Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/97b0cb1b-3f05-3820-87dc-f224a9665205.roa
File:                     97b0cb1b-3f05-3820-87dc-f224a9665205.roa (raw, json)
Hash identifier:          KnssU6SsLIP+EY6tmUxfxiwdha9CMktZiHqyFwQWFds=
Subject key identifier:   F0:A8:51:CE:9D:33:C3:67:15:8E:D1:22:66:61:6D:28:50:76:92:9F
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584A374AD1718035623F9D9D76D0
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/97b0cb1b-3f05-3820-87dc-f224a9665205.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     109
IP address blocks:        216.128.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:d1:71:80:35:62:3f:9d:9d:76:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=4abf4e7f-bd6a-49a3-b7bb-01eb92b11710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:59:e5:61:98:7a:37:cb:6a:67:24:85:6e:a7:
                    de:6e:ea:85:54:38:8c:96:05:0c:73:ee:69:58:25:
                    d5:14:8a:4a:cd:7e:7f:20:ce:d1:c4:56:b6:b3:0c:
                    86:a5:85:83:df:37:2e:97:5e:ff:2b:5d:2b:98:28:
                    a1:cc:71:f3:6d:43:db:01:f1:af:a0:8f:18:7d:07:
                    7d:63:de:60:63:52:b9:53:74:84:b9:00:2f:5b:7c:
                    79:a9:cc:a8:4a:4e:ce:5f:a9:26:55:e7:7a:9d:c6:
                    4a:93:b3:4c:d5:cb:29:46:95:bd:fb:0c:94:bd:4b:
                    2a:31:f7:7c:f1:87:bd:b4:52:6b:8a:fe:34:3a:4d:
                    5a:57:4e:71:5f:e0:b1:6f:d6:53:83:15:8a:78:cc:
                    b1:3a:41:b8:64:2e:a6:31:ac:28:e1:19:fe:59:38:
                    f1:e1:20:2f:88:5f:4e:d7:1f:5f:9a:5b:51:8d:91:
                    2d:9f:6e:34:08:2d:e6:46:73:a7:ea:4e:01:1b:b6:
                    76:dc:19:51:4c:77:5c:63:f5:09:3b:a1:5d:64:6e:
                    9b:61:37:22:9f:ea:95:8c:89:0b:7d:12:69:ca:74:
                    3a:8d:cc:a5:92:b0:40:64:f7:da:94:ad:ad:2e:a2:
                    cf:a0:e9:51:3e:84:57:af:6d:04:c0:aa:19:0c:dd:
                    ff:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A8:51:CE:9D:33:C3:67:15:8E:D1:22:66:61:6D:28:50:76:92:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/97b0cb1b-3f05-3820-87dc-f224a9665205.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.128.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:f0:34:74:19:b2:18:12:ae:6c:af:e0:59:ee:d0:9c:1e:66:
         a6:1e:09:16:ba:1c:0d:fc:17:08:28:8d:cd:93:1d:28:a6:5f:
         30:25:b8:7b:9b:c1:2f:4f:7f:39:5e:ab:a4:e7:ee:71:de:e9:
         2c:62:bf:e5:18:cf:2a:9a:1e:fa:1a:35:e2:62:91:91:d8:78:
         cd:e0:09:be:9c:ea:6e:15:cc:8f:5a:19:fe:80:3d:12:d9:c5:
         ac:9a:5b:7b:35:1d:1c:64:45:ce:46:3a:bf:44:d4:5d:a3:be:
         ca:2c:7f:b0:5b:fa:e7:3d:7c:b6:34:76:a3:d6:77:fb:9b:1a:
         63:6a:41:b4:ed:59:89:b8:11:fe:56:bb:fa:ce:a0:ab:d9:10:
         91:92:b9:aa:87:d1:74:74:c1:8d:a0:ca:3d:68:0a:bf:43:ce:
         ef:5f:bb:2f:a3:db:c5:cd:16:1b:9f:62:0d:3b:15:26:02:2b:
         52:37:b2:c1:d6:41:02:8b:d0:b5:c4:34:33:df:27:10:96:ee:
         f5:01:55:6b:8f:c3:3a:54:2f:92:7e:3d:79:fe:7b:25:17:32:
         a9:1a:f8:47:eb:b0:2a:b0:28:6e:20:4c:7b:63:6a:02:84:00:
         c3:58:68:09:a0:bf:d0:fa:25:28:41:b8:0a:ee:e8:2d:f0:58:
         03:82:a4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 02:27:20 2025 by rpki-client