Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/d0cfdd6f-acf5-3016-a8d4-da4ef63a98c7.roa
File:                     d0cfdd6f-acf5-3016-a8d4-da4ef63a98c7.roa (raw, json)
Hash identifier:          p+anYoGVG5PhHdxQcglBn4w718f6evOHVc+zDjLV1UY=
Subject key identifier:   EF:5A:24:98:CB:5B:89:E8:01:FE:B6:4A:C0:6C:EA:2C:E1:7C:FD:E8
Certificate issuer:       /CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
Certificate serial:       010D0C9F43285849C9FB5356577B3BB6C88F3200
Authority key identifier: D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/d0cfdd6f-acf5-3016-a8d4-da4ef63a98c7.roa
Signing time:             Thu 08 May 2025 21:17:42 +0000
ROA not before:           Thu 08 May 2025 21:17:42 +0000
ROA not after:            Wed 06 Aug 2025 21:17:42 +0000
asID:                     20326
IP address blocks:        216.40.92.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:fb:53:56:57:7b:3b:b6:c8:8f:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
        Validity
            Not Before: May  8 21:17:42 2025 GMT
            Not After : Aug  6 21:17:42 2025 GMT
        Subject: CN=a738f109-c98f-4e26-bd53-f40f16858397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:39:43:fa:92:5a:0a:b1:40:aa:96:0f:0c:e5:
                    8f:ef:3f:cb:72:22:55:6b:b5:9f:4d:47:72:7b:ba:
                    45:0c:f2:ee:4b:cc:68:6b:af:43:7b:e1:1a:db:84:
                    85:cd:bf:ff:3a:54:05:93:4c:d0:22:40:a2:3f:17:
                    2d:45:e3:ca:9c:bc:e7:0f:43:95:ac:57:2d:d6:bf:
                    06:37:e9:3e:bc:86:d5:7f:d7:8e:73:b4:9f:cc:15:
                    30:b8:86:25:49:f2:5d:75:52:15:59:66:b4:20:8d:
                    47:80:01:48:66:4c:18:15:0e:ce:aa:29:87:0d:e7:
                    9f:6a:ad:49:cf:ef:64:6e:20:b0:c9:43:aa:a8:34:
                    ca:00:19:15:5a:a2:4b:90:82:ec:24:cb:d6:53:2d:
                    7a:d6:e7:7d:6d:c8:6c:d9:a5:29:d4:11:3c:5b:73:
                    83:59:c7:55:34:93:0b:0f:e2:4b:e1:c4:7a:1a:f9:
                    6e:d7:b1:bd:27:a0:e4:78:85:08:76:ef:d9:3c:4c:
                    dd:ff:f8:da:38:16:05:43:bf:38:b2:8e:f0:20:77:
                    be:6c:fd:3a:da:a0:48:87:6a:a8:d7:13:96:eb:10:
                    ef:25:d3:da:ad:70:90:71:19:c8:da:49:d9:8f:c4:
                    26:5c:de:48:d6:78:49:3a:bc:b6:51:5c:6e:47:ee:
                    fd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5A:24:98:CB:5B:89:E8:01:FE:B6:4A:C0:6C:EA:2C:E1:7C:FD:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/d0cfdd6f-acf5-3016-a8d4-da4ef63a98c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl

            X509v3 Authority Key Identifier:
                keyid:D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.40.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:eb:f8:16:79:7b:7b:3e:d7:6a:21:bd:08:6a:bb:7f:27:92:
         79:42:92:7f:8f:df:39:8a:45:ad:8a:16:3c:91:ba:c2:00:03:
         67:2c:b6:74:17:cf:ef:d6:a6:f3:2b:91:6b:ee:b3:f1:77:59:
         75:1c:c4:20:fe:de:f8:8c:02:76:6b:80:58:3c:95:2d:64:42:
         b8:39:7f:3e:f6:89:73:fe:63:96:4c:f6:d0:67:45:ff:f4:93:
         2f:3c:2c:fe:4f:87:41:23:af:6f:3e:16:51:5f:92:67:1a:d9:
         c4:4e:3c:09:ec:fc:46:a3:f9:c5:8d:45:c2:b5:ec:91:7a:52:
         99:3c:48:ed:f9:1e:59:04:47:8e:a3:15:7b:61:9d:5f:02:63:
         c3:23:76:92:31:bb:50:71:3e:d3:63:d9:6c:0a:8d:f9:61:7d:
         bb:aa:67:ef:4b:a0:55:6b:b8:a3:22:a0:5f:2c:8a:92:55:10:
         dc:f3:d6:59:29:ac:26:78:6d:4f:03:46:5a:4f:36:36:e6:c7:
         a5:f7:a4:36:b9:14:3d:2f:2f:85:34:13:b2:a3:fd:50:89:08:
         97:b3:e7:a0:51:a4:f3:17:ff:4f:5c:b6:e0:ec:2a:3f:a2:01:
         2e:6f:2b:f7:7b:97:7e:b9:4d:a3:71:f3:98:24:0f:db:f0:6f:
         4a:39:4b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:29:51 2025 by rpki-client