Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/b4ee358d-dc9f-356d-9971-447892001415.roa
File:                     b4ee358d-dc9f-356d-9971-447892001415.roa (raw, json)
Hash identifier:          iHnMh3N+3BeGTiopu9DVCdFLwfiXsKXlRWe1E18aIeQ=
Subject key identifier:   EB:D1:15:80:A8:32:6C:AB:C2:80:45:AB:60:EB:27:A6:C0:88:A6:26
Certificate issuer:       /CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
Certificate serial:       010D0C9F43285849C6DF146597BCC51F47CB5740
Authority key identifier: 74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/b4ee358d-dc9f-356d-9971-447892001415.roa
Signing time:             Wed 07 May 2025 18:33:21 +0000
ROA not before:           Wed 07 May 2025 18:33:21 +0000
ROA not after:            Tue 05 Aug 2025 18:33:21 +0000
asID:                     36549
IP address blocks:        208.82.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c6:df:14:65:97:bc:c5:1f:47:cb:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=259fe7c8-f7fa-4637-a746-873dbeadbf3c
        Validity
            Not Before: May  7 18:33:21 2025 GMT
            Not After : Aug  5 18:33:21 2025 GMT
        Subject: CN=3449ed2c-97d2-4280-ad1f-148db4426705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d8:fc:ce:6b:19:3f:eb:be:78:05:fe:e0:bd:
                    6f:bd:a7:08:73:cd:0b:1e:10:15:d0:db:82:4a:f6:
                    be:df:a5:f9:c4:87:ae:49:76:cd:d3:1a:e9:8d:82:
                    11:86:e3:20:d5:d6:0d:58:53:1f:72:77:12:d8:5c:
                    2d:d3:8b:50:11:b7:31:b1:d2:8d:80:c8:8e:d7:e1:
                    7e:01:99:1b:c9:bc:61:12:ab:01:79:20:fe:7e:9c:
                    55:60:80:c7:28:93:d3:27:e5:c4:ea:c8:8b:51:8a:
                    b9:30:c1:7b:d4:3c:87:28:e4:48:1c:39:80:63:2a:
                    84:6d:3f:ed:d1:8f:dd:f0:28:2b:bf:f7:d2:77:cf:
                    13:f7:aa:87:bb:ff:2f:df:9a:ed:9f:2f:db:84:e1:
                    34:a8:05:93:42:c1:66:0d:6c:a5:18:05:e2:d8:d2:
                    cc:b2:fa:78:0c:21:13:f3:17:d9:36:36:b7:fc:d8:
                    6b:ee:06:0d:98:ae:a5:99:57:99:5c:24:83:c6:1a:
                    fe:83:6a:4d:c7:e7:4c:57:7f:68:af:ef:74:a9:35:
                    93:f0:bf:fd:a7:3e:8b:b7:3d:4a:4c:ca:68:b8:81:
                    f9:a3:b7:67:bf:bb:65:7a:e7:39:dd:72:8e:64:24:
                    1a:5d:23:36:ea:a9:4f:bd:40:35:f0:77:e2:78:36:
                    24:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D1:15:80:A8:32:6C:AB:C2:80:45:AB:60:EB:27:A6:C0:88:A6:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/b4ee358d-dc9f-356d-9971-447892001415.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c/259fe7c8-f7fa-4637-a746-873dbeadbf3c.crl

            X509v3 Authority Key Identifier:
                keyid:74:52:69:C2:2F:FC:3B:AB:B9:E6:7E:15:F6:B1:FD:A3:E9:5B:E6:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/259fe7c8-f7fa-4637-a746-873dbeadbf3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.82.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:97:66:44:07:10:53:08:43:e4:0b:60:83:32:ff:cb:2c:30:
         48:ab:07:f9:bb:ab:7c:88:df:af:a0:9e:4c:00:a6:e6:65:9b:
         1b:79:bc:20:07:bb:a6:95:fa:32:3c:52:7d:1f:90:79:0f:32:
         4c:cd:83:e7:3d:28:22:26:c9:4a:85:f1:c1:bf:7e:fb:d6:d5:
         26:de:02:89:b2:bd:3c:b1:b4:76:1a:2c:86:90:88:61:d6:c2:
         b5:f1:25:eb:58:e3:f6:2f:2a:4a:a6:86:3b:11:3a:f7:fc:0a:
         84:69:60:ab:bb:c3:9a:60:b9:cb:d8:27:80:9c:03:8d:49:c8:
         1a:88:00:22:d2:52:fb:cf:16:e1:85:d1:6d:b2:3b:c2:9e:55:
         74:37:dd:42:c7:11:5a:3f:eb:ff:ec:bc:76:83:44:91:73:23:
         84:2e:5d:64:66:9c:6f:25:df:1e:31:80:44:b5:ab:fd:77:f0:
         33:6b:25:17:ff:f4:6c:8a:56:99:a7:e4:35:e0:e5:fb:75:2b:
         7a:b5:c5:d5:35:3a:23:2e:8a:5e:eb:4d:3d:50:fd:07:e3:68:
         a2:ec:3e:c8:40:74:39:8a:b0:32:45:e0:70:c1:d8:5c:9e:cd:
         36:d8:cc:34:73:bc:29:02:7b:c1:97:9a:07:0b:2f:6d:a2:11:
         89:94:4a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:27:55 2025 by rpki-client