Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7c9c0f53-d891-3144-bfee-1bcb12654926.roa
File:                     7c9c0f53-d891-3144-bfee-1bcb12654926.roa (raw, json)
Hash identifier:          yfNbURVFv5fcgMqSjk45c63cjRMAEnUiisY1VLT+vfs=
Subject key identifier:   02:3B:7E:B6:AE:13:1A:9E:12:E7:FC:1F:8E:98:2F:DD:CA:BA:62:9B
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F43285849C4D4C87309CEEBD03E06CF00
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7c9c0f53-d891-3144-bfee-1bcb12654926.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     16417
IP address blocks:        216.71.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:c8:73:09:ce:eb:d0:3e:06:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=942a56e3-35f6-4300-8268-368f0447d2c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:da:e1:6c:b6:4e:47:14:4a:4f:c1:a5:7f:69:
                    5a:8a:ef:d0:2c:11:c6:5f:93:f9:e7:f1:df:6e:04:
                    a1:f4:59:d6:dd:f1:48:79:67:e0:63:96:b9:2e:66:
                    a2:aa:6b:43:bd:31:27:11:36:d4:8c:75:0d:04:d1:
                    d2:b3:9e:35:f7:c7:d6:3d:bc:3c:a2:db:fd:f3:5a:
                    73:0c:d5:78:ad:b1:f1:a3:29:2f:a7:62:6f:ba:3e:
                    23:d0:a9:99:49:4c:9b:df:92:16:5e:1b:aa:f8:18:
                    1e:9a:76:d9:62:43:ca:20:ab:e5:e2:1b:83:2b:b0:
                    b6:d2:51:82:5e:95:2f:5c:9a:53:f6:68:aa:db:7f:
                    63:3e:81:ac:f9:4e:cf:ce:c3:87:fe:4e:b5:37:f1:
                    a8:1e:77:14:57:a7:31:54:04:eb:74:da:be:21:33:
                    ca:05:2e:78:bb:34:c1:fa:7d:62:68:1e:50:b3:c4:
                    e3:18:5d:d8:2a:ec:9f:11:e5:7c:3c:1e:76:5d:d7:
                    1e:32:39:4f:1c:27:1f:a8:d0:3d:5d:1d:b7:f1:a7:
                    34:cb:89:9e:d4:94:2a:15:2e:48:09:1a:e4:3e:65:
                    8b:c5:d7:bf:20:3b:6e:e7:7d:3e:d1:4e:13:a6:7b:
                    e0:6e:ef:fb:1f:59:11:4f:92:a3:d5:1d:4e:5a:11:
                    e2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3B:7E:B6:AE:13:1A:9E:12:E7:FC:1F:8E:98:2F:DD:CA:BA:62:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/7c9c0f53-d891-3144-bfee-1bcb12654926.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:7c:5a:4e:e5:fa:ac:33:2c:e1:47:d4:98:68:b7:44:4b:10:
         84:3a:60:15:ea:f1:79:48:8c:a4:1a:48:77:a2:21:94:d2:db:
         a8:b5:cc:f8:79:92:4c:8c:ad:87:99:a9:ba:1e:71:60:2c:7a:
         7c:30:e1:c9:e7:e6:ed:dc:7b:78:fc:12:ce:3f:90:3e:cb:a6:
         74:23:91:c7:67:b8:7c:eb:17:d3:40:74:22:ba:3a:6b:9a:62:
         36:02:e0:da:9f:c5:66:59:ee:eb:35:8b:fd:bf:df:5c:07:20:
         b7:15:49:38:f2:65:db:6a:df:34:97:08:79:5c:be:44:52:42:
         a9:74:b0:70:94:dc:80:0e:8e:5a:3b:74:a3:68:81:a5:36:7f:
         ae:f7:e1:4b:50:38:95:97:55:8a:61:46:54:01:d2:ef:c4:e7:
         e2:18:7b:97:02:ed:51:bf:86:ee:f9:9e:ae:72:91:ba:ee:e0:
         f5:a4:60:82:fd:29:80:9f:9c:44:2a:7d:b8:68:f8:00:fc:39:
         25:dd:19:ae:1e:e2:a4:e2:4b:6a:c7:63:2c:e0:eb:eb:36:86:
         86:56:96:44:de:88:2f:37:ad:18:d7:92:7b:71:c0:b0:5e:93:
         0e:72:24:d2:db:73:61:cb:d9:4f:7c:d3:70:5a:b4:f1:84:07:
         fa:f3:71:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 14:43:35 2025 by rpki-client