Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1/f450ca8c-d4f8-339f-b234-5a0275bc19e5.roa
File:                     f450ca8c-d4f8-339f-b234-5a0275bc19e5.roa (raw, json)
Hash identifier:          +2Cziu0vHwGB/vGPBAndTMTgWRATeJIIlwn6MrLl4N0=
Subject key identifier:   15:DB:C0:3B:D4:CE:DD:90:69:65:CA:94:8C:A5:E0:9B:5B:F6:97:45
Certificate issuer:       /CN=5063cd63-15d7-4a40-801a-3f85ef7d09d1
Certificate serial:       010D0C9F4328584AE19672D23102D9706E77EE00
Authority key identifier: BF:94:2A:F3:BE:BB:86:15:2B:45:37:7C:86:74:0F:BD:50:BC:D7:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1/f450ca8c-d4f8-339f-b234-5a0275bc19e5.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     399858
IP address blocks:        216.39.252.0/24 maxlen: 24
                          216.39.253.0/24 maxlen: 24
                          216.39.254.0/24 maxlen: 24
                          216.39.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1/5063cd63-15d7-4a40-801a-3f85ef7d09d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1/5063cd63-15d7-4a40-801a-3f85ef7d09d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:72:d2:31:02:d9:70:6e:77:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5063cd63-15d7-4a40-801a-3f85ef7d09d1
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=75037b3c-cc32-4536-b392-0e0736f75d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:88:f1:b6:9f:6d:27:6e:f5:b9:a4:0d:9f:a4:
                    46:a7:15:0c:e7:8b:6f:01:02:1c:03:6a:af:69:6e:
                    b6:70:0e:1f:b5:3c:65:97:cf:c7:6a:37:c0:60:fe:
                    82:e0:4e:07:7c:af:79:89:57:32:83:88:96:e6:68:
                    ea:dd:51:b1:58:11:ae:c5:04:b9:38:0f:b2:46:74:
                    ee:7b:b4:34:13:4c:b6:16:f8:07:f7:48:17:80:1a:
                    30:2c:ef:4b:75:db:ed:a6:a1:bc:41:1f:c8:f6:64:
                    b4:84:72:ce:f8:77:ca:76:e4:36:60:e3:46:e8:c5:
                    f9:87:f4:58:60:b7:61:d6:e7:98:a2:39:cc:c4:99:
                    db:16:9f:29:ae:7f:d9:0b:64:94:fa:46:3e:6a:7d:
                    04:f6:55:21:5b:2a:b4:e1:24:a0:90:8f:9f:ed:6b:
                    03:57:43:a4:a7:13:86:26:ff:1b:fb:cf:2f:38:67:
                    8c:1c:10:5a:e0:41:46:21:a9:a2:6a:7d:79:97:bc:
                    6c:d8:00:b1:32:7f:78:16:ba:58:0e:38:61:1a:ad:
                    47:7a:da:b1:ff:ee:bb:3d:09:d7:84:0b:82:0a:90:
                    f5:cf:04:e8:7f:af:d4:33:fe:27:91:23:76:90:0e:
                    9d:72:18:2f:d0:df:c4:4c:f2:09:78:d3:b1:5e:96:
                    5d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:DB:C0:3B:D4:CE:DD:90:69:65:CA:94:8C:A5:E0:9B:5B:F6:97:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1/f450ca8c-d4f8-339f-b234-5a0275bc19e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1/5063cd63-15d7-4a40-801a-3f85ef7d09d1.crl

            X509v3 Authority Key Identifier:
                keyid:BF:94:2A:F3:BE:BB:86:15:2B:45:37:7C:86:74:0F:BD:50:BC:D7:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5063cd63-15d7-4a40-801a-3f85ef7d09d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.39.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:58:55:7c:c3:c7:05:e7:a4:52:50:74:e6:48:10:41:f3:4a:
         92:a8:3e:c6:2b:66:d8:e1:68:19:34:7d:42:50:5d:3b:ec:25:
         2a:43:ed:24:73:5a:b4:2b:e5:1f:56:f7:28:dc:40:a2:e4:3f:
         b3:ed:54:a3:44:11:da:f7:f6:92:3e:a8:01:91:f9:fd:b5:11:
         6a:20:87:e7:d3:7b:42:3b:3f:fd:a9:65:06:8f:6d:af:62:91:
         db:d1:a5:1d:35:14:7d:63:ae:f4:87:77:ab:d2:c9:76:52:45:
         5f:54:dd:d3:c3:09:b5:4a:51:a6:31:e1:6c:85:6f:8f:d1:ea:
         85:93:d8:e2:ec:f0:75:4f:11:df:81:64:f1:72:8b:c5:89:6e:
         b2:d9:ad:a8:51:43:43:79:02:06:aa:14:d3:da:b3:eb:26:a4:
         45:7f:ec:a4:a8:1b:48:87:fa:e0:88:0e:7c:b8:02:fb:20:b7:
         90:97:ac:6a:27:e7:55:d5:33:d9:cd:86:46:07:2f:ca:5d:ed:
         c4:02:f8:76:74:87:25:a7:96:6e:82:d1:81:29:e4:0c:88:ce:
         73:5e:4b:09:3c:71:79:6c:4f:75:95:b5:69:2c:dd:35:05:4a:
         36:80:05:1b:08:1e:0a:5d:e4:be:e9:1d:81:0a:23:6d:9f:d4:
         b5:f5:fa:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:56:55 2025 by rpki-client