Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/80b27743-32d4-3b53-bf56-8021fd482c60.roa
File:                     80b27743-32d4-3b53-bf56-8021fd482c60.roa (raw, json)
Hash identifier:          VVXGXevpShcOdUkaF4eSReFWBb3NdoQcjDof1C51sUs=
Subject key identifier:   D4:1F:96:E6:9E:9B:BC:3F:0B:DB:B6:66:F0:EE:80:65:75:07:94:F5
Certificate issuer:       /CN=7daddf1f-a775-44aa-b3ca-3520f73993ed
Certificate serial:       010D0C9F4328584A1B6007632D60A0A921B47300
Authority key identifier: 32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/80b27743-32d4-3b53-bf56-8021fd482c60.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     26380
IP address blocks:        216.119.208.0/22 maxlen: 22
                          216.119.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:60:07:63:2d:60:a0:a9:21:b4:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7daddf1f-a775-44aa-b3ca-3520f73993ed
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=071357af-904a-4351-b88a-a96ec13363e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ba:bd:f1:38:54:ed:6a:1f:61:51:f1:45:b4:
                    e1:e0:e2:fd:29:85:cc:23:ef:82:09:b7:35:87:01:
                    bd:a1:35:83:dd:23:71:3d:85:b8:1f:42:97:b0:5e:
                    8b:b5:52:e4:8a:78:12:95:34:0a:4c:ec:23:84:1e:
                    24:cc:9b:15:fd:de:9c:f9:ae:fd:96:de:f2:16:10:
                    3c:3f:81:7d:e3:ca:5d:13:39:5e:a7:07:c2:6a:90:
                    ce:c8:f1:15:d0:02:fe:61:bf:a5:6b:07:95:96:77:
                    45:9f:7c:61:a1:df:12:31:06:09:32:75:95:bc:57:
                    4f:e2:23:a4:5c:35:b5:b2:61:0e:e0:55:01:d5:31:
                    da:a5:4c:d7:d2:b1:53:44:5d:ea:ce:fa:9f:0a:47:
                    74:8f:ad:7e:cd:54:64:fc:21:77:23:51:53:52:a6:
                    44:5a:e4:7f:a8:5e:9b:a7:d2:ff:66:3d:a1:af:19:
                    76:69:bf:a3:e1:22:c7:25:4a:c3:14:84:06:84:88:
                    8a:b6:a5:68:10:5a:7b:48:fb:53:6f:43:05:2f:e9:
                    50:57:4e:23:d3:6d:9f:7c:fb:10:b0:52:d9:08:74:
                    7e:35:b0:bd:d5:20:85:7b:e3:f5:54:57:a8:8e:77:
                    2c:23:bf:7b:20:7d:67:b4:2f:04:1f:26:70:2a:15:
                    49:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:1F:96:E6:9E:9B:BC:3F:0B:DB:B6:66:F0:EE:80:65:75:07:94:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/80b27743-32d4-3b53-bf56-8021fd482c60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.crl

            X509v3 Authority Key Identifier:
                keyid:32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.119.208.0/22
                  216.119.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:61:3c:62:46:e0:cb:9e:86:6e:fe:03:b4:7a:eb:bc:1e:27:
         2c:7c:71:b5:a1:c8:78:33:7e:6f:0e:46:06:d6:f7:45:97:87:
         97:6a:5b:26:2b:8f:61:a6:89:63:9b:70:14:14:a2:ab:87:e4:
         0b:1f:4e:d6:3e:da:0c:88:cd:51:aa:96:4b:bf:61:7e:7f:eb:
         fe:b0:86:62:48:dd:eb:08:8b:84:c8:e1:4f:a7:48:2e:12:b2:
         e8:88:ee:dd:8b:8e:87:38:7f:d8:49:04:c3:75:5e:cf:a4:6a:
         1f:42:04:cd:58:e7:d7:b2:48:08:54:a1:09:d7:bb:18:77:32:
         91:9e:c0:b5:96:27:c0:34:a9:d1:bf:18:45:28:63:0f:cd:0e:
         b8:20:fd:ca:9b:c3:ae:6b:97:61:ca:e5:cd:d1:c7:11:45:e1:
         8c:22:0e:81:e2:b0:e7:7f:9d:03:17:37:1b:f8:ac:ff:3e:e6:
         83:4e:3a:73:d9:3a:3a:c5:2d:09:e6:0f:ff:43:73:1c:0d:2c:
         2b:ed:33:6c:e6:90:0a:69:9c:77:c5:fe:08:f5:70:38:bf:4a:
         20:a5:4e:5e:c6:ba:82:71:27:de:ae:be:3c:16:d2:02:26:67:
         c7:07:a7:2b:0f:a3:d7:03:7d:61:6b:f5:56:c9:1a:52:12:1d:
         2b:d1:57:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:33:17 2025 by rpki-client