Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/938e1c18-6122-371d-864e-54b0cc8fcbc4.roa
File:                     938e1c18-6122-371d-864e-54b0cc8fcbc4.roa (raw, json)
Hash identifier:          QLRVjI3LzGzNVNN+7FMA8eD9qAD6sPrIzN3T4ppJSH8=
Subject key identifier:   24:6A:CD:91:59:9D:38:99:F3:1B:42:4F:50:3E:38:90:53:62:3A:1F
Certificate issuer:       /CN=3e511aed-c666-436d-b4a4-947790e6c9e5
Certificate serial:       010D0C9F4328584A4C3B1CE57D175401CFA56800
Authority key identifier: 2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/938e1c18-6122-371d-864e-54b0cc8fcbc4.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     14618
IP address blocks:        216.120.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:1c:e5:7d:17:54:01:cf:a5:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e511aed-c666-436d-b4a4-947790e6c9e5
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=eedd7129-1617-461e-95c2-beaaf900f32a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:41:fd:11:29:6f:28:93:c1:05:ba:d0:4b:d0:
                    72:34:ce:87:1c:37:1c:35:43:c7:a6:78:a9:b6:4a:
                    b0:87:c7:7e:d4:e4:2e:d8:da:e2:c3:18:8b:67:32:
                    24:6b:b6:ae:ca:27:61:bf:58:9f:62:03:82:50:6c:
                    d7:f4:2a:3a:09:07:d9:84:f3:29:9e:77:eb:f1:91:
                    6b:df:12:64:a8:c7:c0:49:dc:19:86:c9:56:a6:d0:
                    27:5f:39:b4:20:2e:be:ca:cb:92:cd:58:1d:76:56:
                    8d:18:e4:1b:55:70:4d:e5:bd:42:2d:72:40:a8:1a:
                    d1:13:c9:69:1b:c7:78:5d:7d:97:dd:c4:9b:8f:27:
                    36:49:bc:c7:08:33:42:98:f5:cb:61:88:dc:d5:73:
                    2a:d2:8d:01:bb:1a:b1:07:09:d9:60:ce:9f:de:e2:
                    3f:97:00:5f:ef:64:89:14:d0:4f:36:35:97:f8:f1:
                    95:74:dc:1c:d9:ac:0c:e1:22:bd:7d:0f:fa:00:6b:
                    d5:e8:e7:ae:69:58:67:a6:6c:5b:02:2b:8a:56:14:
                    d4:81:dd:e1:4d:31:3f:ce:30:1b:bc:99:cc:e4:26:
                    58:36:0f:d7:8a:d8:d4:6c:5e:10:6e:4a:19:08:e7:
                    66:4d:7f:94:84:86:ca:18:f9:77:ac:23:49:5d:6c:
                    b5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6A:CD:91:59:9D:38:99:F3:1B:42:4F:50:3E:38:90:53:62:3A:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/938e1c18-6122-371d-864e-54b0cc8fcbc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl

            X509v3 Authority Key Identifier:
                keyid:2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:b8:72:27:57:d8:36:e9:e7:64:cd:4b:da:52:91:73:ef:a9:
         65:c0:b8:eb:41:08:2d:f1:56:eb:9f:45:7b:27:89:73:8d:fb:
         b3:4e:db:28:bb:4b:27:5a:05:9a:55:36:37:95:e1:ab:3a:4f:
         09:46:28:ab:58:54:7b:a3:1a:c5:9f:df:8f:3c:d1:60:5a:42:
         f5:dd:66:79:19:45:1c:ae:8d:02:16:66:5b:01:57:bd:ce:0b:
         6f:26:26:8c:f3:23:15:5c:cb:f9:68:d4:35:fc:e1:49:42:f1:
         23:a2:b0:b5:75:f6:42:d4:ba:b5:ef:10:94:43:a4:d4:aa:d5:
         b3:dc:7d:06:33:bd:83:dd:53:90:09:bb:3a:77:f6:fe:11:cc:
         65:7b:8e:50:30:9e:d4:64:25:c4:1f:2b:d5:df:fe:d6:44:36:
         6b:54:41:d0:28:3a:a5:c2:b5:6e:b5:aa:2d:a1:d0:75:0a:cf:
         20:f0:13:ab:0e:c7:36:9c:5d:3d:ea:33:27:c5:c9:ca:6c:65:
         8b:36:39:db:8d:10:aa:b1:5d:53:cd:fa:11:5b:32:d7:0a:30:
         9a:2c:24:3f:8b:d1:e7:32:40:19:ef:c9:cf:77:01:a3:08:bb:
         d7:b7:53:d3:8d:ba:b5:83:f1:63:38:75:f7:3a:22:78:28:40:
         82:ac:53:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 23:45:26 2025 by rpki-client