Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/059111c1-8037-3bc2-ad66-f0d2659067c9.roa
File:                     059111c1-8037-3bc2-ad66-f0d2659067c9.roa (raw, json)
Hash identifier:          kErGgmPjnlxV0ctXOqMa3fycSbSK42uhfvMdzNwuGCI=
Subject key identifier:   21:E7:17:E4:E1:95:C5:73:68:B4:CE:2A:77:4B:06:D3:46:D2:B7:38
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FDA847DD0C04E413C9F80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/059111c1-8037-3bc2-ad66-f0d2659067c9.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     46872
IP address blocks:        216.66.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:da:84:7d:d0:c0:4e:41:3c:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=003c1860-dd76-47e8-9989-18a1632550d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a4:0b:c4:0f:1c:33:1d:fc:ac:87:37:28:a9:
                    0b:5b:d9:27:6e:94:42:5f:70:42:9f:01:71:ce:8e:
                    86:40:c5:d3:03:cd:e7:32:d3:f7:dd:2a:38:5b:6c:
                    02:72:07:f6:b7:6b:66:0f:9b:d1:aa:49:67:38:d5:
                    25:0e:ac:cd:72:0a:80:a1:fa:48:a7:6b:42:1d:42:
                    db:00:be:6a:e4:03:d3:55:70:f1:bd:6a:94:26:87:
                    8c:3e:a9:a6:b9:f9:3c:96:79:91:d3:9b:33:8c:9a:
                    88:17:59:d9:81:57:62:31:8a:86:1b:ff:50:da:4b:
                    be:bc:03:2f:7f:d1:35:48:12:83:2f:14:eb:a2:df:
                    dd:9b:77:51:b5:a1:71:6f:56:8d:3a:43:cd:99:51:
                    b9:d5:ab:98:bf:70:b3:82:da:d9:f9:3b:f0:09:53:
                    74:fa:9d:2b:e9:28:c8:59:18:de:eb:89:25:6a:6f:
                    df:77:2e:85:24:ad:7d:08:3c:f9:e1:4b:d3:c6:0f:
                    75:b0:15:9c:e0:dd:b7:21:23:71:36:93:83:7f:45:
                    a0:6b:4c:17:fe:6e:3e:37:fe:bf:99:53:b9:e3:2b:
                    fe:92:89:66:c4:3b:1b:6e:4f:a5:ac:21:11:8f:15:
                    e7:84:52:68:e7:31:a4:26:0d:09:57:eb:7f:67:f7:
                    89:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E7:17:E4:E1:95:C5:73:68:B4:CE:2A:77:4B:06:D3:46:D2:B7:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/059111c1-8037-3bc2-ad66-f0d2659067c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:15:90:dd:76:4c:5f:92:1a:20:43:d8:d1:bf:32:3a:10:df:
         26:fd:a2:68:1a:1f:bc:4b:34:fa:15:35:07:6b:76:eb:4d:17:
         5e:90:cd:00:e1:98:d4:24:99:98:2b:9d:d2:76:83:6f:ce:0f:
         f1:52:37:44:c3:d2:49:af:de:0e:33:61:ab:bb:48:61:11:42:
         2e:9f:6c:f4:8b:01:d8:86:ad:4c:b6:2e:90:35:0d:c1:28:93:
         44:48:39:01:84:9c:55:78:ae:57:07:b4:f9:a2:b7:f6:9d:d9:
         f0:17:5d:bf:56:d5:7a:81:82:13:f3:ed:97:2b:62:80:74:cb:
         0e:ee:a3:9f:8c:26:b7:8a:53:29:02:78:9d:a0:e3:72:fc:f7:
         b1:9f:29:b2:c0:be:9d:45:37:18:ca:8b:fe:84:78:37:3c:83:
         1a:af:89:92:47:3c:dd:6d:8c:e9:14:cd:fe:ed:df:20:99:83:
         b4:6f:cc:31:83:2c:39:58:99:54:37:3c:0f:16:24:0c:54:fd:
         e1:69:7d:83:10:e0:4b:76:a6:27:09:07:8a:b1:ee:b7:a1:dc:
         8a:82:df:4c:24:95:e1:47:fc:27:6f:d2:93:7d:de:25:fd:7a:
         d5:98:cd:65:ba:13:1d:41:de:7f:79:03:c5:00:dc:5c:90:02:
         a6:fc:ad:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:11:38 2025 by rpki-client