Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/383b4949-98c6-342e-816e-27374ba79bba.roa
File:                     383b4949-98c6-342e-816e-27374ba79bba.roa (raw, json)
Hash identifier:          loMb1rAip7B5MS5AZY8EgNlCT4I7YvF7CCF4RMHKt/U=
Subject key identifier:   8B:10:09:48:33:62:DB:41:BA:A5:43:FE:C9:66:5D:DE:8C:B8:EB:75
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584A506AF62CB895FB81424DEE00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/383b4949-98c6-342e-816e-27374ba79bba.roa
Signing time:             Thu 26 Jun 2025 01:00:49 +0000
ROA not before:           Thu 26 Jun 2025 01:00:49 +0000
ROA not after:            Wed 24 Sep 2025 01:00:49 +0000
asID:                     23473
IP address blocks:        216.171.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:50:6a:f6:2c:b8:95:fb:81:42:4d:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun 26 01:00:49 2025 GMT
            Not After : Sep 24 01:00:49 2025 GMT
        Subject: CN=96a0e943-0f0b-4ed2-930e-7e3399d09ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:3b:7f:57:60:ba:d0:9e:db:97:71:40:92:fa:
                    dc:b4:56:84:ca:c9:d7:8e:67:eb:ef:fe:05:f4:50:
                    96:e6:97:49:d6:f2:a0:6f:7f:1a:47:7d:e8:7c:6f:
                    78:0d:b4:cb:11:3f:d6:0a:d9:2b:d6:0d:dc:e1:42:
                    9f:c3:30:29:86:05:f4:51:91:9b:06:30:42:e5:e7:
                    bd:9b:bc:23:ab:90:d4:0f:4c:fd:31:54:91:48:2d:
                    39:db:7a:cd:c0:47:98:d3:cb:6a:a0:58:51:dc:b1:
                    ce:59:01:34:f4:18:49:44:49:18:c0:4e:4d:45:8f:
                    f9:28:de:ad:cb:6b:d2:59:8f:d9:5a:26:6c:ed:46:
                    95:66:69:6b:b6:54:72:89:f3:35:ea:bd:f0:60:17:
                    ec:4e:4a:24:f3:c2:c1:95:d2:7a:28:b0:6b:c1:fc:
                    49:28:9a:48:28:98:95:b6:31:8c:0c:89:34:f0:a8:
                    73:48:d9:16:20:7a:1c:7a:ae:88:45:35:75:77:7f:
                    ab:5e:54:c3:fd:6e:01:e5:9e:8a:cc:11:ac:5e:cd:
                    57:80:31:c5:1f:23:5f:4f:d2:0e:2e:44:2c:91:78:
                    43:27:6f:cb:43:04:a5:58:0a:85:ca:3b:a8:ad:19:
                    07:16:a6:bc:94:62:46:38:fb:34:10:0d:a7:a6:f6:
                    93:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:10:09:48:33:62:DB:41:BA:A5:43:FE:C9:66:5D:DE:8C:B8:EB:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/383b4949-98c6-342e-816e-27374ba79bba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.171.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:35:e2:92:37:3f:5a:c6:e2:82:95:83:1b:c5:7d:2a:50:7c:
         82:08:a4:0e:e1:46:f5:d2:ad:2b:64:64:ba:fb:24:11:ca:a3:
         62:00:49:67:92:e2:1f:48:47:d0:88:09:74:0c:36:26:d2:50:
         74:7b:f5:b6:38:94:f5:27:9e:8e:36:dd:ad:e3:a2:2e:61:88:
         1f:e4:a9:b3:dc:f7:08:af:9e:51:67:4c:f4:d9:4d:48:74:d4:
         1d:51:4e:76:74:6f:28:be:02:ae:89:2c:86:88:1a:de:12:1e:
         e1:72:20:26:7c:8e:e5:fa:e5:b4:2d:d8:f6:32:f2:84:7e:10:
         ee:3d:b2:77:18:7b:94:4b:d2:6a:39:47:d8:76:b3:4c:2a:d7:
         c9:aa:6e:69:8b:40:22:8c:75:85:96:89:56:36:8a:ad:93:ad:
         f4:6f:81:4c:3c:fa:aa:d6:97:0e:1a:0b:11:39:12:ef:bc:ef:
         13:cd:a7:c3:83:29:e5:6e:84:57:0b:54:34:68:83:ae:51:a5:
         44:2d:4b:84:2a:c0:c2:58:0c:63:48:84:e6:1e:43:23:c0:05:
         59:1d:2c:37:b9:73:65:6f:88:61:f7:63:7b:9b:b2:ad:ab:a4:
         59:08:3d:f6:c5:7d:99:81:e2:9f:52:7a:d5:cc:b6:62:b1:d8:
         bc:29:13:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:54:26 2025 by rpki-client