Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7c810100-67f2-339c-bdb6-a910305f8c5f.roa
File:                     7c810100-67f2-339c-bdb6-a910305f8c5f.roa (raw, json)
Hash identifier:          fIX1YLXLsFTPuEaW+efcR+yuJGWT5xzPzgDEQzcDjs0=
Subject key identifier:   69:D1:DF:4E:64:60:60:ED:95:C1:CF:DD:BE:83:71:E7:35:56:7A:0E
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F43285849BF3F6181A985DAAF5D0DA500
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7c810100-67f2-339c-bdb6-a910305f8c5f.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     395285
IP address blocks:        216.210.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:61:81:a9:85:da:af:5d:0d:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=387380de-22e8-44f2-ad2e-dc4a64e673c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:82:7c:c3:7c:19:d8:ca:c8:4c:a1:2e:eb:2e:
                    a1:0b:b6:8a:97:a8:2f:21:2d:42:66:6d:48:60:6f:
                    2f:fd:b7:48:a5:5e:33:74:fc:a1:80:d2:c5:16:71:
                    16:8a:2c:78:68:66:db:55:a3:50:d8:9c:5e:1b:62:
                    0c:96:d6:4a:98:78:81:fd:f6:55:91:60:bf:08:52:
                    d1:ef:c9:55:3c:e4:4d:b2:54:f0:42:a2:91:6b:50:
                    66:98:31:f7:b2:51:07:90:f1:69:b9:99:92:63:d1:
                    23:1f:56:a3:62:dc:74:55:47:db:37:82:9d:65:87:
                    fb:a8:56:36:6e:47:96:23:69:09:83:e2:1d:03:d7:
                    f7:44:67:81:bd:8e:2a:be:c5:d1:0f:63:8d:bf:53:
                    8e:17:30:de:3a:72:ff:4e:7e:70:87:68:bf:b8:60:
                    22:15:4f:01:b5:7f:31:3c:9a:b8:00:8d:80:c6:46:
                    b3:0a:db:78:2f:6b:00:5e:41:3b:f0:00:20:f5:aa:
                    3e:1b:0d:39:0c:ad:10:d3:ae:3c:2a:7e:a6:b0:ee:
                    0d:f7:49:fd:be:dd:81:5d:1a:aa:40:cc:42:ac:b7:
                    dd:d2:68:7f:31:f6:57:ac:36:72:9a:9d:bf:9b:47:
                    01:20:4e:0c:a1:b7:8a:b3:e0:53:5d:32:e4:37:7d:
                    f4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D1:DF:4E:64:60:60:ED:95:C1:CF:DD:BE:83:71:E7:35:56:7A:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/7c810100-67f2-339c-bdb6-a910305f8c5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.210.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:18:75:7b:17:08:8e:85:fa:17:74:db:54:a2:50:db:6b:d9:
         f1:8e:cc:26:5d:f7:85:19:cc:e1:ab:05:76:0d:7d:8b:f0:72:
         1a:66:7d:cb:e5:a9:22:8d:c6:bb:0d:5d:73:f2:59:3f:17:f7:
         49:aa:a0:48:28:7a:8f:b3:10:59:e0:39:96:ec:49:f1:85:82:
         25:c6:43:fc:ce:44:0f:33:3c:bc:b2:ff:4f:c1:e8:ac:06:95:
         72:44:1a:bd:1d:ef:a9:84:5b:1b:da:66:9c:ca:f5:a4:31:ff:
         e5:e5:38:1a:a1:31:41:ba:0d:af:22:9b:29:e8:39:d1:5a:b6:
         57:11:3f:dc:b3:63:01:fe:69:fb:4d:9d:36:e1:74:4a:29:13:
         56:21:12:8c:0d:56:c6:7f:ae:2c:96:c7:48:84:5d:2a:e9:ea:
         9c:5e:a4:1c:ad:b5:f3:cd:83:d3:15:1a:12:67:7b:c3:64:eb:
         33:42:78:63:32:1c:cc:63:8a:0b:f6:70:5d:e8:85:66:0b:f3:
         ce:84:78:9d:4e:a8:04:bb:66:61:75:e9:c7:8e:a5:13:46:d2:
         fa:78:0c:54:cc:ec:b8:19:f7:8f:67:b9:a4:eb:de:a6:bc:0b:
         8f:a2:05:59:7b:0d:cf:b4:f4:fe:98:29:1e:74:f6:3b:49:0e:
         84:ed:c0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 23:27:14 2025 by rpki-client