Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/67b169f6-1892-3aa8-9fc7-30770ea6696d.roa
File:                     67b169f6-1892-3aa8-9fc7-30770ea6696d.roa (raw, json)
Hash identifier:          DFF73h06LsPXWHmvxuT/+yyLnuWT96Mx19fi8fp1R68=
Subject key identifier:   2D:AE:FE:28:D4:EE:74:7E:28:8D:55:0B:24:03:7D:A7:B5:C7:07:B1
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F43285849C67CAF8C97B94FBFD86F2D40
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/67b169f6-1892-3aa8-9fc7-30770ea6696d.roa
Signing time:             Wed 07 May 2025 15:15:06 +0000
ROA not before:           Wed 07 May 2025 15:15:06 +0000
ROA not after:            Tue 05 Aug 2025 15:15:06 +0000
asID:                     5065
IP address blocks:        216.231.43.0/24 maxlen: 24
                          216.231.44.0/24 maxlen: 24
                          216.231.45.0/24 maxlen: 24
                          216.231.46.0/24 maxlen: 24
                          216.231.47.0/24 maxlen: 24
                          216.231.48.0/24 maxlen: 24
                          216.231.49.0/24 maxlen: 24
                          216.231.50.0/24 maxlen: 24
                          216.231.51.0/24 maxlen: 24
                          216.231.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c6:7c:af:8c:97:b9:4f:bf:d8:6f:2d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May  7 15:15:06 2025 GMT
            Not After : Aug  5 15:15:06 2025 GMT
        Subject: CN=cb0b5a16-5bec-4686-985c-f12daa786a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5b:ba:ef:3e:24:6b:61:82:48:f1:50:4b:f8:
                    ac:7c:34:0f:07:cc:f3:8e:a9:ef:ed:cc:26:2f:d5:
                    07:a8:d6:83:97:1d:ae:01:fa:dc:f7:a7:af:b5:c7:
                    07:f1:cd:63:c3:b6:55:ab:28:03:26:eb:d1:50:3f:
                    ec:0a:75:af:02:b8:51:af:33:c8:a8:ba:a5:c5:aa:
                    b2:54:49:dc:a7:58:64:51:e3:d2:13:e6:ba:8a:86:
                    12:97:5d:6f:d9:d2:b3:00:30:fe:cb:2c:01:45:5b:
                    2d:eb:62:80:f2:3a:bb:70:85:76:0c:d0:ca:d7:06:
                    25:0f:08:35:fa:3c:42:c4:46:9d:d3:42:47:42:8a:
                    59:ee:35:ea:e6:0a:fa:4a:72:be:4d:b3:47:f8:7d:
                    35:e3:c5:35:68:05:f5:8b:0c:20:5e:e2:65:a3:d6:
                    9d:b0:f2:64:e9:90:58:3a:af:2b:0c:b9:b1:9e:48:
                    f2:92:bf:85:22:01:71:61:41:19:54:5b:f4:92:5d:
                    64:da:fd:db:ee:c2:80:56:ed:08:90:ca:54:ee:be:
                    31:0c:9a:4c:92:51:49:53:ae:88:7d:d1:b0:f8:ba:
                    f0:58:99:3a:88:53:25:58:c6:33:85:19:f8:61:65:
                    53:0a:83:52:00:e8:53:f9:c2:40:4d:12:6e:bb:20:
                    8c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AE:FE:28:D4:EE:74:7E:28:8D:55:0B:24:03:7D:A7:B5:C7:07:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/67b169f6-1892-3aa8-9fc7-30770ea6696d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.231.43.0-216.231.52.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:67:9f:cd:f7:3d:84:c7:6f:7d:0c:c3:6d:00:b1:7e:a7:ff:
         9b:5a:5c:0e:f1:71:40:ec:62:76:22:bb:92:2c:ca:73:e4:6f:
         b0:7a:d6:17:5f:aa:f1:26:89:08:c5:90:91:86:dd:69:24:15:
         0f:0c:22:66:42:7c:bb:a9:8b:2c:f1:a3:c6:05:80:52:4a:dc:
         39:86:13:65:38:52:ab:4f:75:27:17:c0:c4:58:8e:26:3d:d5:
         13:57:12:85:00:4a:60:01:65:6c:83:c6:a6:ff:a0:25:b0:c0:
         39:a6:04:fa:74:c4:e4:5b:ee:6d:33:61:75:58:dd:5a:4d:e9:
         48:07:f0:81:c4:04:bd:94:be:14:ff:91:b1:f5:b5:f5:09:8a:
         18:5a:d3:e1:2a:1d:59:a7:d3:a7:33:b0:0e:8d:88:ad:64:fe:
         9d:c9:7d:88:fc:86:e7:48:65:44:43:cf:6a:fc:ad:0c:c7:d9:
         fd:d4:49:69:03:71:4c:83:31:e2:80:17:05:76:85:c2:e8:c2:
         97:ab:c7:04:a8:b4:9c:2c:8d:10:a8:ab:f8:b2:01:c1:2b:dd:
         4e:12:74:d4:f4:36:6b:a7:c6:ce:6a:ec:a3:d2:af:fa:22:97:
         2d:ec:a2:c5:4e:1d:2e:fd:6e:e6:43:48:fd:c7:57:52:bb:11:
         08:b8:17:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:39:26 2025 by rpki-client