Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9841a9ab-3f7f-38ad-b87c-5b34d9664937.roa
File:                     9841a9ab-3f7f-38ad-b87c-5b34d9664937.roa (raw, json)
Hash identifier:          cyw1ZYwLUDpSgeJhc08MSHLi5GIrAyGPhGNMXGG1EjA=
Subject key identifier:   16:2F:AB:59:5B:C0:61:45:6F:68:16:67:F4:D7:6E:18:E1:B8:40:F3
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584A374AD6CE246182CFE4369100
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9841a9ab-3f7f-38ad-b87c-5b34d9664937.roa
Signing time:             Tue 17 Jun 2025 01:00:48 +0000
ROA not before:           Tue 17 Jun 2025 01:00:48 +0000
ROA not after:            Mon 15 Sep 2025 01:00:48 +0000
asID:                     203963
IP address blocks:        216.24.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:37:4a:d6:ce:24:61:82:cf:e4:36:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jun 17 01:00:48 2025 GMT
            Not After : Sep 15 01:00:48 2025 GMT
        Subject: CN=909b337c-77cd-476c-967d-89551e4ee2ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e2:56:85:3b:8c:9d:ca:6e:ef:af:c4:6b:13:
                    0d:bb:ed:14:4d:d8:7a:e7:6f:47:90:44:a6:ea:c3:
                    b4:16:2a:71:e2:6c:82:57:aa:b4:79:60:7d:95:4b:
                    49:87:64:c1:e6:3a:c4:d8:6c:79:a0:5f:a8:1e:e6:
                    e5:c4:95:86:4d:4e:05:e9:b2:cf:b4:eb:d3:c7:b0:
                    af:99:d9:c4:ed:8a:9b:02:16:9b:34:30:d6:74:6a:
                    50:27:1c:96:90:5c:82:d4:89:79:e1:b3:8b:4b:71:
                    80:c0:79:16:0f:17:05:a5:43:e7:e6:4b:db:fd:a5:
                    ed:5d:c5:03:75:74:80:ee:17:af:56:8c:53:db:f8:
                    cc:92:3c:37:cd:59:e7:e2:43:4d:cd:0c:54:19:db:
                    7b:a8:d5:19:09:0b:01:44:74:60:f4:eb:71:35:37:
                    79:4f:4e:eb:e8:5f:84:6c:5d:0c:ca:08:90:3d:ce:
                    63:31:b5:94:20:38:71:ba:36:cd:a5:1f:c0:2b:49:
                    61:2c:6d:af:ec:12:66:be:9d:c5:51:2b:3e:04:8b:
                    77:21:f4:6e:bb:0e:9d:f9:6b:6e:73:7d:98:f5:57:
                    90:02:fc:24:7f:0b:7d:cb:3f:55:57:ca:60:56:93:
                    05:73:5f:0d:b2:01:11:50:c6:84:98:18:e0:53:19:
                    40:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:2F:AB:59:5B:C0:61:45:6F:68:16:67:F4:D7:6E:18:E1:B8:40:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/9841a9ab-3f7f-38ad-b87c-5b34d9664937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:40:16:28:4f:90:3c:d9:ad:4e:a6:f0:44:4e:30:d4:e9:1e:
         6f:cd:b4:84:ae:9f:52:7e:79:6d:75:27:bc:b0:2c:a3:6c:b5:
         ad:37:43:56:6c:e2:b2:8c:91:5f:c7:86:70:04:df:43:be:ab:
         82:a0:57:29:a3:61:54:8f:e8:92:ef:ca:15:9f:3c:42:a4:95:
         8f:a7:aa:77:2b:66:14:31:6e:ad:69:ea:8f:30:47:95:f9:dc:
         09:56:3e:8c:f8:ae:70:00:b6:0b:b6:84:e5:63:9a:4f:a0:56:
         28:c3:ab:8d:79:7c:6c:30:b6:1e:fe:f7:2c:ea:a3:c7:59:81:
         2c:d6:54:74:fe:ea:4b:40:e7:89:e1:9e:f0:ae:1d:53:bb:a7:
         43:dd:65:da:1b:10:6b:b8:84:ff:5c:2d:23:2b:e2:57:bb:f8:
         d0:ac:95:0d:80:25:4a:ec:44:2f:f3:b2:cf:62:a4:bc:0d:51:
         f6:4d:99:89:0d:b9:69:5f:8d:22:09:5b:0d:70:65:79:14:59:
         c7:81:38:f1:5c:61:91:9c:be:15:30:ae:09:60:f1:1a:4e:0d:
         69:7a:9d:90:b8:07:d8:6d:2d:c5:8b:d8:72:a4:36:8e:2c:f5:
         85:6c:58:97:d4:8c:6b:3a:e7:4e:70:72:59:65:0e:75:0d:3c:
         0a:0c:12:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 13:46:36 2025 by rpki-client