Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/bdf5ebbd-7530-3578-b5ab-e9e6e864959e.roa
File:                     bdf5ebbd-7530-3578-b5ab-e9e6e864959e.roa (raw, json)
Hash identifier:          YaQEPWoXV/IJnZ170dLuve19CVkz27zX6FdKYhhh+Yg=
Subject key identifier:   A4:AC:94:F1:56:06:66:9C:E3:8F:E0:70:10:27:E5:C5:9F:95:02:B0
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F43285849E7BA85839A21969742017DE0
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/bdf5ebbd-7530-3578-b5ab-e9e6e864959e.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     7265
IP address blocks:        216.47.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:85:83:9a:21:96:97:42:01:7d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=2d6bfd52-0b77-4173-aaca-c0b75b6389d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:23:96:a7:c5:c4:c3:72:dc:59:ca:a9:d4:4c:
                    34:c0:57:dd:e8:50:56:99:1c:c2:82:ca:8a:04:d4:
                    12:97:11:50:56:9a:18:60:1d:27:a4:8b:92:62:a1:
                    c5:ec:0d:28:22:f2:a6:59:8b:c4:0e:0d:a4:10:d0:
                    aa:b2:cd:98:74:f9:a5:cf:ea:91:2c:d8:6b:64:19:
                    65:3f:39:d6:56:10:9c:19:7e:3d:83:8d:86:cf:86:
                    f6:23:34:03:71:f6:2f:ce:f1:23:80:e6:8e:af:6b:
                    c6:33:36:15:1b:2d:85:da:26:de:34:5d:a1:05:73:
                    6c:f5:1a:6b:9e:d0:35:50:3d:30:d9:e3:9a:3d:e6:
                    49:10:0f:d0:ed:a8:b1:63:24:89:b2:76:59:09:52:
                    74:e3:6e:7c:65:fa:ec:c4:ab:50:57:bc:d0:32:58:
                    8d:b3:c8:02:57:69:f6:c1:38:fd:0e:b7:58:6a:d7:
                    21:43:e7:f9:c0:f8:af:29:8b:ce:7d:1b:12:54:f9:
                    ed:28:34:4b:e8:3d:6f:22:19:42:a3:6c:bb:66:0d:
                    0d:63:19:5e:4f:c6:46:ec:26:74:48:bf:5e:8e:bc:
                    a7:aa:cd:fa:a0:73:7a:23:10:29:27:33:21:9d:69:
                    34:54:26:f4:ee:1a:08:9c:50:35:00:36:d5:06:a4:
                    66:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:AC:94:F1:56:06:66:9C:E3:8F:E0:70:10:27:E5:C5:9F:95:02:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/bdf5ebbd-7530-3578-b5ab-e9e6e864959e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.47.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:f7:1a:dc:e7:8e:b8:38:5e:c5:4f:41:80:7e:0e:46:02:d2:
         60:83:7b:88:3b:d8:02:9e:59:b5:bb:87:25:bd:4d:50:4e:6f:
         28:b8:3d:b4:78:fc:86:a6:c3:dd:58:fb:6c:12:6f:55:f1:7f:
         1e:84:65:ef:7c:ba:8c:53:4b:d7:ca:65:05:e5:ce:5c:74:26:
         bc:eb:24:ed:2d:31:fd:b6:c3:9b:c2:49:11:de:8b:cd:33:39:
         94:94:a1:bb:60:0b:b6:3d:8e:bd:9d:91:fb:c1:ba:88:97:a0:
         d0:fe:c5:2f:b3:e5:23:46:30:a8:68:8a:f2:90:22:b7:b1:05:
         26:30:92:7a:35:82:64:3e:a7:b3:5f:0c:09:f0:13:d6:79:d0:
         5d:dd:53:e6:19:53:c2:f7:21:c5:09:ee:2a:d2:ee:7c:22:7e:
         e1:58:8d:49:e8:4f:0d:91:2e:41:88:ba:c6:fc:1d:fd:17:8a:
         ad:46:bc:0e:77:dc:40:7f:2a:0b:4d:0e:d5:36:b7:54:2a:f0:
         ed:ce:20:3a:87:3e:e7:eb:0c:90:42:44:10:91:80:10:6c:9e:
         e3:14:1b:4e:0f:72:99:1a:5c:9e:e2:f2:40:ed:d8:5f:ad:31:
         94:42:21:de:13:38:9d:f9:da:5c:3d:60:54:77:37:af:a3:03:
         6b:3c:26:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 02:22:36 2025 by rpki-client