Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/36518cfb-6360-3b20-ba26-50ede2a2c5e4.roa
File:                     36518cfb-6360-3b20-ba26-50ede2a2c5e4.roa (raw, json)
Hash identifier:          vGKqAjC5u5p0ybr3Ft1UpzyfcZcWE0oFhb9OAUIn92A=
Subject key identifier:   09:3D:D8:86:CB:AF:DE:92:89:04:DA:C6:BE:FD:4D:52:56:9B:84:C1
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F43285849BDDA1EF122EDE4026CB06D00
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/36518cfb-6360-3b20-ba26-50ede2a2c5e4.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     40249
IP address blocks:        216.211.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:1e:f1:22:ed:e4:02:6c:b0:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=204a8e8c-5a6a-4b93-aa41-36266fa85d48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:00:c3:a1:5a:d1:92:aa:8a:b7:48:2b:ef:94:
                    03:12:48:4c:f0:3f:ee:56:cb:6e:6b:a2:f0:6d:6a:
                    ac:ef:a2:5b:bb:85:62:fa:fd:31:e1:3c:62:d0:14:
                    fc:18:bd:5d:96:4f:a8:3c:29:6b:2a:59:c9:38:e1:
                    ac:34:c4:25:f8:d4:cc:00:dc:4b:b3:38:75:28:01:
                    7f:90:53:3e:d2:5d:d4:da:53:74:05:b5:ea:66:16:
                    50:2e:8b:af:91:09:1c:a6:b7:b6:1d:f2:11:a9:7b:
                    b7:2d:15:21:50:bd:be:99:91:ca:c3:3f:d1:9e:7c:
                    c4:5e:79:25:0a:39:b4:c2:21:a3:57:b7:d3:27:c2:
                    d3:54:4e:fe:e6:38:a3:78:de:ff:9f:b1:35:de:c3:
                    bf:66:ba:aa:5b:70:60:13:3c:7e:b4:ec:10:9c:39:
                    ed:dd:91:f4:79:75:5d:dc:18:aa:af:c4:91:4e:c0:
                    b9:24:38:a4:e6:8d:0d:2c:a3:f2:6f:72:cf:35:4f:
                    0d:09:56:eb:ce:d7:a5:4d:54:83:ab:29:2c:87:6b:
                    2f:0e:0a:0c:b4:1b:1d:ee:b8:34:c9:9d:68:73:26:
                    01:13:65:ab:f0:6c:80:5d:e6:ca:aa:0e:e5:b0:e3:
                    62:1c:51:9a:4b:aa:e2:e3:5a:0f:a7:e4:64:5c:5d:
                    07:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3D:D8:86:CB:AF:DE:92:89:04:DA:C6:BE:FD:4D:52:56:9B:84:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/36518cfb-6360-3b20-ba26-50ede2a2c5e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.211.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:32:93:27:c6:73:90:ab:fa:c2:af:b1:91:95:69:94:f6:72:
         4b:18:c9:a0:03:40:42:c8:18:12:81:e2:c5:6b:31:f4:f3:a2:
         9b:d1:3c:e5:16:16:d1:b6:f1:09:5f:76:48:32:2f:94:97:7a:
         0e:f6:df:9e:c6:81:93:f8:f9:db:e6:f2:30:4e:40:53:56:57:
         a7:f1:de:60:0d:a1:da:18:d1:46:94:2d:ef:dd:52:3a:02:d2:
         0f:f3:95:2a:aa:2e:60:42:b1:d1:ae:cc:87:84:df:a9:ab:db:
         2b:7e:dc:4a:17:f5:83:2e:f0:d9:0e:89:12:40:97:c4:ef:ca:
         14:73:3c:e5:be:05:48:e9:c8:fc:df:b0:f7:6d:78:e1:4e:11:
         ee:c0:a1:15:82:39:19:fd:01:85:64:48:e1:17:5a:90:f5:c8:
         ed:f6:2e:13:55:b5:aa:fe:7d:96:4e:e0:e7:5f:a6:af:fd:d6:
         f0:b3:03:a4:6b:d3:89:6d:16:58:4c:fe:10:4a:05:ec:14:82:
         63:e1:90:4a:bd:ea:81:f7:cc:ea:c4:ba:b8:4d:97:57:55:5a:
         87:0a:7c:d0:32:b4:85:31:1b:de:43:1b:11:83:19:72:04:32:
         4a:83:45:e7:47:6d:e5:d2:77:25:f8:0c:cf:24:0a:3b:c8:3b:
         5f:da:23:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:46:29 2025 by rpki-client