Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a074f539-947d-34cf-b329-75ecc249357a.roa
File:                     a074f539-947d-34cf-b329-75ecc249357a.roa (raw, json)
Hash identifier:          Ze/VWM28KduvnLERs/8kK+pz24p9OlnOcU919XKNCC8=
Subject key identifier:   01:54:4B:5E:A1:DF:3D:53:CB:43:2C:CF:A7:3D:44:B1:6C:B7:EB:0A
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584A3E45ABAD2C6421F343A6A400
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a074f539-947d-34cf-b329-75ecc249357a.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     16417
IP address blocks:        216.71.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:ab:ad:2c:64:21:f3:43:a6:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=1f0116fc-681d-42e0-871e-4ff592f1d370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:88:d9:0d:85:ec:e5:f2:97:bf:27:89:52:7a:
                    c7:95:db:79:42:71:1a:23:01:d6:a3:d5:29:a3:ea:
                    a8:49:4b:ea:fd:9c:ce:18:dc:8c:0d:6f:70:2f:bb:
                    19:bf:8e:84:e2:41:86:bb:e6:0e:f9:e3:d8:de:9f:
                    de:8e:32:06:db:f3:67:a8:4c:f4:b3:f1:37:a7:ca:
                    a4:48:86:2c:c0:e0:24:83:3c:bf:f9:f8:3e:d8:2a:
                    3e:c5:72:9c:b4:23:3a:e7:c8:9f:57:57:af:60:af:
                    04:33:c9:8a:2c:4f:60:75:4c:54:23:36:f6:a6:41:
                    64:15:91:0a:c0:f7:66:e8:26:26:92:a2:53:bc:52:
                    e2:19:57:21:36:6b:11:ff:34:5f:57:11:ed:bf:4b:
                    f8:d5:ad:d1:a8:1d:7f:1f:16:10:43:24:90:af:79:
                    8f:e0:ab:bc:81:e9:a5:42:af:41:c0:e9:27:2c:30:
                    a1:57:31:a8:15:9b:ef:8c:76:e3:07:84:7e:b4:85:
                    3b:b0:88:9f:c5:73:f1:83:25:f4:74:27:1c:5e:c6:
                    ac:5d:aa:b7:ed:32:a1:07:fd:27:15:38:da:6e:52:
                    c7:9b:6e:a6:de:b4:f3:25:7e:33:d5:5e:aa:cc:7b:
                    22:19:c6:ea:73:f1:78:58:30:3e:5c:98:a0:5e:6b:
                    31:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:54:4B:5E:A1:DF:3D:53:CB:43:2C:CF:A7:3D:44:B1:6C:B7:EB:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a074f539-947d-34cf-b329-75ecc249357a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:08:4f:57:f6:60:b3:7e:2b:78:55:0a:2a:ee:b3:6d:36:e5:
         c0:b5:d1:a4:73:34:41:7c:cc:86:cb:a4:f9:bc:bc:c3:69:9c:
         06:83:21:db:9b:2f:99:b9:68:3d:9c:c2:70:24:bc:f5:25:17:
         53:aa:0a:a6:42:f3:82:13:2e:5f:ff:e1:e4:1e:f2:0f:de:17:
         f7:48:38:ec:d7:9d:5f:1a:53:18:41:c1:75:83:c2:bb:72:f8:
         08:b9:1c:35:d5:05:da:2b:4c:d1:9e:f1:2d:d4:89:0a:56:51:
         25:e4:bf:52:aa:27:45:f4:e6:06:cc:13:f1:c6:65:3b:11:1d:
         ea:d7:81:2c:9e:70:00:fa:fe:50:c7:21:ff:43:32:41:b4:80:
         5c:c4:c7:85:c5:05:c1:cb:f4:10:45:11:b5:83:44:67:da:3f:
         02:23:1c:19:87:86:eb:df:e2:3b:d2:10:d7:54:a9:30:5e:d9:
         dc:52:04:a4:0a:83:6d:f6:c2:11:5d:ea:53:7a:0f:3d:e9:13:
         64:d3:2a:16:55:37:42:1c:f2:41:b4:56:d2:c4:71:0b:0a:ae:
         29:9f:6a:7d:7f:18:c5:c1:bd:9f:8d:52:b2:1b:27:b1:2c:38:
         bd:7a:2f:e1:e5:82:b2:c6:97:8f:0d:3b:be:7e:4b:5c:29:db:
         ce:f0:59:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 10:37:40 2025 by rpki-client