Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/01f716a6-1832-335e-817e-084a29d16e09.roa
File:                     01f716a6-1832-335e-817e-084a29d16e09.roa (raw, json)
Hash identifier:          ojM6dN/RVXZZANjdMzvN8kSLK8G3Nw4s+cR2buDqocE=
Subject key identifier:   85:30:05:E9:B7:8A:6B:B3:10:01:91:EB:D6:1E:88:C3:70:4E:FF:DE
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285849B14A087229B32A42B517C680
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/01f716a6-1832-335e-817e-084a29d16e09.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     13692
IP address blocks:        216.110.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:08:72:29:b3:2a:42:b5:17:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=9ece7cdf-101c-4fcc-a6ec-a2a2ad5b7e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:af:dc:d2:c6:b5:ad:c8:a8:55:69:2f:b0:ef:
                    a2:f1:f5:c9:a5:a8:8c:32:90:8a:52:a7:35:7a:e6:
                    c9:80:f8:44:55:31:bf:4b:cd:a1:33:5f:4e:3f:aa:
                    0f:61:c4:bc:97:ec:ec:c2:4f:bb:1b:ff:fd:3b:fb:
                    f6:c3:89:82:df:06:5c:98:9d:3f:ab:55:96:41:c1:
                    66:e3:34:8b:fe:cf:32:81:b1:e4:d8:06:29:dd:2f:
                    34:cf:4c:10:c9:3e:85:13:ab:f7:f1:74:6d:d5:22:
                    02:ec:21:5b:35:51:14:f2:77:b0:7c:8c:e4:db:d1:
                    e5:f0:71:1b:cd:d7:ee:71:d7:15:96:50:5c:03:40:
                    a2:48:a3:67:60:c4:31:fb:bf:c7:ca:c3:61:4c:50:
                    3b:1a:7f:83:18:56:d3:52:f3:91:b7:20:65:f9:97:
                    1a:1f:70:94:43:e0:b7:72:f8:d8:51:d7:36:4d:d7:
                    ca:cb:46:e1:7f:b3:26:97:74:37:35:ad:86:dd:06:
                    fd:85:9e:b2:90:3a:f3:87:78:0f:cf:9a:9c:f8:92:
                    8d:f8:81:b6:31:9f:05:a3:46:6b:c7:ae:32:af:9c:
                    e9:5b:68:b7:97:2b:91:03:16:5d:b9:b1:8b:61:52:
                    74:49:b9:cf:3e:44:5b:8d:6b:18:f5:c6:27:a0:e9:
                    77:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:30:05:E9:B7:8A:6B:B3:10:01:91:EB:D6:1E:88:C3:70:4E:FF:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/01f716a6-1832-335e-817e-084a29d16e09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:84:e7:28:d0:23:05:82:c5:5c:22:ac:ef:c0:32:2f:0a:8d:
         be:71:f5:3c:b3:8b:1d:3a:d2:38:26:52:fd:65:8a:65:72:6d:
         c9:78:8c:e6:23:54:83:25:c4:c6:24:c0:30:12:96:f0:d7:a5:
         84:41:ee:32:24:86:57:9e:72:c5:bc:7d:83:f7:bf:6a:7c:b9:
         d7:01:e9:d8:05:8c:e6:75:2a:89:54:b9:58:ed:78:dd:b2:52:
         e5:da:11:eb:d6:e0:cd:69:4d:f1:62:f3:de:d7:41:d9:03:66:
         04:13:f8:34:fc:79:c9:3e:7b:d5:bf:b1:21:0b:1d:1e:85:f1:
         dd:94:35:64:26:f7:f7:6d:ee:fd:66:2a:8b:74:f8:f9:37:2a:
         f6:88:aa:5e:72:de:9a:26:95:82:6f:45:22:8a:27:5d:37:7e:
         31:88:99:ca:42:4c:06:7a:68:e3:52:83:e4:59:ac:e9:42:2e:
         2b:d1:a8:34:cd:14:75:1c:ca:61:14:be:37:fc:d5:78:82:af:
         8b:6c:2b:78:4c:70:24:9f:3b:82:3d:50:10:74:11:54:08:1d:
         2a:7d:e4:cc:3e:c2:68:fd:ae:cb:6b:70:f1:f0:fe:86:bf:f5:
         9b:1d:0e:ec:cb:f4:df:af:03:ab:0a:12:52:8f:4f:da:43:a8:
         c2:c4:b6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:33:36 2025 by rpki-client