Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/b8dd5684-619f-3fea-a09e-364298622606.roa
File:                     b8dd5684-619f-3fea-a09e-364298622606.roa (raw, json)
Hash identifier:          w1Z66+kU393XnObwbYu0Iil/EdzXMcfiPJMNMseFtnY=
Subject key identifier:   2D:8A:26:8E:05:0B:4A:D3:C6:D9:CF:F9:F6:2B:2F:28:FC:D9:CC:6C
Certificate issuer:       /CN=24652152-0111-4df2-a7ef-61ad3cdecb58
Certificate serial:       010D0C9F4328584A2C20203AD69410466F233B80
Authority key identifier: 59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/b8dd5684-619f-3fea-a09e-364298622606.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     13389
IP address blocks:        216.179.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:20:3a:d6:94:10:46:6f:23:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24652152-0111-4df2-a7ef-61ad3cdecb58
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=6266461c-0589-4ba8-9e12-b3a4671d0743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:86:5d:83:1f:5a:7b:d7:4d:ee:41:e5:31:9d:
                    34:6d:8c:e0:39:9b:24:5e:32:01:75:d5:7f:b7:36:
                    6d:f1:cb:77:25:d7:6f:83:48:cd:3c:1b:04:75:98:
                    42:98:84:f1:1f:31:e6:61:7b:31:b3:15:5d:dd:1c:
                    de:83:9c:0d:2f:02:e1:bc:dd:1c:9d:13:47:37:b3:
                    1d:04:56:41:36:c4:c3:82:8b:6d:41:8a:18:d3:19:
                    ff:5e:a2:c4:54:2c:1d:15:8d:39:9d:7c:94:e6:bd:
                    61:e4:d2:88:3b:6b:31:e9:6c:29:0d:80:cb:38:0b:
                    08:0e:39:00:ea:14:59:5d:ed:6f:72:43:01:c8:48:
                    7b:e0:ed:f0:4f:36:fd:b4:eb:0e:2e:ae:ac:0f:68:
                    5c:fc:84:8d:c7:db:1c:0f:65:cb:07:70:19:0c:65:
                    12:86:1d:cc:af:42:41:d0:91:44:83:f7:21:c6:0d:
                    e2:95:03:49:10:94:71:72:77:ad:21:9d:c5:02:61:
                    25:0c:17:86:71:2c:eb:42:b7:6e:24:2d:0f:32:7e:
                    15:5f:a8:b2:0f:64:5d:67:32:d7:d1:6e:67:07:48:
                    24:e5:c7:0c:ec:75:03:70:16:88:fd:f4:f0:35:4c:
                    d2:90:18:34:0b:45:44:e2:5a:64:f7:96:7e:44:ed:
                    10:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8A:26:8E:05:0B:4A:D3:C6:D9:CF:F9:F6:2B:2F:28:FC:D9:CC:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/b8dd5684-619f-3fea-a09e-364298622606.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.crl

            X509v3 Authority Key Identifier:
                keyid:59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.179.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:f2:77:6f:0b:1e:86:3b:a8:6c:3c:95:93:d6:6d:f1:e5:22:
         f3:06:5b:b8:74:74:39:c2:af:72:6c:46:36:6c:67:f7:11:16:
         35:34:db:25:73:97:c5:73:d6:87:43:8e:b8:ff:f3:54:65:6c:
         37:2c:1e:6d:ba:04:d6:16:d2:40:bd:af:66:82:27:57:e2:10:
         80:c4:9e:2d:7c:e1:cd:e3:80:9b:c8:35:34:d2:ed:14:b7:4f:
         13:8c:4a:ee:b5:91:95:21:f6:59:56:a9:60:03:cc:13:ca:09:
         97:17:5a:03:03:6b:13:98:89:4c:96:eb:5a:d5:19:a8:10:15:
         24:a7:88:94:6c:80:ab:1f:cf:59:8b:bf:7d:6a:4b:d9:9f:88:
         58:cc:0f:cf:cc:30:a7:33:b9:9f:4f:23:1a:ee:15:42:83:93:
         5f:fb:5f:ce:b7:6f:cc:80:08:7e:44:45:ee:29:61:8b:a8:04:
         c2:75:2d:b0:c1:e2:18:7e:69:0c:4c:36:a6:7d:8a:43:ba:db:
         e2:c6:2f:fd:e5:13:98:37:6b:24:d8:7e:11:ed:fd:6d:b8:1d:
         33:c6:c3:b5:66:4e:26:dd:dd:75:f8:bb:ec:d9:cd:39:f2:c0:
         17:a5:48:47:cc:c6:72:33:cd:9b:78:2d:07:9f:8d:16:77:5e:
         38:02:a9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:31:06 2025 by rpki-client