Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/581ed79e-9321-37ac-ad9d-1c8ba6a9e867.roa
File:                     581ed79e-9321-37ac-ad9d-1c8ba6a9e867.roa (raw, json)
Hash identifier:          N7tx/UFYVR+1tb2flhSCsk2ZpsvbrNFHsbiDAvp0oBU=
Subject key identifier:   79:CE:A3:61:C0:4B:C9:7C:3B:99:67:BC:2B:D5:E6:41:BD:5C:F4:12
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F43285849D85FBD42D01C01EBCF6BF400
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/581ed79e-9321-37ac-ad9d-1c8ba6a9e867.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     394230
IP address blocks:        216.66.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:bd:42:d0:1c:01:eb:cf:6b:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=c0b64514-34f9-4df6-a056-89718c862574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:36:91:3b:90:23:c7:81:d7:a7:3b:ef:19:80:
                    f4:56:5a:d2:44:f1:7e:62:bb:43:4d:19:30:e8:af:
                    00:f5:40:62:a3:f1:28:e1:39:76:a3:96:df:72:52:
                    0a:7c:6e:d5:92:20:62:21:9c:50:7e:9a:73:dd:1e:
                    0d:3c:16:77:fb:e9:fb:80:95:f9:12:be:0b:6c:b3:
                    97:30:4a:ce:68:32:75:b7:96:d1:dc:4c:d8:8e:ee:
                    0b:7a:47:f8:bc:79:c2:19:d1:8d:df:0b:a7:90:58:
                    57:5f:b7:f3:81:ee:40:bc:ef:aa:29:da:1c:5a:9a:
                    d9:1e:3f:da:0f:5c:7e:52:ab:9d:fc:77:48:45:48:
                    e8:7e:8b:68:a9:dc:bf:cd:5b:3a:11:29:89:4b:08:
                    db:9c:f7:ac:09:7c:76:c9:68:0f:19:55:2d:2e:0d:
                    da:f0:8b:bf:f4:72:1d:a0:50:fd:d8:3e:50:51:16:
                    e3:a4:34:33:d0:68:0e:23:16:d6:f7:e8:ed:a7:ca:
                    0f:95:d9:22:ad:a1:b7:d9:d1:ae:d7:ac:47:f6:54:
                    3d:e9:f6:51:32:6c:1f:cc:2a:2a:96:f6:46:f9:e1:
                    67:03:b6:d9:a6:7c:3e:4c:ed:d4:fb:69:ad:0f:e9:
                    8e:ee:6b:4b:bd:c2:78:2e:89:64:1f:88:5f:fc:2e:
                    2a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:CE:A3:61:C0:4B:C9:7C:3B:99:67:BC:2B:D5:E6:41:BD:5C:F4:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/581ed79e-9321-37ac-ad9d-1c8ba6a9e867.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:07:17:85:7c:e6:7c:ac:b1:b8:b1:d6:27:98:97:20:00:e1:
         ca:17:b5:67:65:36:3b:45:f1:19:00:bd:8f:4f:bd:95:52:d2:
         c5:86:a2:23:44:3b:2d:fa:a4:46:11:16:2f:ca:a5:51:47:05:
         42:16:46:b7:21:bc:45:8c:e8:a7:2a:0b:d4:82:96:f4:2b:bc:
         a4:5a:3c:e2:f3:9a:72:72:2b:fc:7b:30:db:04:1c:fa:58:0c:
         47:b3:82:21:11:c0:e9:5e:28:e6:8b:0c:a6:61:7f:9e:43:f1:
         fd:f1:3a:d5:e8:fd:6e:f7:26:85:87:82:53:4e:df:d0:89:68:
         06:f7:ae:0c:43:55:9a:b8:f1:8e:41:e2:e4:ff:18:c4:0d:4e:
         63:c3:ec:5e:b2:17:2c:6a:ec:7b:9e:2f:bd:2e:29:1b:7c:20:
         36:79:31:e1:8d:d3:9a:3c:ec:a4:72:d8:18:55:06:86:18:a9:
         e9:1f:c5:76:92:c3:ce:e9:55:f8:f9:48:d7:0c:18:41:f4:e3:
         ea:cf:10:0f:46:aa:89:c8:7d:f2:60:d0:2b:d1:6b:65:a1:90:
         3c:66:2a:67:1f:55:bd:fe:db:f7:b5:a1:5c:1e:86:d2:c5:ee:
         c5:1a:78:86:77:2b:6b:07:24:91:5c:c4:0c:f6:8b:12:0e:97:
         4e:b9:0e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 17:58:16 2025 by rpki-client