Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a6772357-6c7c-3de7-ae34-67edd5854477.roa
File:                     a6772357-6c7c-3de7-ae34-67edd5854477.roa (raw, json)
Hash identifier:          vfRLdwJyXGnSFEi2Ud8/Lfc3T4/R2aGooH0NAOnxzu0=
Subject key identifier:   38:49:23:C7:5E:5C:8A:F6:6F:22:9C:87:A2:BD:86:78:72:E1:47:4B
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A4DA042DFB008B39FDF9D8E80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a6772357-6c7c-3de7-ae34-67edd5854477.roa
Signing time:             Wed 25 Jun 2025 01:00:49 +0000
ROA not before:           Wed 25 Jun 2025 01:00:49 +0000
ROA not after:            Tue 23 Sep 2025 01:00:49 +0000
asID:                     14315
IP address blocks:        216.122.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:a0:42:df:b0:08:b3:9f:df:9d:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 25 01:00:49 2025 GMT
            Not After : Sep 23 01:00:49 2025 GMT
        Subject: CN=1f4c4be6-cabe-44c7-91e6-0165df8f8c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4b:22:c6:04:61:12:c9:2a:5c:e4:54:1f:ec:
                    e8:45:93:37:e2:8b:88:61:0b:21:a3:d7:76:63:c7:
                    22:d3:33:79:44:22:38:29:fc:06:7b:09:98:32:fc:
                    61:3f:e2:f8:fa:7a:be:7f:fb:1a:cf:2a:f9:7a:7b:
                    25:9b:74:d2:1e:41:01:1c:bb:c2:f9:a1:ed:7b:be:
                    f9:ec:d6:37:db:35:f9:4c:00:6a:00:3f:f8:52:e5:
                    88:8f:5b:5c:8b:49:ef:18:23:25:ed:6c:d3:b5:47:
                    6a:f2:10:7b:9b:f0:3b:ef:b4:e8:60:b0:1e:35:00:
                    9d:97:1f:89:30:15:4c:46:c9:59:1b:a4:eb:a7:e9:
                    88:80:25:74:69:a1:ab:f9:ed:3c:9c:ee:23:c3:d6:
                    76:19:56:b8:d0:d7:e6:33:dd:47:06:72:60:97:87:
                    fa:3c:7d:36:db:4d:95:fa:00:59:36:ec:40:25:0c:
                    06:c8:90:c3:59:21:ec:f0:7f:f6:42:48:bd:4a:eb:
                    ce:b8:02:30:5a:3f:d9:20:6e:10:6a:d5:7a:a1:9f:
                    e9:be:3f:19:02:6b:e5:26:8b:a4:12:15:1f:3f:c9:
                    c2:aa:ad:d2:c7:97:39:f1:62:fd:57:e7:4d:a8:39:
                    a3:6d:2f:07:98:64:b3:af:8c:0a:72:e8:b8:37:87:
                    d1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:49:23:C7:5E:5C:8A:F6:6F:22:9C:87:A2:BD:86:78:72:E1:47:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/a6772357-6c7c-3de7-ae34-67edd5854477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:d1:6e:c8:5e:05:89:3c:4b:f6:70:bc:ee:71:46:14:87:71:
         4d:31:ec:fe:45:93:92:4f:98:0b:4b:6a:7a:2b:7b:1a:c4:83:
         c1:bc:9a:9b:5b:4c:b9:e6:a2:cd:e8:4b:41:1a:52:c5:74:28:
         2b:e5:a6:2c:b0:00:7d:37:d7:23:16:e8:c0:44:4c:e3:45:d3:
         56:34:cf:0a:22:93:ce:94:f3:c6:a1:f2:bc:38:d2:31:d0:00:
         b8:59:1d:25:d2:42:bd:cb:62:31:ed:f8:9d:28:07:aa:ea:9e:
         08:a3:df:3f:69:49:dd:8b:dd:42:9a:55:78:d2:f1:d9:4b:0e:
         1d:e3:43:de:6b:76:9c:74:4a:67:10:e5:19:86:dc:b5:a2:34:
         5b:ff:12:a6:0f:69:3a:69:e2:a4:9d:b5:40:78:12:3b:8b:07:
         b2:b3:28:cf:52:d6:aa:02:5d:c8:ba:27:ad:ce:5b:35:53:30:
         46:82:c1:65:b7:80:6a:b0:ad:d2:db:d8:49:61:ce:23:f3:8d:
         6c:7a:d5:aa:3f:a0:bb:f4:22:1f:1a:bb:a9:23:63:a6:d0:aa:
         2d:d9:42:6d:4d:ff:e2:d3:7c:8d:bb:6e:38:db:de:97:2a:84:
         a7:ac:ef:7b:3b:27:d8:36:34:85:93:bb:a6:60:d7:31:cc:db:
         c4:47:b6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:33:12 2025 by rpki-client