Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/3cbf5910-3564-3cf8-95f2-8a44eb207bcb.roa
File:                     3cbf5910-3564-3cf8-95f2-8a44eb207bcb.roa (raw, json)
Hash identifier:          LaqYjw4je5yAAQk7PzTCauFTy9z7oxAGFyRSTwsoBI0=
Subject key identifier:   E7:2A:EE:8D:87:4B:3A:A1:BB:E3:B2:D1:36:DF:D7:C3:E5:8A:91:ED
Certificate issuer:       /CN=f5d93400-0a6f-4938-9925-856c6ace39df
Certificate serial:       010D0C9F4328584A3A158C47E1F9C01B64ABBA30
Authority key identifier: AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/3cbf5910-3564-3cf8-95f2-8a44eb207bcb.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     54334
IP address blocks:        216.114.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:8c:47:e1:f9:c0:1b:64:ab:ba:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5d93400-0a6f-4938-9925-856c6ace39df
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=b7216746-d1ca-4997-be37-51f2381fa31c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d8:46:88:1a:27:f4:a4:77:86:40:78:75:f0:
                    38:28:cb:89:1a:90:c9:f6:34:3a:11:39:6c:cf:57:
                    eb:07:2f:1d:64:0b:a5:c6:1f:0b:d4:44:99:a7:fe:
                    12:bd:f2:e5:21:80:1c:2e:76:0e:51:bd:d6:67:1f:
                    4d:f9:b8:ae:07:20:90:5c:87:74:73:7e:df:08:16:
                    27:7d:6a:a3:fb:e8:23:15:71:a5:a1:76:98:53:ca:
                    f4:85:aa:fe:75:ef:64:76:00:9b:99:5a:36:ba:1d:
                    5a:d5:75:db:04:0d:fe:78:84:68:cf:ec:3c:6d:6e:
                    03:6a:7e:f5:0c:f4:98:79:15:01:ab:71:8c:a3:c9:
                    7e:8d:ef:3e:1f:19:12:e0:f8:f6:fa:8c:73:a9:f6:
                    96:b3:50:8e:53:bd:40:c8:b1:30:40:be:b2:71:c7:
                    45:8c:67:cb:93:6f:36:81:ae:c2:03:01:e8:7c:5b:
                    26:22:67:fa:e2:4d:0f:fe:fb:98:a9:b5:35:ac:ed:
                    7b:cb:da:f4:cf:cb:f7:44:fd:53:ea:02:a0:fa:16:
                    96:5a:10:75:04:5f:44:75:90:09:03:f4:69:39:22:
                    09:a7:4b:be:6b:ef:93:f0:6d:8b:fb:dd:0d:71:73:
                    3f:0e:cc:58:50:dd:2c:97:3b:aa:6a:2d:9e:0f:ed:
                    2d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2A:EE:8D:87:4B:3A:A1:BB:E3:B2:D1:36:DF:D7:C3:E5:8A:91:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/3cbf5910-3564-3cf8-95f2-8a44eb207bcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df/f5d93400-0a6f-4938-9925-856c6ace39df.crl

            X509v3 Authority Key Identifier:
                keyid:AC:0F:82:9B:44:16:0B:3D:B0:3F:95:B6:82:00:EE:15:AC:B3:1F:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f5d93400-0a6f-4938-9925-856c6ace39df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.114.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:66:94:0c:5e:f7:41:52:76:6f:40:ac:ff:4d:6f:b1:50:60:
         03:df:1c:e2:e2:58:1f:e9:70:0e:10:d0:03:4c:13:f0:8f:50:
         76:f4:c1:3a:57:4e:58:9b:8b:22:c9:9b:d7:17:bc:f4:a6:2c:
         a2:c8:ca:a0:cc:fc:1d:26:5c:e5:9f:72:15:84:e2:bf:ad:50:
         a2:f1:22:a0:96:65:13:f2:4a:71:8e:d3:3d:46:cc:bc:30:d5:
         3d:bb:b6:3f:dc:6c:5e:cc:9c:fe:3c:5e:a8:b5:95:cd:1e:a4:
         4b:34:b2:15:50:53:42:80:e8:13:68:43:db:71:72:67:3d:57:
         bc:e8:bc:f2:6c:40:b2:2b:a6:fd:62:43:50:a1:8a:7a:f9:0a:
         21:3e:65:bd:0a:e1:db:07:3e:0e:8f:91:3c:7a:88:d7:46:42:
         8c:19:1d:83:40:5e:5f:9f:29:a0:5c:a1:40:24:11:e7:be:e4:
         13:f4:85:53:72:9e:de:ee:01:8a:8f:90:3a:fc:75:09:ae:c0:
         df:74:a2:83:5c:33:21:37:f3:13:d0:a8:57:73:a4:ae:d3:8c:
         c5:b6:19:e0:ef:bf:f1:49:9c:0f:cc:31:0c:77:2d:d4:c0:67:
         01:fc:42:fa:83:28:d6:fd:36:fe:12:5b:9b:aa:81:66:f3:14:
         07:59:6b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 03:12:15 2025 by rpki-client