Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca9374bc-36ce-3c49-aaad-74ef848230c7.roa
File:                     ca9374bc-36ce-3c49-aaad-74ef848230c7.roa (raw, json)
Hash identifier:          GCrxY6fCM1dj6vbciVU3FKSM9e5YbImBIecjcDgRVLM=
Subject key identifier:   AD:58:B9:E7:EE:F4:A5:D7:CD:7C:D2:FF:25:2F:E5:C4:69:76:63:98
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAB493B81462A67196CA80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca9374bc-36ce-3c49-aaad-74ef848230c7.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     3848
IP address blocks:        216.208.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:b4:93:b8:14:62:a6:71:96:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=c5eb75d5-fc43-4aa3-9a8a-d7a5b7f7b3fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e3:34:76:e9:25:64:cd:15:e0:0a:eb:f5:84:
                    cd:09:03:3e:dd:85:1b:33:a8:7b:90:3a:d0:72:70:
                    57:17:43:2b:22:62:ba:3b:fb:d7:a7:58:c1:74:5f:
                    30:34:20:47:98:fe:a2:d9:d5:c6:a7:96:be:cd:4e:
                    5a:da:47:1c:df:f7:48:30:1c:b0:20:f8:f9:35:ae:
                    2d:ea:26:67:a8:31:1a:19:e6:b3:fd:16:2d:c5:f5:
                    50:ae:3c:1b:87:7a:d4:34:86:cf:33:e2:84:24:b9:
                    b3:a7:ff:87:e4:65:06:72:53:0b:04:fa:41:82:29:
                    8b:6a:ab:c1:4c:16:16:ee:16:4f:1e:9b:3a:a4:29:
                    7d:5d:b1:54:03:9b:c3:a3:55:0f:7d:6c:b8:fa:c6:
                    82:77:52:fd:41:ec:f1:cf:24:99:0c:4f:ec:90:2a:
                    a2:83:f0:2b:d3:bb:51:56:2f:fe:a6:81:e4:48:1d:
                    1c:18:a2:ad:28:bf:7c:b2:58:21:f1:d7:5b:fd:3b:
                    fe:87:af:2d:63:6d:e1:41:4d:e0:c6:44:94:4b:47:
                    b9:a4:97:d8:96:12:81:de:2e:a9:71:8f:72:13:fe:
                    dc:41:e2:ba:b7:2f:d5:f6:a5:e7:47:5a:26:76:37:
                    6c:95:04:1c:cf:0b:5b:59:5b:28:55:2d:76:35:19:
                    b1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:58:B9:E7:EE:F4:A5:D7:CD:7C:D2:FF:25:2F:E5:C4:69:76:63:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/ca9374bc-36ce-3c49-aaad-74ef848230c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:69:cb:92:26:39:9e:ef:ec:a5:43:43:ca:4a:22:87:c2:e6:
         95:f9:94:ca:21:fc:b4:1b:4a:1d:2f:50:5c:50:91:68:56:3b:
         65:82:55:4f:4e:6a:3e:4e:6b:f1:f8:69:e0:7d:52:7d:56:dc:
         b8:ba:a4:62:e9:b4:5d:89:97:45:11:d5:50:f7:f9:98:46:e0:
         a6:24:99:be:df:23:00:d9:4a:63:50:14:af:de:40:f6:61:a3:
         cc:3f:4a:4e:df:55:c7:8b:89:2f:3b:a3:8c:97:c3:e1:79:eb:
         63:3a:b4:75:3a:91:01:dc:0d:61:5c:9f:28:32:2b:32:1a:39:
         66:f6:1b:84:66:22:60:b6:5c:fb:09:04:e9:3b:b7:2e:bb:6b:
         16:2a:5f:6b:ec:3c:69:19:bb:17:40:7e:08:86:5a:39:69:9d:
         cd:39:2e:e3:c7:a3:6e:82:7d:88:a3:0c:84:a2:6b:22:3b:5b:
         c8:6f:f3:3b:bf:c7:cb:b5:ae:d6:bc:0a:21:e5:e9:31:54:34:
         c5:71:de:47:15:20:84:41:89:e4:2d:0f:02:0e:26:18:09:76:
         d4:8c:72:66:f6:a4:03:43:6b:89:2f:67:76:07:47:b8:c5:e8:
         41:d1:b8:ab:d7:d7:eb:6e:a8:49:41:e7:4c:93:72:5c:67:85:
         ec:9d:a8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:08:58 2025 by rpki-client