Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/21c05a3b-e062-3862-8df9-24b08a6621aa.roa
File:                     21c05a3b-e062-3862-8df9-24b08a6621aa.roa (raw, json)
Hash identifier:          nioDxW1xHP9/NwD+QFJmBTRuP32JRUAkrYuM4GS8SlA=
Subject key identifier:   04:D8:AC:46:D5:9C:E6:29:57:6C:F5:86:13:5D:7B:92:7D:6C:62:87
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F432858499DBF380F95A15A2803FDD280
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/21c05a3b-e062-3862-8df9-24b08a6621aa.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     11090
IP address blocks:        216.152.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:38:0f:95:a1:5a:28:03:fd:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=ab57b89a-c63b-4d7c-8557-6ad105eaa345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d6:9a:42:a6:3e:f2:6d:19:a4:73:8e:0e:ed:
                    12:7a:0c:0b:6a:7c:88:5d:54:00:f4:f5:d5:72:07:
                    7c:14:15:32:d4:2c:6c:bc:81:21:53:43:c5:a0:f6:
                    28:40:53:a2:f7:48:ca:96:67:9f:71:07:d3:a3:05:
                    09:96:4a:8c:6b:de:58:12:e8:d5:f5:8a:5e:98:8e:
                    7f:e5:c6:43:4a:6f:dc:fe:ef:6b:9b:ac:43:5e:41:
                    1f:c6:93:40:a7:60:fe:d1:50:5e:22:95:d3:99:0f:
                    b0:c1:c0:82:d8:55:ef:7b:1c:ef:2d:85:03:62:e7:
                    3a:ef:7d:df:32:cc:79:2d:f5:0e:0c:2a:72:d7:11:
                    8a:55:40:97:59:e5:12:00:d6:e5:5e:90:8a:66:3c:
                    1b:8b:17:5b:c2:1c:ed:16:52:e8:94:83:53:29:de:
                    6b:b6:9b:43:c9:a9:c4:ce:42:67:43:91:b2:55:82:
                    e4:2b:be:3b:80:a7:ec:51:11:0e:ea:0a:e0:c5:c0:
                    c9:8d:bb:7a:84:eb:81:db:88:7f:0e:8c:53:92:0c:
                    7e:94:62:2f:cf:1f:67:b1:33:be:59:23:4f:6d:95:
                    ad:ea:80:4d:31:3f:cf:b7:31:17:ba:bd:06:32:4f:
                    0f:08:cf:7d:e7:5c:ff:31:68:87:58:2e:c8:79:de:
                    e6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D8:AC:46:D5:9C:E6:29:57:6C:F5:86:13:5D:7B:92:7D:6C:62:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/21c05a3b-e062-3862-8df9-24b08a6621aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.152.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:f5:e2:9b:54:47:4e:f4:e5:71:31:26:10:f1:82:1b:9b:88:
         e4:1d:be:8d:4e:3b:10:eb:54:37:6e:01:52:05:3d:be:69:ac:
         24:d7:21:f8:e8:13:a4:6a:2d:b8:d7:47:de:76:02:68:d2:8b:
         29:d1:70:3b:66:cb:8c:3b:60:37:14:b5:e2:6a:a1:c5:b7:61:
         26:fc:b6:21:b5:6d:b1:83:ca:5b:1b:3f:aa:2a:0e:e4:86:b4:
         d7:ab:fb:b0:4b:c7:0a:7c:d1:b7:10:fb:5d:af:3d:5f:bb:3b:
         d7:c7:b1:87:90:21:b4:44:92:90:af:b6:d6:b6:f5:7b:18:4d:
         b6:d7:99:45:96:59:de:72:b4:28:67:ba:e7:43:f3:fe:ed:50:
         7f:4d:db:8e:05:49:b9:46:32:6e:35:ce:2f:38:79:c9:59:ee:
         c5:d1:75:b5:4a:ae:cf:34:e1:ba:8e:fc:5d:40:0e:dd:8c:92:
         dc:b3:96:c6:d1:79:e5:db:c8:1a:6e:42:19:a0:c7:ea:35:f4:
         7c:1c:6f:2c:d7:51:2a:5d:97:22:e1:a4:68:5e:ba:72:9e:d3:
         96:a8:96:ae:cd:b7:ee:5a:cc:97:c0:b4:f2:da:fc:34:dc:44:
         76:b3:66:81:7f:60:64:b4:1a:6a:38:5e:05:a1:10:44:c8:f4:
         ac:2c:c9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 10:59:53 2025 by rpki-client