Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8528e7d7-a903-38e3-bd05-00bf08b95cfd.roa
File:                     8528e7d7-a903-38e3-bd05-00bf08b95cfd.roa (raw, json)
Hash identifier:          3hYEQaiiv5HPnI6NHZbzu6l6r3PI/DjqiCvHGNSHD+o=
Subject key identifier:   5E:2C:E8:81:40:72:1D:D9:12:F2:8E:25:05:F0:1C:12:95:97:04:8B
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F43285849C67CAFC35DEC1D678C906100
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8528e7d7-a903-38e3-bd05-00bf08b95cfd.roa
Signing time:             Wed 07 May 2025 15:15:06 +0000
ROA not before:           Wed 07 May 2025 15:15:06 +0000
ROA not after:            Tue 05 Aug 2025 15:15:06 +0000
asID:                     5065
IP address blocks:        216.231.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 May 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c6:7c:af:c3:5d:ec:1d:67:8c:90:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: May  7 15:15:06 2025 GMT
            Not After : Aug  5 15:15:06 2025 GMT
        Subject: CN=b816e91d-7ff9-42d7-afea-361e4051ecee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1b:69:e6:ce:8e:2d:d1:7d:35:43:fe:77:56:
                    ad:cf:b7:e9:66:8d:d6:10:44:da:4b:25:c9:92:46:
                    5b:64:89:88:d7:10:b8:bb:a6:1f:06:15:b9:5c:26:
                    bc:f9:e9:50:c5:28:f7:96:36:1e:11:a0:f0:b1:f3:
                    ff:86:72:14:b1:04:b6:5e:50:b0:ca:4b:1e:da:bf:
                    16:53:de:47:a4:3d:f7:51:e5:46:88:0a:cc:0c:00:
                    be:53:6b:0f:72:ac:6a:54:a5:44:2a:9f:6b:99:2e:
                    32:60:89:26:9f:81:e0:8a:02:c6:46:67:c0:5f:78:
                    6e:5e:67:20:dd:e9:f3:fa:bf:36:d9:c7:dc:72:93:
                    6a:d3:5c:f3:67:e7:96:fa:fb:bf:a3:63:e8:b3:fa:
                    95:76:7f:d7:09:85:e5:d7:76:25:83:2e:f9:39:9b:
                    9c:53:70:75:20:df:29:24:b5:dc:51:0e:af:89:07:
                    4e:4c:5c:75:22:82:c4:d6:21:2b:cd:85:41:fe:12:
                    9f:6a:06:b2:41:0a:86:97:bb:f5:f2:41:b8:22:3d:
                    de:c6:7b:33:5b:e8:07:79:1e:da:cd:94:df:6b:57:
                    72:4d:ea:b2:a6:89:ff:cb:f6:e8:d1:23:94:c3:58:
                    2b:83:97:88:30:40:c1:92:62:26:48:00:a4:f1:8e:
                    40:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2C:E8:81:40:72:1D:D9:12:F2:8E:25:05:F0:1C:12:95:97:04:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8528e7d7-a903-38e3-bd05-00bf08b95cfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.231.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:d3:33:a8:43:89:62:f4:17:61:40:b3:25:a2:a6:1b:44:79:
         c3:43:b0:cb:59:31:7f:3b:f4:e3:d4:4b:76:44:0b:bc:22:9c:
         b4:5d:78:4f:fd:32:1d:f9:4e:22:4a:2c:ec:13:66:4b:90:79:
         e8:54:85:ce:70:5b:29:7b:04:d0:fd:bb:02:eb:83:7c:6a:4d:
         d2:f8:c1:6d:d3:f0:5e:fc:d6:8c:f3:62:fa:d9:6a:11:04:a7:
         9e:3c:49:80:65:c2:e2:c8:01:cc:8d:da:78:60:d5:17:1a:fa:
         e4:91:91:76:ac:1f:8b:fc:e0:8b:77:19:12:2e:34:ed:96:5e:
         36:e7:36:98:3e:7a:2a:27:90:2b:6d:44:c4:90:6a:e2:94:ef:
         95:c0:04:c8:b9:8c:ad:79:5e:c4:7a:7f:09:91:ea:9b:33:0a:
         01:b7:3d:0f:de:4d:b9:8e:6d:64:cb:d0:a5:a5:f3:73:ae:4b:
         29:79:86:08:7e:ef:c4:93:4c:d6:1b:d2:9b:d8:d6:4d:23:64:
         38:f7:e2:1b:75:bd:0b:a6:49:b6:80:a9:eb:80:21:ed:75:fd:
         78:17:e5:1a:80:f3:c4:6d:0c:fb:15:43:a6:db:a0:14:f8:34:
         11:5a:80:32:8d:43:2f:54:07:02:1d:11:ce:b0:8d:8e:d3:6d:
         79:c1:2c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:28:15 2025 by rpki-client