Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d25fb3a8-25d0-4103-a2fa-c36eb6982909/4e0e6ee2-30b3-35dd-ae07-cac6ad2fc4ca.roa
File:                     4e0e6ee2-30b3-35dd-ae07-cac6ad2fc4ca.roa (raw, json)
Hash identifier:          EhTfPBFCYRyCHKF+QM4kxUn+IXgkptzDlpMYB4ujL2I=
Subject key identifier:   16:F2:87:63:20:8F:B1:47:10:BE:94:27:77:55:67:E7:04:AD:AB:C3
Certificate issuer:       /CN=d25fb3a8-25d0-4103-a2fa-c36eb6982909
Certificate serial:       010D0C9F4328584A1F9016FF94165E9F44BDF2C0
Authority key identifier: 4A:8D:F4:69:C9:18:68:F9:C5:66:99:76:71:FF:A8:51:2F:91:48:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d25fb3a8-25d0-4103-a2fa-c36eb6982909.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d25fb3a8-25d0-4103-a2fa-c36eb6982909/4e0e6ee2-30b3-35dd-ae07-cac6ad2fc4ca.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     395824
IP address blocks:        216.87.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d25fb3a8-25d0-4103-a2fa-c36eb6982909/d25fb3a8-25d0-4103-a2fa-c36eb6982909.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d25fb3a8-25d0-4103-a2fa-c36eb6982909/d25fb3a8-25d0-4103-a2fa-c36eb6982909.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d25fb3a8-25d0-4103-a2fa-c36eb6982909.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:16:ff:94:16:5e:9f:44:bd:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25fb3a8-25d0-4103-a2fa-c36eb6982909
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=4d143708-15dd-4421-852c-3271a05419d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c7:f2:df:ed:5c:49:f8:f3:13:61:26:6d:43:
                    e4:21:a6:4e:f4:de:d2:fb:07:d5:74:db:60:fc:f0:
                    7b:f1:9e:18:15:01:13:6d:f4:6f:af:78:b3:ef:0d:
                    fc:ef:42:35:97:a8:6b:07:b5:84:1a:e3:63:fe:28:
                    70:c8:ca:cf:0d:bc:f7:f3:f9:2b:4c:dc:46:5c:6b:
                    9f:61:96:70:8b:ec:c0:c7:80:36:87:26:a8:d7:96:
                    54:ba:35:43:20:aa:62:a1:8a:94:39:c7:26:b5:c3:
                    ce:fc:b9:e6:6b:e2:81:22:31:2a:b1:20:ac:9b:68:
                    d9:82:02:ab:aa:1c:fe:c7:d3:0e:83:91:6f:98:78:
                    51:1d:82:18:65:99:09:73:62:1b:8f:80:e6:0b:65:
                    85:5b:65:d2:eb:e7:d0:62:74:e5:af:9d:ca:22:68:
                    e4:26:d4:5c:62:bd:d7:f0:fd:d4:5b:a2:e2:1e:fe:
                    d2:39:8b:82:42:ca:a6:69:7b:c4:f3:e4:23:ca:53:
                    a9:59:5d:5c:41:c7:ee:73:2e:77:7f:a6:fc:e2:7d:
                    35:bf:ca:3e:bf:df:28:43:b4:ee:0f:7c:63:7c:51:
                    d8:be:e3:8c:06:b0:35:28:1f:be:01:4c:ec:4c:49:
                    7d:3c:9e:94:22:dc:73:62:54:ac:65:1c:82:97:36:
                    35:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F2:87:63:20:8F:B1:47:10:BE:94:27:77:55:67:E7:04:AD:AB:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d25fb3a8-25d0-4103-a2fa-c36eb6982909/4e0e6ee2-30b3-35dd-ae07-cac6ad2fc4ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d25fb3a8-25d0-4103-a2fa-c36eb6982909/d25fb3a8-25d0-4103-a2fa-c36eb6982909.crl

            X509v3 Authority Key Identifier:
                keyid:4A:8D:F4:69:C9:18:68:F9:C5:66:99:76:71:FF:A8:51:2F:91:48:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d25fb3a8-25d0-4103-a2fa-c36eb6982909.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:69:82:4c:2b:7b:33:e8:9e:a0:cf:f7:92:cf:37:da:b1:b8:
         66:b8:fa:79:8a:f1:45:e6:83:79:52:70:be:08:de:ea:6b:30:
         4f:44:02:cb:30:27:b2:7a:20:2d:bd:fa:65:f4:ae:27:1f:86:
         a6:87:9a:df:99:36:35:ab:2a:6d:fc:3f:9c:4d:8e:15:f8:cd:
         9a:03:d8:99:27:bd:b2:30:3a:a6:14:57:8f:69:2e:e4:fe:cd:
         cb:9c:ca:65:44:2a:d4:40:63:b2:e8:b5:f9:68:37:7d:73:5f:
         ba:6c:bd:f6:4d:a4:bb:bf:ea:5d:e5:ac:c9:58:8e:c5:71:53:
         4a:d4:6c:a3:dd:a8:2e:ed:d7:8a:14:ac:98:fe:75:5e:79:39:
         4a:38:bc:73:ee:18:3b:c3:c7:84:78:93:dd:64:ac:c2:9e:8a:
         35:a6:b2:16:fc:12:be:d8:18:e1:d6:3b:15:11:d0:ec:65:26:
         91:5e:17:ff:25:f2:8b:18:4a:f3:24:04:b5:6e:04:98:60:c3:
         00:8a:ff:a5:2b:90:c5:e1:33:bb:fa:9b:70:22:c2:50:cd:c8:
         ff:8c:9c:a2:45:c6:e6:b9:7b:46:70:27:83:36:62:50:de:a3:
         24:8c:28:d4:a5:44:64:22:62:33:79:99:c2:e1:9f:e2:7a:d3:
         18:ab:09:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:12:09 2025 by rpki-client