Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddbe2504-0a2c-3b73-9f6a-7b58fd3ead71.roa
File:                     ddbe2504-0a2c-3b73-9f6a-7b58fd3ead71.roa (raw, json)
Hash identifier:          SCu2jwfXH7XqNeFjTD8mw25Jalma02cESLfI/wgOlJA=
Subject key identifier:   CD:C1:2A:DB:3F:61:58:AD:3B:5D:CA:DE:99:9C:53:3E:77:23:AE:4A
Certificate issuer:       /CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
Certificate serial:       010D0C9F4328584A4F7538EABF77F7B34989FF00
Authority key identifier: 68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddbe2504-0a2c-3b73-9f6a-7b58fd3ead71.roa
Signing time:             Wed 25 Jun 2025 16:45:49 +0000
ROA not before:           Wed 25 Jun 2025 16:45:49 +0000
ROA not after:            Tue 23 Sep 2025 16:45:49 +0000
asID:                     14956
IP address blocks:        216.126.224.0/23 maxlen: 24
                          216.126.227.0/24 maxlen: 24
                          216.126.236.0/23 maxlen: 24
                          216.126.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:75:38:ea:bf:77:f7:b3:49:89:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3049800-ff17-49a6-b029-ec908e1c7cb3
        Validity
            Not Before: Jun 25 16:45:49 2025 GMT
            Not After : Sep 23 16:45:49 2025 GMT
        Subject: CN=b1779d4a-3930-4cf5-be08-072af2b74174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:01:3c:c2:9f:c4:aa:11:67:27:e6:41:23:eb:
                    9a:f2:1b:12:3b:e4:23:b4:d2:8a:b5:b3:1c:b8:aa:
                    0a:eb:74:c6:06:de:f6:48:07:8d:79:76:77:df:ee:
                    da:0d:77:bc:3e:9c:9f:f1:17:c9:17:44:a8:ff:0c:
                    6d:8f:bd:b4:a5:83:11:7b:96:17:18:c6:72:ff:fa:
                    a3:1e:be:84:3d:5d:aa:15:1c:81:bd:57:46:2b:72:
                    58:82:a5:5c:39:f6:0c:d6:f7:53:22:64:b6:19:9a:
                    62:19:99:84:b0:6b:c7:bd:39:5c:35:05:54:89:93:
                    d6:25:12:a1:fe:40:85:3e:a9:4a:b0:00:a9:59:17:
                    cc:98:4b:a3:04:4d:73:8b:8a:06:0c:c1:f4:fd:03:
                    e3:b0:f1:c4:11:bf:b4:38:bc:07:97:d3:2d:d1:e7:
                    6c:ff:ef:73:ce:4b:ae:cc:4b:6b:56:4f:17:71:99:
                    da:c5:00:99:5a:aa:df:da:d6:25:11:44:ce:18:38:
                    c4:dc:60:f0:68:ed:17:4b:80:a3:c5:2b:9a:3b:82:
                    b1:f5:6e:60:f7:28:85:2b:28:24:7a:a1:6a:e3:26:
                    82:43:51:54:28:8f:0c:56:03:60:07:b4:66:f4:70:
                    b5:d3:ac:35:77:89:37:cf:be:56:03:46:81:a3:84:
                    f0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C1:2A:DB:3F:61:58:AD:3B:5D:CA:DE:99:9C:53:3E:77:23:AE:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/ddbe2504-0a2c-3b73-9f6a-7b58fd3ead71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3/a3049800-ff17-49a6-b029-ec908e1c7cb3.crl

            X509v3 Authority Key Identifier:
                keyid:68:23:CA:29:BD:91:A1:49:CE:95:E6:5A:B1:0F:66:B3:85:67:6C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a3049800-ff17-49a6-b029-ec908e1c7cb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.224.0/23
                  216.126.227.0/24
                  216.126.236.0/23
                  216.126.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:e4:05:53:c8:18:00:5b:0d:3c:6b:cb:fb:3f:8c:f1:bf:25:
         e1:5a:e4:3f:a1:99:36:8e:b8:e3:20:be:84:3e:de:10:69:0b:
         f7:8c:62:f3:cf:1c:79:9d:b3:7c:f1:9d:b2:f9:a1:2d:8c:92:
         de:36:72:62:fb:d4:c2:7d:06:89:99:db:85:3b:f3:8a:9e:f5:
         58:94:cf:fe:e0:b3:62:94:1f:6f:2e:3b:0d:2e:cd:0e:28:5a:
         6b:cc:4f:8f:9a:6c:dd:5d:5a:82:32:d2:00:6c:54:34:8b:84:
         d3:db:b7:08:6b:c2:0f:18:79:1e:04:6e:3d:2c:d1:85:30:71:
         cf:d8:c5:c1:7c:87:f5:d6:ea:f1:ed:ea:cf:d1:d0:ba:14:b4:
         66:bf:24:e9:5b:4b:3d:ab:38:55:d6:41:79:2d:36:58:78:6c:
         a5:dc:c4:43:6a:3b:42:0b:44:52:d4:c3:d4:ff:0d:a1:ea:91:
         57:af:f2:08:a0:4d:c4:7f:21:38:6f:eb:e0:31:b1:a0:e9:72:
         34:1d:bc:2e:e2:58:42:03:b3:0a:ad:cb:38:9a:53:ff:3d:b7:
         16:1e:7f:31:a7:cb:27:c4:e0:09:8b:c1:25:b5:7f:44:1e:86:
         48:75:d4:c5:84:49:67:d8:a5:f0:2f:44:ca:b2:1f:95:82:78:
         b4:38:bb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:35:26 2025 by rpki-client