Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/c9fe7a24-4f90-32e1-9abf-3e247c902ae5.roa
File:                     c9fe7a24-4f90-32e1-9abf-3e247c902ae5.roa (raw, json)
Hash identifier:          3nDeo7lCGBP6QBNcRXgPkA1oOHDJadXdb/UUZAiDOsY=
Subject key identifier:   32:43:A6:33:D4:26:30:43:55:A6:2F:8A:F9:75:C0:12:E5:F1:77:BF
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F4328584A3A15924D197CC6A7E7100100
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/c9fe7a24-4f90-32e1-9abf-3e247c902ae5.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        216.224.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:92:4d:19:7c:c6:a7:e7:10:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=d6653eca-d125-4adf-865a-00ecea97b9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f9:83:07:84:98:cf:25:91:2c:a2:ca:8c:69:
                    96:97:16:4a:4f:a0:9c:31:13:ab:e2:1e:85:4e:4f:
                    0f:ec:60:95:b2:c9:dd:ef:d8:ad:e2:95:b1:cf:be:
                    79:67:3e:d0:f8:5e:d6:b0:9e:45:76:94:7f:ef:5a:
                    48:cd:ae:1d:22:d3:68:74:dc:79:eb:26:ba:ad:88:
                    7e:17:43:a7:92:39:e8:ad:0b:37:af:e0:83:51:7a:
                    1c:dc:93:82:0f:9b:b9:92:8a:bb:96:de:d1:1b:ba:
                    9d:56:83:cf:6f:ab:e4:71:38:81:c4:44:fe:a3:52:
                    75:e6:b3:0c:be:69:fe:c7:21:cd:91:d3:62:ad:8e:
                    68:01:55:de:8d:af:37:c3:28:ff:da:6f:fe:6d:85:
                    e1:66:15:76:71:4d:80:bc:a4:2a:62:a0:de:d4:55:
                    a4:c2:9f:a5:5d:8d:c9:81:65:7a:02:e9:a0:e5:4d:
                    a5:ad:e7:9a:cd:8f:e9:bb:4c:8b:a3:f2:e8:18:74:
                    7b:eb:52:39:d9:9c:89:88:e6:79:25:ec:27:c7:d4:
                    0a:17:46:61:29:c9:e6:bb:71:1d:89:33:e1:21:60:
                    e2:a1:10:26:29:1f:fa:40:da:a8:48:37:9a:20:f7:
                    a0:1d:c9:25:4b:54:1e:ae:80:fc:e9:56:19:36:b5:
                    5d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:43:A6:33:D4:26:30:43:55:A6:2F:8A:F9:75:C0:12:E5:F1:77:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/c9fe7a24-4f90-32e1-9abf-3e247c902ae5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.224.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:9e:69:17:d7:8f:db:f2:df:83:85:a2:77:23:a2:1d:ee:ed:
         42:3f:09:f0:36:0a:4d:2c:11:8e:65:13:6a:78:9c:2c:dc:fa:
         d3:f4:67:dd:20:9a:3f:72:28:f3:72:4d:22:73:14:c0:92:13:
         9f:a0:7d:00:e9:be:fb:5d:79:a1:03:db:1f:94:e9:d3:be:6f:
         5f:65:f6:cd:d3:2e:27:cb:a6:f3:da:12:67:a7:e2:e0:16:61:
         98:85:9a:42:39:6e:22:76:3c:df:0a:46:7f:8a:eb:b5:f2:fa:
         66:1d:cc:8f:fb:cb:8f:9e:5d:c1:51:d5:11:14:fc:cd:58:00:
         70:c7:f6:f1:fb:3f:15:59:49:93:19:80:48:4f:65:d1:76:06:
         e4:c8:ad:c8:05:f9:62:fe:1f:79:7b:88:8e:21:2f:67:08:89:
         78:8e:91:89:c0:16:02:a4:97:b9:a7:b2:c5:11:43:1a:9b:e1:
         c7:ad:ce:1c:45:21:e9:c8:98:ca:20:3a:11:28:17:9c:ef:35:
         94:3e:c0:d2:ce:ab:2e:3b:1f:e4:09:69:6b:c3:ce:fc:99:05:
         ad:4b:31:ef:84:69:5b:62:4d:7b:bd:b7:c0:9b:3e:57:02:a6:
         6b:fa:5f:e2:08:93:6d:8f:c4:0a:99:96:73:2b:57:c7:76:47:
         13:08:b7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:51:08 2025 by rpki-client