Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/02116e6d-8286-3367-ab7d-9693bb8dac50.roa
File:                     02116e6d-8286-3367-ab7d-9693bb8dac50.roa (raw, json)
Hash identifier:          VWWwl4J+MyFVG/IBqPDINGCEqLSHJYP9N081WefJOd8=
Subject key identifier:   64:B0:17:AC:F6:75:8C:2F:3C:36:3C:4E:AE:6A:2B:28:6E:35:2D:F5
Certificate issuer:       /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6
Certificate serial:       010D0C9F432858498A345DFC610DB3D1503CAB00
Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/02116e6d-8286-3367-ab7d-9693bb8dac50.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     59
IP address blocks:        128.104.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:5d:fc:61:0d:b3:d1:50:3c:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=d84526b6-1111-49fb-91e3-11589b4cc9a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:e8:d5:26:2b:16:8e:73:71:0c:b2:f4:3f:
                    07:09:8f:82:ba:3c:ad:bf:e9:9a:46:d3:4d:6b:c1:
                    1b:f1:ab:2a:b7:ab:25:12:af:8a:c4:23:82:bb:99:
                    bf:cf:14:ba:1f:e5:db:49:7b:5a:8e:25:78:11:df:
                    06:78:af:5b:8a:3f:27:1a:70:49:e7:fe:cd:8a:8e:
                    d7:da:cf:83:13:cb:f4:c6:b4:27:b0:77:4e:ab:dd:
                    8b:8a:3d:42:d3:cd:2f:5f:9f:44:e5:0b:03:e9:68:
                    63:15:06:6d:5a:f9:f7:ee:3a:07:0f:f3:8a:45:92:
                    07:67:1d:2c:3f:2d:2f:48:6b:3b:6e:5c:2c:ce:d4:
                    07:6c:1c:a0:35:74:4f:cd:37:14:4b:0e:b0:33:e1:
                    93:54:e8:c8:c7:a4:38:b5:6a:d8:79:3d:02:80:0e:
                    a1:00:5d:a6:58:a0:6b:b5:44:71:a4:40:63:b1:a9:
                    99:a2:8b:cd:c8:d1:6d:79:09:2c:26:1f:e1:d4:7d:
                    01:45:f1:d7:2d:a7:5b:7d:90:b0:0f:de:a1:25:80:
                    a3:83:c8:d3:bf:9e:6e:19:a2:0a:d6:ac:8f:76:5d:
                    dc:54:93:8b:89:34:67:4c:71:f8:85:41:7d:14:43:
                    7a:b6:22:a9:03:33:14:77:84:99:ac:1a:ca:0e:0d:
                    96:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B0:17:AC:F6:75:8C:2F:3C:36:3C:4E:AE:6A:2B:28:6E:35:2D:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/02116e6d-8286-3367-ab7d-9693bb8dac50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl

            X509v3 Authority Key Identifier:
                keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.104.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:a8:73:1f:de:01:fc:df:0c:8b:dd:a1:45:44:3b:15:3d:21:
         53:13:40:46:3d:fb:f8:24:78:78:2e:1c:c0:22:dc:ff:2f:eb:
         07:49:65:71:23:6f:88:d8:a1:5d:af:02:73:66:04:02:c4:2e:
         8e:99:f3:96:ba:21:c3:4d:9d:1f:f4:e2:38:49:ae:a9:8b:a9:
         7c:0c:d1:82:4f:5e:22:13:a6:bf:12:da:88:f5:bf:74:16:c6:
         8d:ec:2b:07:97:4b:bc:16:c9:9d:fd:db:5a:73:b0:64:b2:c0:
         77:e8:0d:51:1f:57:1e:e4:90:ea:01:10:e8:6d:f5:36:f5:d4:
         eb:de:79:80:96:df:62:ea:fd:2b:dd:68:e0:55:16:2f:26:d2:
         f5:55:45:67:e5:16:ff:1c:ef:e4:c0:32:70:f2:f6:b3:8e:5b:
         33:f3:45:e9:e6:16:e7:17:cc:b1:8e:0e:dc:93:70:bf:9e:8f:
         2f:d0:a1:b5:80:d7:10:0d:77:98:d5:0f:f2:ce:5c:2b:b6:a5:
         2a:28:5a:02:55:62:6d:7b:e0:46:45:3b:34:ae:15:e0:57:c5:
         cc:6d:3f:fc:c8:07:be:ab:b2:6d:75:5b:d2:8f:f8:fa:19:b5:
         b1:f0:f6:04:04:f0:ea:51:db:c3:48:88:d9:68:dc:76:3d:c3:
         8d:6f:a5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:16:14 2025 by rpki-client