Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/2908a502-0d0b-3cdd-99f9-cbfdfd7281f1.roa
File:                     2908a502-0d0b-3cdd-99f9-cbfdfd7281f1.roa (raw, json)
Hash identifier:          aMIPKRcd0lbWluYJOWaYj4SLTyqhtXoobwPomCJNk70=
Subject key identifier:   19:33:17:09:47:D8:21:B2:C2:F0:AA:72:FB:75:B0:23:50:81:DB:3B
Certificate issuer:       /CN=e175b8e9-bd62-4026-9a15-873e2b01713b
Certificate serial:       010D0C9F43285849F44A5B6ADB071DD4592086E0
Authority key identifier: 2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/2908a502-0d0b-3cdd-99f9-cbfdfd7281f1.roa
Signing time:             Sat 24 May 2025 01:00:49 +0000
ROA not before:           Sat 24 May 2025 01:00:49 +0000
ROA not after:            Fri 22 Aug 2025 01:00:49 +0000
asID:                     54302
IP address blocks:        216.109.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:4a:5b:6a:db:07:1d:d4:59:20:86:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e175b8e9-bd62-4026-9a15-873e2b01713b
        Validity
            Not Before: May 24 01:00:49 2025 GMT
            Not After : Aug 22 01:00:49 2025 GMT
        Subject: CN=f2ed99d1-862c-4318-9283-9c3f8f197ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5d:d0:6e:72:69:ca:11:22:27:0b:4d:f2:3c:
                    b5:25:8f:88:c3:49:f5:56:cb:0a:83:9e:43:78:f2:
                    c3:55:61:fe:72:68:89:2b:06:7f:33:c8:be:be:d8:
                    6e:1b:aa:39:b5:e9:fe:3d:31:ec:e6:55:51:c0:42:
                    88:5c:7e:99:f8:ad:ed:ff:a7:99:bf:9c:ca:08:12:
                    37:0e:54:5a:89:10:ca:76:4a:e5:a7:ab:48:48:fb:
                    e5:3a:f1:9f:30:2f:90:66:44:5e:64:e5:63:c3:c5:
                    4d:19:e4:a2:a0:16:5d:85:d1:86:78:ea:64:05:73:
                    64:77:54:1c:9c:2b:9c:31:2e:07:85:db:f4:1f:54:
                    d3:e7:94:30:63:f3:a8:61:84:0f:6a:a6:49:cf:fa:
                    11:07:9d:fd:8a:6d:d6:d1:59:08:13:91:4a:f0:7a:
                    22:7a:02:ae:87:c7:8f:11:e9:48:fc:00:0f:88:d0:
                    ab:a5:f9:77:9d:de:ee:64:60:e8:13:ee:b2:c7:ff:
                    87:14:17:9d:ca:c2:4a:07:91:eb:d5:2d:0d:34:45:
                    8f:da:36:b5:73:72:ef:ca:3e:76:26:4f:a9:17:99:
                    19:a2:42:4d:32:67:aa:8f:0d:90:4a:49:53:1d:46:
                    43:8d:ad:18:4f:fd:e4:08:35:f8:0e:da:fc:ca:fe:
                    fb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:33:17:09:47:D8:21:B2:C2:F0:AA:72:FB:75:B0:23:50:81:DB:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/2908a502-0d0b-3cdd-99f9-cbfdfd7281f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b/e175b8e9-bd62-4026-9a15-873e2b01713b.crl

            X509v3 Authority Key Identifier:
                keyid:2A:BC:D5:04:78:55:32:C1:D5:59:35:A7:6E:88:4A:4A:AB:9F:7C:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e175b8e9-bd62-4026-9a15-873e2b01713b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.109.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:64:6c:f3:ed:15:8f:27:91:fa:be:54:ad:df:27:3a:22:f0:
         db:d9:ba:66:91:a5:42:2a:a1:28:83:da:b6:5a:73:c6:ad:26:
         9e:5b:56:6f:f5:0a:51:5d:43:b3:06:e3:41:1c:ac:6b:b0:c8:
         ba:6e:cc:8f:22:d6:4a:08:17:da:0f:a2:ad:b7:f2:f8:d7:0e:
         c4:be:3c:6f:d2:36:d9:8a:76:96:de:d4:63:a5:b6:b7:3e:92:
         db:f8:18:dc:83:2a:75:d7:66:84:c1:bf:f0:94:9d:b1:d4:04:
         19:64:b0:0b:7b:92:86:7e:e7:32:03:9e:07:0b:eb:2e:ca:d1:
         64:e1:84:6b:e8:8d:a5:2e:bc:63:10:f7:cc:01:00:d0:cd:d9:
         9f:03:21:3b:a0:3d:c4:06:85:2b:0b:3a:5e:d6:99:5e:cf:ce:
         82:2e:29:09:1e:d8:b0:a5:a2:55:f3:67:c8:3e:fe:c7:a9:dd:
         0e:18:2d:eb:c5:df:c4:ae:a5:4d:00:54:58:d2:75:1b:16:53:
         83:bf:d3:fc:7c:b2:c7:ce:22:62:3d:fa:b7:b8:f9:ae:42:bf:
         2b:4e:0e:a6:8a:44:af:d2:9f:ce:7b:7f:b4:20:a6:02:84:79:
         cb:d2:43:49:8d:63:02:1b:d5:d2:2b:09:84:3f:34:8d:1f:28:
         40:33:a1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:01:07 2025 by rpki-client