Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/6d424af2-98af-3ea5-b716-579d6efc2b86.roa
File:                     6d424af2-98af-3ea5-b716-579d6efc2b86.roa (raw, json)
Hash identifier:          h1OY+vSzGUJKS8JF7D26rcy44rl+1uA2EwbktsW6VlY=
Subject key identifier:   E7:F5:5E:38:73:AA:7F:2A:EE:C1:F6:B3:F0:97:4A:23:32:D3:8B:81
Certificate issuer:       /CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
Certificate serial:       010D0C9F4328584A58CB0171E9949B677D10A5C0
Authority key identifier: 35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/6d424af2-98af-3ea5-b716-579d6efc2b86.roa
Signing time:             Sun 29 Jun 2025 01:00:50 +0000
ROA not before:           Sun 29 Jun 2025 01:00:50 +0000
ROA not after:            Sat 27 Sep 2025 01:00:50 +0000
asID:                     30687
IP address blocks:        216.38.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:58:cb:01:71:e9:94:9b:67:7d:10:a5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8281a0a-00f2-4aac-b311-e961a7ccedfb
        Validity
            Not Before: Jun 29 01:00:50 2025 GMT
            Not After : Sep 27 01:00:50 2025 GMT
        Subject: CN=070a9427-43fb-4264-baa4-c39fa11f55d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ea:42:a4:42:4f:37:f9:b5:7f:d8:09:f1:94:
                    d2:22:23:bb:c8:dc:c6:55:b0:3f:c2:f6:d0:7e:1e:
                    40:86:2e:b1:a9:31:bc:a5:33:74:e6:1e:41:e6:5b:
                    88:85:40:9f:d6:f2:ff:28:1e:a1:5b:56:d4:d5:29:
                    01:f8:1f:b2:8e:58:6a:ca:99:6d:e5:45:fd:c8:53:
                    8b:aa:a8:1b:6e:ea:22:31:ca:2d:a2:2c:4b:34:70:
                    2d:94:24:a9:f4:94:70:f8:0e:b4:c4:0e:89:be:7e:
                    5a:18:b9:f3:4c:82:ba:18:68:39:00:ab:2f:9f:73:
                    58:0c:03:20:35:ed:80:9e:af:29:ee:40:29:0f:11:
                    97:87:aa:ba:e2:e0:eb:76:69:94:78:21:23:cd:01:
                    63:6c:31:ce:79:f2:98:da:73:9e:d7:55:fe:58:79:
                    9c:57:0c:17:5d:29:5a:47:83:c1:31:d7:db:e7:07:
                    2e:fe:84:46:ad:80:70:81:b6:99:c4:7b:b3:ff:9c:
                    25:88:5d:36:ff:7f:2c:de:d4:6e:61:45:ab:1c:f8:
                    8e:30:fa:ac:d5:72:27:cc:aa:3e:e6:cf:98:39:63:
                    f6:fe:ea:57:39:69:62:4a:11:42:a8:2e:77:e8:4a:
                    b2:35:cf:3c:d0:ae:2a:6f:88:6a:53:ca:d9:96:db:
                    96:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F5:5E:38:73:AA:7F:2A:EE:C1:F6:B3:F0:97:4A:23:32:D3:8B:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/6d424af2-98af-3ea5-b716-579d6efc2b86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb/b8281a0a-00f2-4aac-b311-e961a7ccedfb.crl

            X509v3 Authority Key Identifier:
                keyid:35:F0:01:B3:B3:0C:23:08:EB:B9:0B:7C:D8:2E:1C:79:63:0A:8F:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8281a0a-00f2-4aac-b311-e961a7ccedfb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:09:14:e1:96:be:58:ac:02:12:d2:37:7a:d6:3a:c6:7a:15:
         43:20:ad:7b:74:d9:da:d2:d1:3c:b3:14:7e:a7:39:52:70:de:
         a4:0e:89:f9:92:77:9f:0d:52:51:36:f8:6b:ce:7e:10:c9:6c:
         9f:ee:49:a1:c3:6b:22:d0:42:81:50:94:b2:ab:43:cc:d5:ae:
         c1:2e:1c:99:7e:d2:12:c0:4e:f4:72:07:bb:e9:a4:08:40:9c:
         3e:46:2c:de:70:b3:ed:b9:2e:a9:ed:08:3c:7e:6a:10:0d:c3:
         8a:4f:3e:f2:87:8f:ff:e1:25:4d:e3:91:5e:9c:74:6d:21:1c:
         63:b3:3b:e4:ae:df:c7:c6:b9:45:27:d4:92:f2:1c:36:d3:63:
         1d:a8:e5:47:94:d2:a9:d1:c2:1c:d0:de:9a:be:56:b2:45:d7:
         e9:b4:c7:f6:26:48:d4:58:92:41:5f:93:66:c4:f0:45:c2:47:
         2d:a8:6d:62:c2:60:c1:09:1c:79:c4:82:f4:0d:62:f3:4e:d3:
         20:8f:2e:c5:43:e6:c7:c3:86:63:af:1f:e5:83:0c:16:26:ac:
         54:31:ae:18:2e:f1:b2:82:3d:30:e4:38:24:02:d4:e6:9f:0d:
         d7:8d:19:6b:e6:d0:82:2f:62:07:cc:da:29:d3:bf:07:d7:2f:
         96:e1:80:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 06:49:44 2025 by rpki-client