Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/d4f76b79-0fae-3718-bff6-2a57f01cb029.roa
File:                     d4f76b79-0fae-3718-bff6-2a57f01cb029.roa (raw, json)
Hash identifier:          6HdN/E+rgpbLT+0sBwIjykjCxnFyKOhdGm/iQhrkN7w=
Subject key identifier:   60:CC:C9:9C:98:8D:2C:4B:53:67:13:43:02:9A:AD:56:35:AF:D4:B8
Certificate issuer:       /CN=1b03e342-d588-4239-8704-6688d01760d9
Certificate serial:       010D0C9F4328584A1F9013B38C9E237CBADF36C0
Authority key identifier: 13:70:79:43:A1:A9:52:02:4A:34:06:B3:D2:FA:8C:ED:8F:E2:91:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/d4f76b79-0fae-3718-bff6-2a57f01cb029.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     397031
IP address blocks:        216.146.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:13:b3:8c:9e:23:7c:ba:df:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b03e342-d588-4239-8704-6688d01760d9
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=283bd633-9f6f-49c1-901f-c091cc3b307d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:26:69:54:07:ce:d0:f8:66:a9:c2:9c:51:b2:
                    52:44:55:20:dc:d4:84:10:d0:48:14:2f:3d:84:c6:
                    f8:d3:22:4c:67:57:1b:d6:bd:f5:9f:ce:45:9f:1f:
                    ec:32:ef:1f:99:54:93:10:e4:03:54:f1:4e:89:52:
                    7c:90:cd:4f:a7:09:f4:01:22:ea:ee:af:0b:f9:21:
                    2d:88:b1:84:6c:04:3d:41:b2:fd:29:70:2a:84:2d:
                    62:10:8e:c8:04:05:7e:a8:e0:cc:92:50:1b:ed:fa:
                    a2:d9:22:fc:a3:a1:d5:c3:ca:3d:ba:14:49:35:58:
                    06:8a:3c:81:b8:56:e7:58:03:ab:b5:8f:5b:4b:c3:
                    f3:0b:c4:dc:18:9c:61:2f:90:d8:2a:31:96:88:fa:
                    ca:9b:5d:bd:29:6d:0c:12:86:d2:4f:f7:d3:f4:62:
                    8e:5c:20:55:b0:ea:9d:bb:7f:47:7b:81:ed:66:4f:
                    18:42:fe:0b:7a:70:be:2a:94:0d:9d:83:17:e0:13:
                    e6:40:d8:39:06:6a:1c:c9:79:5b:33:ae:16:dc:79:
                    2e:3d:d7:fc:a0:02:37:16:01:d1:d1:8c:e9:52:20:
                    a6:f0:01:bf:51:62:b2:f0:87:02:30:46:b0:40:53:
                    a9:ab:8c:84:6f:c2:b0:04:2e:48:8c:ce:53:5b:5c:
                    5f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CC:C9:9C:98:8D:2C:4B:53:67:13:43:02:9A:AD:56:35:AF:D4:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/d4f76b79-0fae-3718-bff6-2a57f01cb029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9/1b03e342-d588-4239-8704-6688d01760d9.crl

            X509v3 Authority Key Identifier:
                keyid:13:70:79:43:A1:A9:52:02:4A:34:06:B3:D2:FA:8C:ED:8F:E2:91:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b03e342-d588-4239-8704-6688d01760d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:ce:68:73:f2:3b:5f:3f:6a:18:37:ce:e4:f0:61:39:ce:1f:
         46:4f:d3:33:e0:ea:3d:59:06:f9:0f:91:0a:e7:d7:f7:8c:7a:
         6e:36:7c:02:5a:db:c4:7b:02:17:b2:00:be:89:5f:5e:21:20:
         52:af:cd:01:bb:7a:ab:c0:25:ea:f8:bc:8e:36:12:e7:a1:9c:
         d5:a0:c9:de:b8:02:64:19:92:a0:45:11:63:2c:1c:bf:9f:70:
         a3:7d:8c:73:c4:c5:59:58:cf:7d:a9:0c:0f:75:05:56:27:b3:
         3f:57:fc:a9:ac:70:5d:3d:eb:97:98:55:fe:e3:5f:51:20:65:
         cb:46:21:a5:27:13:6a:46:46:f3:3d:69:dd:93:35:84:7c:89:
         16:28:5c:1c:db:63:0e:e2:5f:f6:14:30:7d:2c:0a:da:39:3e:
         0d:e2:cf:7d:0c:60:25:33:f1:35:c1:9b:99:89:d5:1d:82:47:
         10:8a:8e:30:a6:41:8e:a3:4f:79:c7:98:cb:29:f1:59:64:31:
         db:6b:f7:30:0f:5b:25:1f:88:50:b5:d8:65:f9:15:e0:1f:c5:
         49:73:73:32:51:03:74:7a:f7:61:20:3b:df:19:d9:36:11:65:
         bd:aa:f4:98:2e:e5:38:7c:8e:7c:b8:6b:78:3f:d4:5c:c2:39:
         38:6a:42:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 09:47:53 2025 by rpki-client