Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a860f497-51c0-361c-b3d0-1e3dad4c7c02.roa
File:                     a860f497-51c0-361c-b3d0-1e3dad4c7c02.roa (raw, json)
Hash identifier:          BOwmmTa8tOUqBj2Jpr/e39l4R1woS2cK4D46Hm8wNwM=
Subject key identifier:   8C:3B:4C:04:B0:92:A2:0F:04:4C:95:34:0A:FD:18:CF:D4:6C:B8:53
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584A3E45ABDF0795CDEA9E0579E0
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a860f497-51c0-361c-b3d0-1e3dad4c7c02.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     16417
IP address blocks:        216.71.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:ab:df:07:95:cd:ea:9e:05:79:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=dcbc7e15-7b3a-49bb-a855-a5ebaa0cdfae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1d:21:1e:14:31:d7:c6:b7:65:3c:c0:6c:37:
                    2a:73:d4:7e:26:a2:5e:96:43:93:c4:4c:4a:ac:db:
                    d4:18:3f:0f:49:ac:ed:4b:bf:dd:a5:1a:8c:8e:7b:
                    4a:9c:58:f8:11:2e:2c:10:61:45:a5:ce:eb:42:3e:
                    cc:cc:57:59:7b:35:83:72:e2:4d:4e:41:bb:ac:b6:
                    bb:e8:36:3a:26:3a:a6:a9:f9:a0:83:78:10:8a:20:
                    46:88:38:1f:88:ec:39:c4:93:f0:b5:b6:17:bd:64:
                    a6:4c:87:da:71:43:54:4a:31:6b:2a:f5:31:31:38:
                    a4:e8:d1:81:da:8a:63:d1:87:46:f1:ed:95:31:13:
                    09:24:b4:52:ae:3c:a5:1e:a6:17:62:1d:1f:4e:e0:
                    a5:ee:fe:fa:95:72:63:51:68:bc:b4:0f:4e:3c:6b:
                    a5:5e:47:2a:c7:30:c3:05:3a:e3:fa:af:fc:f3:ee:
                    96:63:ca:86:60:4f:38:2d:d4:c9:dd:a9:6d:d9:19:
                    c2:f1:ea:01:b2:28:83:cb:f3:47:0b:c0:4e:67:2e:
                    9d:83:0f:cd:42:b5:ff:9b:ff:66:75:eb:08:32:06:
                    81:36:a6:d9:d6:a6:b5:8a:a2:2f:ee:89:dd:01:48:
                    e6:00:93:a5:be:22:0b:bc:a9:29:02:c5:0c:8a:fb:
                    48:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3B:4C:04:B0:92:A2:0F:04:4C:95:34:0A:FD:18:CF:D4:6C:B8:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a860f497-51c0-361c-b3d0-1e3dad4c7c02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:8e:2c:0c:fa:dc:72:d1:db:6c:e6:68:2f:26:27:ab:b7:af:
         9f:1b:e1:90:9e:d9:fc:ac:0a:14:2d:73:2e:d9:0e:58:6f:17:
         5e:02:1a:2e:d8:0e:74:fe:2f:f7:81:29:63:71:48:dc:a1:f1:
         a8:52:f7:b4:76:f0:d7:e0:15:43:1c:e5:15:19:ae:bc:f5:ea:
         f7:e2:f7:8e:57:15:a0:87:a6:70:b6:d8:04:7b:bc:5c:c2:7c:
         3e:88:54:20:d3:c9:28:d3:d0:84:5f:54:ea:a6:60:81:55:3d:
         67:d9:89:a6:f7:4d:7a:79:59:58:cd:5d:72:9f:49:ab:41:c5:
         1f:c2:6d:5d:4e:2c:38:c1:d9:55:1b:00:59:d5:a4:1f:5e:73:
         7f:be:8d:18:97:08:37:8d:c4:c6:6e:aa:9b:9c:23:62:5c:90:
         a3:6c:90:29:48:bd:a8:4e:40:b8:ac:3d:bd:38:64:31:df:ad:
         4d:68:89:03:bd:c5:ae:71:98:4b:f8:8d:78:05:5b:b5:a1:75:
         ee:d3:20:ac:25:32:6f:81:c1:38:8c:e1:eb:e0:2d:c7:58:14:
         9c:dc:f5:69:1a:6c:39:52:9e:b2:c2:62:da:19:12:b0:7b:17:
         c1:b5:91:26:48:6b:5a:55:41:3e:48:74:6c:10:3b:b3:1f:f3:
         68:b6:91:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 07:40:29 2025 by rpki-client