Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/f00f9702-64da-301c-b2bf-95c79284f35e.roa
File:                     f00f9702-64da-301c-b2bf-95c79284f35e.roa (raw, json)
Hash identifier:          T/GhB+O8DpHwiulWO1wqJ/Nb8BjXf85JvzNe456MiDY=
Subject key identifier:   39:F1:D1:0E:9A:FA:FF:72:A0:73:F9:38:60:8F:13:F6:14:A4:CF:75
Certificate issuer:       /CN=714cea24-cc07-46e3-abc3-b9e783b4180b
Certificate serial:       010D0C9F43285849D1650D22DAD06EFA4EB19B80
Authority key identifier: EA:B7:9F:8E:3A:45:D3:DA:27:49:DD:B3:D0:4C:09:2C:3B:EB:6C:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/f00f9702-64da-301c-b2bf-95c79284f35e.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     198394
IP address blocks:        216.104.192.0/24 maxlen: 24
                          216.104.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/714cea24-cc07-46e3-abc3-b9e783b4180b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/714cea24-cc07-46e3-abc3-b9e783b4180b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:0d:22:da:d0:6e:fa:4e:b1:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=714cea24-cc07-46e3-abc3-b9e783b4180b
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=e668bfcf-220f-40e2-b668-aedbe695ff95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:76:11:78:f4:29:20:54:94:40:e1:aa:37:d2:
                    ef:d4:e9:e7:3c:a5:08:97:e8:7f:bf:12:3a:99:d7:
                    7d:ff:fc:77:4e:2c:07:43:09:5c:41:5f:d1:a2:ba:
                    a0:a8:d5:50:45:a1:39:ad:8d:79:9b:38:3d:b8:d9:
                    2c:df:f6:5f:78:ab:54:cb:87:ff:40:23:6b:22:4d:
                    3c:56:24:0f:a2:bb:6e:36:b0:2a:e7:fc:f7:d6:46:
                    cd:e4:cb:5e:65:22:3e:12:d5:14:00:ff:e4:4a:21:
                    3a:af:52:17:88:df:64:1c:50:e9:ac:db:c7:ec:8f:
                    b9:3d:ef:4c:0a:69:e9:9d:49:6e:c1:03:0e:2c:ec:
                    cd:9e:4a:14:6f:b6:58:ab:0a:55:08:5e:73:aa:4d:
                    ec:75:0a:38:3b:7d:4a:47:be:90:bb:3c:08:45:1d:
                    0b:93:16:e7:a9:7a:ae:9a:69:60:18:8a:bb:8d:59:
                    87:b0:5c:5b:fd:f9:42:d3:03:da:e1:88:45:00:06:
                    61:2f:a6:8f:f1:17:a6:2a:f3:93:a4:d5:53:b9:20:
                    96:f2:c1:f6:4e:ce:9f:61:db:24:4e:f2:02:68:c5:
                    8f:d7:42:f4:5b:b3:2c:ad:06:98:df:9d:f3:2e:d9:
                    47:a1:1d:a6:5f:5d:fc:f8:30:12:96:fb:34:fd:e1:
                    46:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F1:D1:0E:9A:FA:FF:72:A0:73:F9:38:60:8F:13:F6:14:A4:CF:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/f00f9702-64da-301c-b2bf-95c79284f35e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b/714cea24-cc07-46e3-abc3-b9e783b4180b.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B7:9F:8E:3A:45:D3:DA:27:49:DD:B3:D0:4C:09:2C:3B:EB:6C:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/714cea24-cc07-46e3-abc3-b9e783b4180b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.104.192.0/24
                  216.104.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:70:9c:f6:de:4e:66:52:e3:bc:aa:40:e8:3a:2c:6b:f0:2c:
         32:ff:1f:61:74:29:5c:f3:79:f6:e8:6f:7c:83:ec:1c:c0:10:
         04:8c:3b:94:ff:df:1f:f9:60:0f:e2:5c:a7:8e:08:ee:db:3c:
         64:f4:e5:e6:e7:ac:bf:1e:9b:a2:0f:5d:7f:d0:6c:95:4d:c6:
         f2:95:db:e3:3e:da:d9:b7:e0:c4:ff:74:33:7d:25:d6:03:a0:
         e6:0f:5c:96:b9:fa:13:e1:e9:37:c1:f1:89:e7:77:5c:d8:46:
         3b:0e:c3:34:9a:11:41:1b:6a:2a:00:f7:ee:c1:73:20:d2:94:
         e9:46:c9:50:86:3e:91:0a:4a:f5:4f:ca:0d:aa:3b:6d:5a:f4:
         f6:a7:78:12:30:c0:f8:cd:6f:bf:1b:1d:bd:9c:d6:e8:60:14:
         78:5a:78:ac:2c:73:99:17:ac:47:ff:35:0a:4a:78:a8:d8:5f:
         39:8b:1f:25:27:47:fc:82:65:50:90:94:2f:db:d3:bf:20:44:
         e2:bd:43:ef:92:ed:5e:7b:b1:6c:85:9f:9e:aa:1e:45:2d:9c:
         9f:08:ca:f9:e4:e7:9e:e0:02:da:fe:fb:ae:ce:00:ea:1a:7c:
         e2:ff:a9:57:0f:90:0a:1c:85:f7:ad:e3:e0:9e:29:20:ca:c7:
         13:d4:5a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:29:16 2025 by rpki-client