Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d724146a-c9cc-45b0-8278-6947cf5ce1b2/17e43f49-f8b8-3d00-bd7c-8d10e19cffbd.roa
File:                     17e43f49-f8b8-3d00-bd7c-8d10e19cffbd.roa (raw, json)
Hash identifier:          oIHQdHd+c6bKhZqS2Kg8U0C9sn1TdyE7hJnuF9zgDLs=
Subject key identifier:   20:33:E4:FD:BF:7E:7A:C4:BC:AA:2C:97:52:BF:17:25:C4:90:99:95
Certificate issuer:       /CN=d724146a-c9cc-45b0-8278-6947cf5ce1b2
Certificate serial:       010D0C9F4328584A1F902085700F573725994380
Authority key identifier: D7:BB:AD:49:20:FA:30:49:9E:A2:FE:08:51:EE:B8:F7:9F:F9:DA:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d724146a-c9cc-45b0-8278-6947cf5ce1b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d724146a-c9cc-45b0-8278-6947cf5ce1b2/17e43f49-f8b8-3d00-bd7c-8d10e19cffbd.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     7768
IP address blocks:        216.20.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d724146a-c9cc-45b0-8278-6947cf5ce1b2/d724146a-c9cc-45b0-8278-6947cf5ce1b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d724146a-c9cc-45b0-8278-6947cf5ce1b2/d724146a-c9cc-45b0-8278-6947cf5ce1b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d724146a-c9cc-45b0-8278-6947cf5ce1b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:20:85:70:0f:57:37:25:99:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d724146a-c9cc-45b0-8278-6947cf5ce1b2
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=96cdf6ed-d096-4eb6-9903-74a550949075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2d:f9:81:07:87:4a:de:15:2d:8c:df:b5:50:
                    92:d3:3d:64:5d:dc:31:d2:b3:19:b8:3b:b1:d6:69:
                    30:de:7e:37:78:e6:26:11:0b:17:30:b3:d3:02:27:
                    b6:27:71:b6:be:b1:fd:32:a2:85:34:f1:4d:b7:ce:
                    5d:df:2c:28:66:7e:67:06:f0:8c:f3:d3:d5:2f:2f:
                    75:59:21:81:f2:1e:a5:df:e8:0d:7c:36:dd:56:35:
                    80:6a:b1:11:b8:92:8e:13:d3:7e:c6:05:07:fc:93:
                    fa:90:df:d8:19:9e:71:e2:b1:e7:f3:eb:05:04:20:
                    c7:45:89:b1:bd:ec:9f:1d:44:ed:05:ad:2f:e8:33:
                    8b:b2:af:a0:5b:98:bf:d3:08:f2:c0:00:55:7e:f4:
                    2a:2a:ae:8e:ed:c9:0a:65:5d:b6:9c:95:35:4b:81:
                    fc:68:b9:21:b3:77:bb:c7:9d:c3:9a:f2:79:40:2d:
                    d8:40:06:3d:ce:da:f8:e4:94:c7:b3:77:bd:f2:55:
                    92:8b:db:26:bb:56:2c:a4:95:88:9b:27:dd:40:08:
                    c3:4d:56:a9:be:fd:48:32:e9:df:a7:d5:f8:a1:a7:
                    16:8e:c9:9c:e2:23:9e:09:91:99:d7:0d:34:d7:de:
                    c6:5d:23:7d:ba:e8:1b:45:71:d2:84:38:ca:c5:4f:
                    11:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:33:E4:FD:BF:7E:7A:C4:BC:AA:2C:97:52:BF:17:25:C4:90:99:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d724146a-c9cc-45b0-8278-6947cf5ce1b2/17e43f49-f8b8-3d00-bd7c-8d10e19cffbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d724146a-c9cc-45b0-8278-6947cf5ce1b2/d724146a-c9cc-45b0-8278-6947cf5ce1b2.crl

            X509v3 Authority Key Identifier:
                keyid:D7:BB:AD:49:20:FA:30:49:9E:A2:FE:08:51:EE:B8:F7:9F:F9:DA:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d724146a-c9cc-45b0-8278-6947cf5ce1b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.20.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:09:47:3e:8d:97:cf:91:99:07:28:7f:55:3a:62:e2:1f:44:
         e7:41:86:12:1e:cb:b7:99:e7:cf:a1:2b:d3:4e:3c:2f:5b:e7:
         f3:b4:c7:e4:12:c9:e8:c5:f7:86:87:0b:ba:bf:e3:55:65:f9:
         ad:9c:ce:d6:4f:be:c2:d1:80:f7:fb:c1:ed:7f:e8:aa:da:25:
         88:b2:a0:63:bd:36:7b:d4:f6:a8:cf:89:e5:93:77:96:8f:39:
         6e:20:54:19:37:f1:ae:a1:cd:6a:4e:fa:1c:7c:3a:33:65:cc:
         dd:ef:4b:00:5f:58:73:a3:44:18:8c:04:ef:3e:55:fb:d5:95:
         55:92:a8:b0:dc:67:33:61:5c:97:06:81:ad:cd:a5:f9:3b:67:
         db:bc:7e:4a:e2:9a:1d:a2:6e:10:e8:bf:6a:a5:ce:5f:0a:1a:
         d0:d9:41:0a:0e:1c:2d:c0:75:6c:aa:28:32:55:5e:21:ea:13:
         ca:43:84:7a:df:7f:5e:88:16:61:f7:64:b9:d4:17:72:1f:78:
         a9:b5:96:55:45:dd:13:66:0a:25:e9:0f:44:68:1a:0e:0f:5a:
         ed:2d:d5:79:6e:5f:85:0a:41:11:ef:16:17:69:0e:a7:ed:6d:
         04:0c:82:0f:d9:7f:29:1f:ad:07:2d:60:6d:81:98:87:b6:9c:
         c9:8d:78:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 21:10:05 2025 by rpki-client