Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/f51f63fc-5754-32e4-bf7b-14fea06aa10e.roa
File:                     f51f63fc-5754-32e4-bf7b-14fea06aa10e.roa (raw, json)
Hash identifier:          tRN5qOiI1BpelcQ8u98BzBTBLjUYDz0x/kcMk/naHtE=
Subject key identifier:   C9:98:E8:52:39:77:9D:B0:44:3B:F2:64:F6:E6:62:36:D9:88:5B:F6
Certificate issuer:       /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial:       010D0C9F43285849DB2A27FE105E8C3D8B143880
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/f51f63fc-5754-32e4-bf7b-14fea06aa10e.roa
Signing time:             Thu 15 May 2025 01:00:47 +0000
ROA not before:           Thu 15 May 2025 01:00:47 +0000
ROA not after:            Wed 13 Aug 2025 01:00:47 +0000
asID:                     53991
IP address blocks:        216.105.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:db:2a:27:fe:10:5e:8c:3d:8b:14:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
        Validity
            Not Before: May 15 01:00:47 2025 GMT
            Not After : Aug 13 01:00:47 2025 GMT
        Subject: CN=10148dce-6db5-4fb3-94a1-c686aa1a52e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:46:81:dc:b9:22:3d:68:6d:d6:4a:10:c0:cc:
                    0c:8c:a7:5e:6a:9c:e9:3a:30:43:0e:57:35:13:81:
                    1a:1a:48:23:a9:b9:b6:d1:55:0d:ac:c3:eb:01:dd:
                    92:cd:62:17:e9:9b:32:e2:64:64:0e:fb:e0:67:46:
                    ef:37:99:33:50:c9:86:db:8e:97:5b:91:8c:98:54:
                    70:08:59:cf:80:fd:6e:3f:c9:30:6f:06:08:82:73:
                    9d:83:dd:35:1b:c1:03:6d:b4:ee:3a:5b:64:cd:ab:
                    f4:b9:bc:04:d3:8b:3b:b0:4d:88:13:7a:4f:7d:57:
                    fe:8b:4d:49:42:5c:ad:f9:ab:05:42:01:f9:41:c8:
                    80:ae:17:9b:a3:20:d0:a5:1e:e0:d8:a9:05:ed:18:
                    2d:4b:ba:35:36:da:72:1b:9b:1c:f4:7b:8d:1b:ca:
                    d1:be:c1:e9:40:70:73:f3:cf:21:cf:dd:9b:84:d8:
                    03:4e:54:6d:16:f7:92:14:56:49:fb:07:87:7c:02:
                    02:b9:2c:81:5d:30:c6:36:3a:dc:6d:0f:2e:77:6f:
                    05:e7:3a:be:e1:bc:2c:d0:a5:7a:e4:14:07:54:62:
                    d1:dd:de:6f:1e:90:50:3f:fd:b7:e4:8d:72:b8:fd:
                    64:5c:dc:be:4e:63:20:d7:2c:c7:98:68:d5:89:c1:
                    52:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:98:E8:52:39:77:9D:B0:44:3B:F2:64:F6:E6:62:36:D9:88:5B:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/f51f63fc-5754-32e4-bf7b-14fea06aa10e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.105.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:6a:89:81:35:de:3d:92:ef:c7:1e:40:c9:90:1d:b0:87:a1:
         9c:04:c3:a4:5c:d3:c4:16:7e:03:e9:79:c7:9c:ea:42:e9:18:
         f9:5a:6b:a0:b6:31:19:88:9a:7f:c7:d2:cd:b0:b9:cd:cc:73:
         cb:92:30:73:a0:a2:52:a1:22:b3:ac:d5:bd:1a:08:3b:ae:ae:
         e9:72:d2:74:97:27:a7:2f:25:54:88:86:bb:51:1f:24:39:87:
         0a:43:8b:ec:95:93:a7:59:87:a3:cc:2c:5c:df:95:75:b6:57:
         de:f7:b2:e7:4d:dd:c3:49:2d:72:43:99:26:3f:04:2c:69:6e:
         6f:d7:c1:8c:bd:6a:6f:34:4e:69:21:74:0a:0f:1f:44:04:e1:
         fc:cc:fc:b5:74:8f:a7:ad:43:71:12:39:7a:f0:4c:54:f7:7d:
         57:8b:67:1c:b4:af:74:fb:d2:e7:d1:30:69:6b:da:e4:f9:54:
         3d:54:aa:0f:67:f0:87:9c:f3:8e:1a:8d:49:83:c5:23:f8:4d:
         ea:b8:d5:88:d7:7b:0a:4d:9e:84:bc:51:05:61:1d:0a:27:f6:
         8d:a2:b8:79:0d:7c:2a:fb:73:99:ad:cf:e2:5b:73:e1:49:51:
         8c:7f:92:ec:34:91:52:52:f7:f3:5d:3d:f5:66:7a:1d:72:2f:
         87:a0:0f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:22:44 2025 by rpki-client