Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/a39d2c3d-7011-37df-adb8-915dfb142921.roa
File:                     a39d2c3d-7011-37df-adb8-915dfb142921.roa (raw, json)
Hash identifier:          HoBDfkkD4WDxfUYoHRlypMO2F8/vMLvVdeVZRefjQXg=
Subject key identifier:   8C:56:2C:F0:34:98:4D:61:99:7D:E0:1F:A0:E0:AB:5A:87:75:DD:DC
Certificate issuer:       /CN=44a561a3-0ac9-4535-922f-85de35ad8de7
Certificate serial:       010D0C9F4328584AE93C9810E96750C85FE7CCE0
Authority key identifier: 2C:40:05:53:53:46:71:E6:5F:7D:B7:0F:1B:6F:F5:D6:91:58:19:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/a39d2c3d-7011-37df-adb8-915dfb142921.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        216.238.136.0/24 maxlen: 24
                          216.238.137.0/24 maxlen: 24
                          216.238.142.0/24 maxlen: 24
                          216.238.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/44a561a3-0ac9-4535-922f-85de35ad8de7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/44a561a3-0ac9-4535-922f-85de35ad8de7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e9:3c:98:10:e9:67:50:c8:5f:e7:cc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44a561a3-0ac9-4535-922f-85de35ad8de7
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=58af83ca-2462-4b2e-ac31-a939404dfd61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fb:b9:45:6b:b5:88:97:d5:25:8f:f6:b1:74:
                    4f:fd:59:ec:b3:d2:61:18:83:bc:c4:c2:be:d7:99:
                    95:d4:c1:30:cd:61:48:0e:4c:b3:00:a4:cf:36:85:
                    e9:48:83:31:eb:96:de:59:cc:59:9a:6d:4f:f4:56:
                    c5:f8:e6:84:87:11:02:95:c1:97:cc:5f:e9:f9:52:
                    f7:fc:a9:7e:7e:f0:f1:61:75:54:0a:bc:a8:d8:4c:
                    b9:cf:3b:d5:af:b0:20:7a:da:cd:9a:9e:0a:04:e2:
                    15:ce:6b:6a:c1:1e:b1:96:23:fa:54:60:21:ef:8d:
                    4d:f4:c2:36:6c:ce:96:95:79:1f:c2:8b:5b:bd:ee:
                    8c:d6:4a:aa:50:d7:1a:6e:08:dc:cb:7a:3b:41:6d:
                    8a:a9:d4:9e:42:13:06:f4:ba:d8:a8:bb:ba:a0:43:
                    48:6a:66:3f:a4:ed:17:96:9e:f5:a6:29:c3:0f:bb:
                    ca:8d:0d:e3:1c:19:8c:81:5a:2a:83:0d:66:d0:5f:
                    64:dc:a1:f2:85:fe:aa:62:c3:50:78:33:c6:85:37:
                    95:ff:f0:34:05:b9:bb:b6:9a:eb:02:84:cb:46:4e:
                    bf:cb:fe:c7:6c:78:a8:c5:2d:d1:4f:de:13:e0:cd:
                    dc:90:93:01:4d:8e:57:24:85:8a:6e:99:a9:f6:83:
                    a9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:56:2C:F0:34:98:4D:61:99:7D:E0:1F:A0:E0:AB:5A:87:75:DD:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/a39d2c3d-7011-37df-adb8-915dfb142921.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7/44a561a3-0ac9-4535-922f-85de35ad8de7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:40:05:53:53:46:71:E6:5F:7D:B7:0F:1B:6F:F5:D6:91:58:19:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/44a561a3-0ac9-4535-922f-85de35ad8de7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.136.0/23
                  216.238.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:f0:cf:37:34:db:c8:40:e2:c0:70:4a:37:0c:44:ba:cd:a4:
         2f:15:3e:59:c3:e1:61:40:64:0c:5f:40:39:a2:c4:6e:13:21:
         d5:b7:a6:0e:d4:ff:1f:a0:b2:32:a3:7c:ec:a1:8e:86:58:4d:
         04:76:f4:81:2d:11:4b:52:e9:8e:e5:08:dd:37:d8:3a:aa:b2:
         a6:84:4c:90:d3:35:b2:c6:4d:a0:2c:62:6f:0a:80:a9:b7:97:
         16:1f:33:8c:52:f6:19:79:0d:b5:1d:25:26:56:25:33:66:6a:
         7b:c4:85:aa:51:bb:7b:c0:ac:04:6d:3a:29:32:3e:53:64:90:
         42:97:69:ee:28:0f:a2:ed:60:7e:c0:f5:bb:fe:8b:35:f8:d8:
         e5:79:38:51:ff:fc:bb:ff:18:37:16:b6:1c:d0:f4:76:52:fe:
         b4:c9:90:ab:cc:04:62:47:52:66:42:2f:75:15:68:33:96:7d:
         5e:e3:73:49:cc:bb:55:e7:c7:78:0d:89:6c:be:e2:90:f9:92:
         a6:70:36:30:63:7d:ad:a6:32:df:89:5e:1a:1d:5f:10:90:0f:
         6e:db:58:a9:f4:9f:2a:bc:67:44:c8:86:73:e7:96:23:0a:7d:
         9e:bc:86:34:36:56:d0:e5:73:d7:00:ed:58:b3:31:4d:02:3a:
         d7:1c:11:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 06:53:02 2025 by rpki-client