Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/13196252-6950-3796-821b-69a34490e026.roa
File:                     13196252-6950-3796-821b-69a34490e026.roa (raw, json)
Hash identifier:          6is4LPK33i7hh5jvtpIKHNPHADsP7mFbr/XSI/CDk/Y=
Subject key identifier:   C2:B4:0B:C8:82:38:B8:D4:5C:3A:CD:8C:B5:8D:36:28:1F:0E:94:44
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584A3FAADCF486F9CC2BD7496C40
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/13196252-6950-3796-821b-69a34490e026.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     22652
IP address blocks:        216.113.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:dc:f4:86:f9:cc:2b:d7:49:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=f5a552e9-6a80-4170-9ec9-715f101acdcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2e:79:a3:f4:fa:1f:65:04:b1:79:3b:d4:ea:
                    99:ed:86:87:f2:6b:04:ad:43:07:f9:e4:42:51:2c:
                    9a:74:c1:6c:e3:b6:fc:41:1a:6c:a4:2e:33:25:ab:
                    d6:ca:30:31:b9:17:ff:35:37:c6:4c:fc:93:62:7f:
                    92:65:97:e7:de:a3:9e:97:78:4e:c4:bd:99:75:46:
                    74:0e:82:7b:f8:ee:65:c2:b0:1d:6d:bc:7a:84:dd:
                    ff:8a:ba:28:6b:1c:76:f0:1a:8b:f6:f9:a8:92:4f:
                    bb:82:3b:81:43:40:05:f9:33:5c:b6:66:df:81:ba:
                    5a:12:59:df:ae:e1:75:91:84:84:7f:91:c0:9c:a1:
                    af:34:4a:64:ca:f8:6b:a2:a8:33:65:3f:29:05:fa:
                    c6:1f:12:79:f3:10:a3:35:73:97:13:2f:93:2d:2e:
                    a3:42:ca:ee:a8:5b:a0:0c:14:60:da:e5:9e:c3:02:
                    45:82:37:df:f3:af:93:14:c6:76:1e:3b:fa:ea:e1:
                    56:4b:c2:04:55:72:05:41:0b:50:1c:a4:ab:11:11:
                    2a:f5:39:7c:91:98:19:72:90:18:04:63:69:7e:2a:
                    93:de:78:50:25:22:6d:80:21:25:a8:52:a0:c5:ee:
                    5a:b0:54:cc:f1:6e:13:54:40:1b:fc:54:a6:af:f1:
                    dc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B4:0B:C8:82:38:B8:D4:5C:3A:CD:8C:B5:8D:36:28:1F:0E:94:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/13196252-6950-3796-821b-69a34490e026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.113.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:96:34:96:e0:76:70:90:c5:6d:8d:d7:08:93:99:0b:8f:b4:
         64:bc:06:18:7a:59:dc:e3:72:81:27:f9:b2:77:3a:f3:7d:40:
         be:12:28:04:49:e0:82:bc:50:28:23:26:c2:67:f1:f6:b9:1e:
         80:c7:22:2f:f5:07:37:11:40:a2:0d:8d:03:8e:9e:67:06:9d:
         ef:f9:82:c9:48:98:3a:e5:b7:a5:3b:fe:15:0d:d1:70:94:09:
         0e:0f:ec:74:1c:54:fe:09:f8:15:ba:15:fb:d9:39:16:7e:15:
         c0:91:04:14:66:80:24:77:75:c9:48:2d:1c:d1:96:47:1b:7a:
         dd:71:60:4d:2d:57:6a:ac:8f:93:9e:fd:a3:38:7b:e7:f9:44:
         47:bd:f5:ff:82:41:1d:08:e0:62:f3:d6:62:10:54:c2:a3:1c:
         d0:95:87:43:45:60:76:80:f5:a0:fa:cb:c0:36:98:4b:b5:90:
         9e:99:d3:15:cd:02:84:20:58:de:ab:50:51:eb:e3:4e:65:cc:
         64:47:e2:f8:24:dc:f8:bb:12:0a:81:36:8b:98:06:05:2a:a9:
         9c:e2:ee:5a:ea:65:d6:f5:99:ec:11:67:66:bc:31:2a:c3:44:
         48:e4:32:d9:5e:51:02:15:0f:b1:31:08:59:6f:63:a7:42:c6:
         22:4e:67:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:25:44 2025 by rpki-client