Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a/abcfbb8c-362f-32e7-98af-e6e3c0c9250a.roa
File:                     abcfbb8c-362f-32e7-98af-e6e3c0c9250a.roa (raw, json)
Hash identifier:          KLqjvKRe4JdIMVoIpSsz1g3dHVfFz1NLnqogf1ZviSY=
Subject key identifier:   95:48:DC:F6:AB:10:F9:4B:B0:94:59:F0:1A:A6:D7:76:F7:3D:1D:78
Certificate issuer:       /CN=332b909c-500c-4711-b8f9-90f766d6a38a
Certificate serial:       010D0C9F4328584A348024B8C546A4B465FCB980
Authority key identifier: BD:B5:65:B7:80:5A:6F:F5:16:42:37:DC:18:84:3A:F3:AA:AB:96:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a/abcfbb8c-362f-32e7-98af-e6e3c0c9250a.roa
Signing time:             Mon 16 Jun 2025 01:00:49 +0000
ROA not before:           Mon 16 Jun 2025 01:00:49 +0000
ROA not after:            Sun 14 Sep 2025 01:00:49 +0000
asID:                     63306
IP address blocks:        192.40.216.0/24 maxlen: 24
                          192.104.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a/332b909c-500c-4711-b8f9-90f766d6a38a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a/332b909c-500c-4711-b8f9-90f766d6a38a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:34:80:24:b8:c5:46:a4:b4:65:fc:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=332b909c-500c-4711-b8f9-90f766d6a38a
        Validity
            Not Before: Jun 16 01:00:49 2025 GMT
            Not After : Sep 14 01:00:49 2025 GMT
        Subject: CN=9545d564-dba8-4720-8af8-63a77c56e16a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7b:bc:3d:76:cf:66:25:e3:1f:c1:cf:2a:8b:
                    e2:ba:60:7f:a6:2f:67:c7:71:55:bd:5a:2e:6b:29:
                    0d:83:74:25:f5:b3:bb:f8:7b:a8:da:17:9c:7f:32:
                    15:83:7c:42:a9:78:d9:49:00:9c:13:a3:bd:3c:1b:
                    39:97:69:cf:56:c8:ea:6d:ee:7d:3c:1d:88:d7:a0:
                    00:4c:87:80:39:66:56:53:ca:21:bd:e1:6b:d6:e8:
                    8e:d3:d9:1a:e5:8d:0d:0d:0a:65:d9:46:b7:2d:b2:
                    37:f3:89:67:a4:8d:d0:f5:d9:94:f8:6e:3a:ec:43:
                    ec:48:56:3b:09:01:28:b8:93:9f:c5:23:7c:a6:0d:
                    50:b3:ca:06:d6:0c:c6:7a:d5:42:70:d9:bd:9e:75:
                    70:7c:b9:d8:5f:b2:3e:95:8d:03:ad:d8:ae:aa:ea:
                    10:60:44:fe:ab:1a:e2:e0:ce:1e:96:b4:a0:91:5d:
                    fb:53:d4:7c:9d:62:f9:a1:90:d0:eb:5a:3f:22:6a:
                    c5:a5:76:2e:1f:07:56:a2:73:13:1c:a7:46:f0:14:
                    6b:64:f7:2d:ae:e6:82:0b:38:e5:2c:63:fc:44:95:
                    c7:e2:f1:4a:4e:2c:d3:b5:36:30:4b:ed:54:38:48:
                    fa:df:03:7c:b7:18:ac:ef:31:d0:78:8b:c5:f5:d9:
                    68:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:48:DC:F6:AB:10:F9:4B:B0:94:59:F0:1A:A6:D7:76:F7:3D:1D:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a/abcfbb8c-362f-32e7-98af-e6e3c0c9250a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a/332b909c-500c-4711-b8f9-90f766d6a38a.crl

            X509v3 Authority Key Identifier:
                keyid:BD:B5:65:B7:80:5A:6F:F5:16:42:37:DC:18:84:3A:F3:AA:AB:96:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/332b909c-500c-4711-b8f9-90f766d6a38a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.40.216.0/24
                  192.104.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:2c:e4:46:df:da:0b:76:bb:28:00:d8:83:ed:af:5a:01:55:
         b6:85:28:cb:30:26:c3:0d:a2:39:90:04:f2:8f:19:9c:8e:d1:
         28:2f:47:9f:40:94:68:2d:03:89:b5:d8:36:a6:5c:17:e7:d2:
         af:3d:16:83:a5:e1:4f:d4:a9:53:1b:34:54:11:5b:08:55:bd:
         41:dc:6e:31:44:a4:59:91:36:59:33:d5:86:7f:89:02:32:c4:
         e2:34:fd:00:a6:1c:c0:1d:6b:89:f3:45:dc:62:a1:c2:e4:3f:
         c5:e9:b5:fc:ea:31:9a:21:dd:a6:8e:9e:91:7f:d2:38:55:dd:
         99:1b:6c:7f:26:af:ee:43:36:82:ce:5c:a0:0b:a3:d7:e5:20:
         3e:16:59:ed:b6:9c:93:09:fd:ab:63:0c:73:03:89:09:4e:f2:
         46:28:b3:c3:4a:76:d7:40:c7:77:0c:a6:f3:88:0a:6b:43:d2:
         2a:6f:37:b5:5b:27:68:0c:8b:ff:80:ff:bc:18:1c:d5:a8:08:
         ef:eb:05:a9:13:19:ba:a5:bf:14:f2:12:01:4d:7f:03:78:d4:
         3d:b6:f5:a6:3e:35:73:2d:a7:b8:90:01:c0:a0:2a:02:ce:c9:
         c3:bf:63:3e:25:bc:4b:db:a8:15:0d:35:a8:34:2d:57:80:87:
         ce:13:ca:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 00:52:27 2025 by rpki-client