Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/0568fe72-18f4-3078-87af-4c1fec2146c9.roa
File:                     0568fe72-18f4-3078-87af-4c1fec2146c9.roa (raw, json)
Hash identifier:          LAckSooixVxCpXhGyQKoDAs8lvHaicaS8HbnRxHJbWQ=
Subject key identifier:   F6:A5:78:96:C9:BB:5B:41:92:37:88:8A:25:B5:14:EE:1E:32:CA:E1
Certificate issuer:       /CN=ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7
Certificate serial:       010D0C9F43285849B149EF09817AE964B4EFC380
Authority key identifier: FE:60:55:27:93:02:FF:AC:40:40:8A:E1:9C:5E:18:5C:52:F0:87:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/0568fe72-18f4-3078-87af-4c1fec2146c9.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     8075
IP address blocks:        216.126.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:49:ef:09:81:7a:e9:64:b4:ef:c3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=dcccae30-d5dd-4243-9b23-3f005baaf678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a5:75:ba:a6:dd:bf:f1:fd:d7:53:72:e9:70:
                    c6:a6:13:e1:b6:65:5e:56:2b:d5:36:20:e3:ac:e9:
                    38:be:d6:92:e3:c0:c2:d8:84:57:50:63:e8:6a:be:
                    83:b1:fb:08:17:78:54:c6:d5:c2:52:4a:b2:a3:d3:
                    c2:ae:60:f7:dd:6c:e1:3d:0b:d5:4d:71:9c:28:81:
                    dd:b5:2e:5e:06:e9:09:b8:4c:9e:20:2c:46:9d:db:
                    45:8c:70:77:c0:ca:e7:73:0e:19:eb:75:da:8c:4b:
                    39:be:6b:4f:9c:10:7a:38:ee:41:c6:d4:0e:e1:8f:
                    a3:db:29:37:42:d4:12:5a:56:ee:2c:3c:87:7c:0f:
                    fa:69:e1:24:b4:c0:59:a5:69:8a:b1:c4:aa:72:46:
                    1f:df:27:76:b0:5d:24:9a:56:31:39:48:0d:41:f7:
                    5b:fc:52:f3:4f:90:54:52:5e:2f:73:bc:b8:fc:ca:
                    2e:06:2a:b7:13:c7:43:22:f8:11:8b:09:35:da:8c:
                    78:3e:19:36:8d:e4:f9:b1:63:25:08:66:53:cf:a5:
                    d9:b2:29:a1:2f:7a:31:29:df:a7:de:f4:bd:d0:fa:
                    bc:96:a1:6a:b1:8a:f4:50:e3:97:df:1d:6e:65:00:
                    b1:12:bc:9e:fc:c1:bd:34:9c:b4:3e:ce:19:f0:6d:
                    70:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A5:78:96:C9:BB:5B:41:92:37:88:8A:25:B5:14:EE:1E:32:CA:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/0568fe72-18f4-3078-87af-4c1fec2146c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.crl

            X509v3 Authority Key Identifier:
                keyid:FE:60:55:27:93:02:FF:AC:40:40:8A:E1:9C:5E:18:5C:52:F0:87:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ad6c7005-f0fe-4411-8531-0a9c5b9b1aa7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:f1:87:2a:c6:14:4c:2d:46:fe:84:bb:a8:d1:11:1b:27:22:
         df:36:d0:7f:33:78:d4:75:5c:cf:2e:64:9d:72:61:a0:25:4a:
         a1:bf:d9:f0:4b:8a:f0:b6:3f:76:ea:b6:c1:d3:05:70:51:77:
         8c:1f:38:6e:b9:1e:e4:05:3c:74:9e:a1:97:6d:76:ba:6c:d1:
         85:3e:5e:91:56:76:b2:28:91:eb:09:57:41:1a:8c:28:f1:7c:
         1b:e4:b6:ac:a2:9e:23:89:7c:c4:1d:d3:f8:6f:2b:4d:7d:07:
         51:44:35:23:88:94:3b:df:e3:9b:42:a6:83:cf:5e:85:f4:fb:
         7f:78:c2:c8:dd:f0:04:1d:e0:05:a6:13:19:59:e2:6c:0c:76:
         9d:c8:41:cc:6f:bf:6d:ba:9c:c4:c4:c3:c4:ba:37:c0:b6:d2:
         f7:ce:26:bf:df:02:97:8e:df:53:11:2e:79:9d:16:6c:50:29:
         68:91:da:b4:1f:51:c4:45:25:d2:75:ff:1d:7b:80:77:a2:70:
         64:8d:99:b4:23:57:09:7b:74:b6:d9:f7:e7:e8:82:0a:44:6e:
         cf:44:cb:96:5b:84:5f:a3:2b:b4:c7:9b:c5:91:af:b9:65:aa:
         5c:e5:c8:15:c3:9a:04:da:98:35:c0:97:3c:c5:08:7f:1c:41:
         64:88:3c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:59:40 2025 by rpki-client