Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/2bce8bf4-7721-31d6-91aa-3d0713d207d1.roa
File:                     2bce8bf4-7721-31d6-91aa-3d0713d207d1.roa (raw, json)
Hash identifier:          RxuY4Zg++aNELOJK+8Z7+gc+dwaAiITLJEKSO+iIkkI=
Subject key identifier:   5E:32:20:C6:63:9A:C5:89:EF:6A:FF:11:94:17:79:D6:45:03:D1:DB
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F4328584A3BF36D0AB854AD8979414980
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/2bce8bf4-7721-31d6-91aa-3d0713d207d1.roa
Signing time:             Wed 18 Jun 2025 17:03:56 +0000
ROA not before:           Wed 18 Jun 2025 17:03:56 +0000
ROA not after:            Tue 16 Sep 2025 17:03:56 +0000
asID:                     142561
IP address blocks:        108.59.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:f3:6d:0a:b8:54:ad:89:79:41:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Jun 18 17:03:56 2025 GMT
            Not After : Sep 16 17:03:56 2025 GMT
        Subject: CN=a68a401a-1ea6-48a6-9b04-87bd851f2bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8c:c2:75:9f:fc:a3:05:3b:1c:2d:e9:23:84:
                    4d:fa:ef:2f:09:f4:7d:02:f4:94:41:13:77:79:e9:
                    f7:e3:40:59:69:c6:3a:db:ee:1d:2b:6c:b4:28:cf:
                    eb:1a:97:08:80:63:15:98:75:23:ff:a1:0b:73:b9:
                    91:60:66:ec:d5:73:6b:e9:fc:ca:33:0c:a4:05:87:
                    93:50:1c:b0:c3:57:fd:ab:ff:a0:f3:7f:2e:4d:68:
                    72:65:b2:d6:1c:e0:05:a8:c5:a8:3b:2b:87:e3:c1:
                    4a:58:65:4a:0e:03:0b:bc:11:9a:3c:65:fa:85:cb:
                    42:bc:e5:8d:1b:70:58:b7:7e:8f:84:d8:ec:46:82:
                    0b:4b:c7:08:13:32:65:96:cf:f3:ac:76:90:3a:e5:
                    2b:8e:11:1f:72:fb:37:00:a1:22:c4:70:c1:79:29:
                    2c:9f:1e:7d:1c:af:93:23:fa:6e:14:ef:5a:f6:b5:
                    38:8d:02:18:ee:25:37:fa:e1:21:63:b5:69:5f:09:
                    09:7d:b1:a5:e3:07:fe:84:81:77:b8:12:bf:b9:55:
                    cb:1f:98:15:bc:56:d1:88:2f:2d:ff:21:d1:2a:fc:
                    d8:c7:2d:4a:97:bb:ae:dc:3a:a3:30:72:96:16:6e:
                    47:41:9d:9a:db:7c:f4:40:ce:35:d2:62:70:51:59:
                    7d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:32:20:C6:63:9A:C5:89:EF:6A:FF:11:94:17:79:D6:45:03:D1:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/2bce8bf4-7721-31d6-91aa-3d0713d207d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.59.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:54:49:53:fa:1a:7a:80:df:ea:99:67:12:46:20:9e:ae:02:
         2f:74:2a:45:34:da:10:04:a7:72:5c:3c:69:90:be:4d:1b:45:
         6a:a6:a9:ae:43:56:5c:f3:7a:c6:b1:7c:df:cf:5f:f4:bc:98:
         7e:4d:56:2a:67:98:30:44:de:50:93:12:65:03:20:bd:1e:e9:
         19:8f:63:1f:73:13:d5:51:76:b0:3b:7c:21:89:cf:4a:d2:18:
         c2:c7:43:19:ef:02:6b:09:33:a9:1e:97:7f:84:a5:95:71:a6:
         a8:e9:42:1b:64:aa:67:21:c3:4c:68:d2:a6:27:a9:23:93:df:
         c8:b1:89:c5:5c:71:6f:1b:10:fa:7c:2e:6d:81:12:8e:b5:7b:
         82:fb:84:51:1a:e5:0f:2f:75:bb:8b:fb:ee:5d:8b:c1:f8:31:
         7f:29:7c:d2:72:e3:7e:9e:ce:24:39:1b:76:13:69:79:60:cc:
         d8:5b:e9:f9:55:99:69:1e:cc:c6:78:28:0e:00:9f:d3:bf:dc:
         b5:e3:06:b9:49:e0:fb:b5:80:d6:7d:ec:9e:e0:41:af:83:43:
         03:9c:7a:ce:d2:15:5e:a1:af:90:33:ac:3e:98:18:4f:f1:3e:
         14:e7:4e:2e:c4:91:8d:5b:e9:fc:07:97:d3:50:c7:f8:1b:ad:
         3c:f6:86:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:50:00 2025 by rpki-client