:19:6b:ad:b1:a8:0c:0d:7d:26:7b:00:15:cb:c2:
         19:09:f6:4e:0f:bd:b5:a2:5f:1c:3a:ec:f1:bc:7e:96:3d:24:
         1e:fb:ec:0e:d1:41:56:09:80:41:90:0d:17:e9:f4:8f:e8:5c:
         19:8b:6c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:29:38 2025 by rpki-client