Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d73092b4-54aa-3405-a3ca-45d7d6798270.roa
File:                     d73092b4-54aa-3405-a3ca-45d7d6798270.roa (raw, json)
Hash identifier:          NqzGxzJTh9O51Ps0jen4ZndHEbn74fzJUy/AZwbuEp4=
Subject key identifier:   A3:29:19:69:7C:66:6F:01:11:5C:6A:3F:AB:55:11:B3:FB:A4:39:7D
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584A506AF5A4170FB685F5746460
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d73092b4-54aa-3405-a3ca-45d7d6798270.roa
Signing time:             Thu 26 Jun 2025 01:00:49 +0000
ROA not before:           Thu 26 Jun 2025 01:00:49 +0000
ROA not after:            Wed 24 Sep 2025 01:00:49 +0000
asID:                     23473
IP address blocks:        216.171.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:50:6a:f5:a4:17:0f:b6:85:f5:74:64:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Jun 26 01:00:49 2025 GMT
            Not After : Sep 24 01:00:49 2025 GMT
        Subject: CN=6baa81d1-502e-4408-b737-4541e452ec0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6a:92:ad:f9:0b:ac:89:23:8c:8c:0e:a6:b1:
                    ff:31:19:a9:c6:9d:d2:93:15:c2:56:dc:4f:97:a4:
                    3f:81:7e:0b:61:55:6e:f5:fa:bf:a4:fc:b4:76:b7:
                    19:1f:1e:ee:55:6e:ca:79:26:8c:d8:3d:6c:11:08:
                    64:28:89:e7:f5:d3:85:7d:ec:b1:f3:af:13:e3:7d:
                    51:c6:48:e7:ae:5c:37:f8:94:21:7a:8c:ee:26:78:
                    9b:0c:97:00:b5:71:12:c7:71:0e:d4:5d:f7:22:60:
                    62:51:23:86:4c:8e:49:a1:28:39:0e:41:26:48:57:
                    36:b3:be:1a:d5:05:20:29:10:83:bb:b6:17:51:e4:
                    fd:f4:dc:06:55:1f:35:a9:3b:b4:41:27:e7:8f:c1:
                    8b:5a:66:7f:c6:d0:e4:97:b5:48:9f:4e:d5:3e:95:
                    fd:92:d2:20:e2:4c:47:a8:b6:8a:bc:8d:50:5c:91:
                    08:4f:ec:38:2f:48:d8:f0:33:4e:94:72:ab:16:fe:
                    71:fb:34:13:c6:27:4a:2c:8d:9f:73:22:b2:88:4c:
                    cc:dd:54:c8:86:2e:50:b9:92:3c:87:ae:4b:02:99:
                    51:80:42:ef:86:d1:90:75:80:87:60:fc:b5:d9:3b:
                    7c:54:00:28:77:75:cc:33:43:f9:d2:ba:8d:a3:1c:
                    a2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:29:19:69:7C:66:6F:01:11:5C:6A:3F:AB:55:11:B3:FB:A4:39:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/d73092b4-54aa-3405-a3ca-45d7d6798270.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.171.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:b4:15:34:40:4a:8a:e6:88:89:f6:30:fe:cd:eb:8c:d9:79:
         54:ad:1e:66:f9:3a:3c:e2:60:dc:7e:e8:68:a9:a8:d8:4e:ef:
         8b:b5:ae:4a:d9:83:79:17:1e:44:10:db:d8:70:db:43:f0:85:
         8c:66:58:ff:87:f2:2a:a3:e1:0d:b4:6f:e4:a5:71:ce:8e:ca:
         83:8a:ff:28:72:c7:3e:51:e2:0f:83:48:8d:ee:aa:e0:16:3e:
         23:0d:3e:54:31:a4:e2:6d:b8:41:50:8b:f1:0c:d1:8f:af:be:
         aa:12:74:ab:ec:51:78:55:a7:c3:84:18:92:7a:0e:a3:d6:15:
         ea:4d:50:72:c5:18:bc:a4:8b:75:32:66:c0:ee:25:a0:02:b9:
         c0:a2:af:01:a1:9b:8f:45:5f:15:46:99:f9:04:07:ec:6d:28:
         4a:09:d2:e9:e6:d3:6b:0e:04:cf:57:5f:9e:01:a8:73:a1:71:
         55:ce:d4:3d:6d:8e:3c:7c:75:70:14:5c:42:b3:34:01:11:74:
         7a:58:a6:8e:4a:e2:67:4f:de:2b:83:50:36:5a:ad:67:8e:fe:
         d3:90:97:10:73:8b:cb:99:6f:7b:6f:d1:0b:6c:24:83:4d:46:
         7d:55:2b:ef:c6:72:85:79:af:81:63:88:c6:6c:60:23:0c:d2:
         3e:90:a7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 16:56:50 2025 by rpki-client