Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/1f2326db-884c-3dd5-b685-a5d18363056e.roa
File:                     1f2326db-884c-3dd5-b685-a5d18363056e.roa (raw, json)
Hash identifier:          hhNjQgIyaoDRHbgMciWrLvCoAGGflPGn7+9Plp8K3dg=
Subject key identifier:   86:0C:7E:2E:22:1A:28:45:72:BA:9A:86:CE:05:0C:B6:72:BA:DB:FE
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F4328584A4C3B1DF8E11DF878F04C9D00
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/1f2326db-884c-3dd5-b685-a5d18363056e.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     393980
IP address blocks:        216.255.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:1d:f8:e1:1d:f8:78:f0:4c:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=cd7cf590-e650-4d5e-b218-74f5740ad040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:68:91:79:15:df:67:7e:d4:46:07:56:c1:48:
                    01:75:04:c8:90:78:4d:18:89:e4:e5:7d:99:a4:69:
                    ad:4f:73:1a:ba:01:27:d5:c0:1b:5d:f7:dc:06:68:
                    d9:69:dd:9b:13:ed:c8:97:95:9b:9e:7f:15:e8:8b:
                    bd:ae:35:4a:ab:9e:44:8d:cf:d5:c1:62:d7:b4:41:
                    18:d2:7c:72:c9:e1:04:83:bf:4c:cb:4b:5f:10:3f:
                    27:10:50:c5:e6:6b:99:f3:33:2b:0d:21:c7:5d:2a:
                    c4:ff:2f:0e:d4:61:c1:4f:ab:15:89:ae:8f:78:10:
                    8a:28:d0:3c:41:fb:80:08:c7:0e:51:fe:dd:37:c4:
                    c7:ad:15:20:2d:aa:a6:5f:3e:48:18:08:93:a8:ac:
                    d1:16:dc:83:c9:b4:6b:5b:cd:11:39:df:8d:c8:47:
                    3f:58:04:15:0f:8c:3b:41:e2:6d:82:7b:c9:de:29:
                    a2:51:db:8d:28:99:cc:47:c0:c0:84:27:03:46:1f:
                    43:26:f7:67:59:86:a5:80:5c:3b:71:0a:69:67:da:
                    cb:ef:65:4c:4a:48:4b:81:0b:4f:d9:43:9a:4d:ee:
                    1e:a8:e5:05:2b:34:c5:d0:2b:6e:64:76:dc:48:18:
                    b6:31:f7:81:79:fe:7a:db:ed:48:94:e3:bf:b6:be:
                    1c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0C:7E:2E:22:1A:28:45:72:BA:9A:86:CE:05:0C:B6:72:BA:DB:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/1f2326db-884c-3dd5-b685-a5d18363056e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.255.113.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:bc:93:2a:f2:45:f8:34:d2:5c:13:83:ec:68:94:7a:72:47:
         2e:e0:d9:00:a6:c1:42:52:5b:11:8a:5c:21:92:80:a3:19:0d:
         ed:45:1e:af:10:c7:6c:d5:05:96:3c:67:13:da:ba:e9:9b:50:
         8c:83:e8:47:5c:e8:d8:be:d1:24:d5:ca:da:6f:cb:0e:55:93:
         33:85:73:a2:13:87:f3:4c:26:4a:31:24:30:6c:6c:c0:02:b7:
         82:ce:54:3c:e7:21:7f:ef:72:ec:e6:7f:9d:ba:9e:5f:13:8c:
         05:a4:4e:84:db:4b:39:79:fc:da:7f:dc:31:50:fa:a9:91:dd:
         47:fd:a9:2d:4a:11:ac:f3:20:69:d4:c8:75:91:60:a9:19:40:
         e4:34:43:2d:9f:76:bf:b7:19:4d:ed:46:59:64:1f:dd:2f:77:
         f7:ac:80:59:da:be:55:9d:74:ab:ec:84:93:e7:fc:77:d4:32:
         f1:52:50:48:8e:5b:b3:1a:10:bb:f5:ff:eb:d1:93:2f:7f:04:
         36:ca:a0:e8:b7:5c:4b:9a:34:0f:f0:49:55:73:7a:4d:1b:41:
         c6:f8:39:27:97:81:79:da:7a:d4:b6:2a:e6:96:79:e8:76:7b:
         7b:b9:a4:97:a0:d7:e5:2d:61:38:d1:29:e6:69:9b:75:21:ff:
         dc:b4:81:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 18:34:40 2025 by rpki-client