Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/0c109f68-e32d-303c-be34-d9916fbbcd5f.roa
File:                     0c109f68-e32d-303c-be34-d9916fbbcd5f.roa (raw, json)
Hash identifier:          G3FPFludCoxe6WpVj75RigFZ9H/X43IsTSVgt8r/WfY=
Subject key identifier:   73:77:92:1D:F6:82:7F:EB:73:B6:6B:CA:E8:27:EC:6F:17:7F:CB:27
Certificate issuer:       /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial:       010D0C9F43285849F43F48E9198359B291335688
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/0c109f68-e32d-303c-be34-d9916fbbcd5f.roa
Signing time:             Sat 24 May 2025 00:38:34 +0000
ROA not before:           Sat 24 May 2025 00:38:34 +0000
ROA not after:            Fri 22 Aug 2025 00:38:34 +0000
asID:                     141001
IP address blocks:        216.38.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f4:3f:48:e9:19:83:59:b2:91:33:56:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
        Validity
            Not Before: May 24 00:38:34 2025 GMT
            Not After : Aug 22 00:38:34 2025 GMT
        Subject: CN=47703cf4-33d3-4412-8317-184d7c8256ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ee:4c:d8:14:4b:5b:57:e8:c4:cb:01:37:9f:
                    d4:d3:82:71:26:7c:fb:1d:6a:b2:95:ae:8c:74:e0:
                    5e:b9:07:82:16:de:e0:20:b1:d5:60:11:bf:e4:cb:
                    ae:44:38:63:a6:e1:92:af:e9:cc:ad:f1:a6:a0:1a:
                    92:c8:29:e8:10:eb:87:45:fe:ae:b6:b8:a1:7a:50:
                    5f:d4:be:0d:de:c8:58:56:c9:24:f2:a1:e1:79:b8:
                    30:b0:b0:b8:83:a7:f5:b7:71:6b:8a:61:e1:53:c3:
                    61:c9:e5:71:9d:00:ee:f6:0e:02:b2:2a:1b:ba:dc:
                    53:1a:d4:f3:53:4c:fa:bc:d4:b2:6c:02:76:48:b5:
                    ce:c2:7b:ba:4e:cd:ef:5c:55:71:f1:09:38:6b:d4:
                    d5:95:e8:28:73:ae:9d:5f:5a:c4:a1:53:7f:ca:ef:
                    f0:5d:02:ee:84:29:cc:f0:2a:29:49:4e:3d:e4:0d:
                    62:65:42:f8:28:9c:93:30:be:14:1a:70:ff:f2:9f:
                    d4:a7:67:b1:92:14:18:9e:c5:d2:59:23:d2:08:f6:
                    60:b7:72:75:36:36:2f:ce:9d:e4:cd:ab:e9:da:48:
                    76:08:db:3f:3d:d6:81:a6:ef:42:1a:35:eb:ef:d1:
                    74:02:a1:da:ae:68:85:83:7c:49:31:c3:1d:29:52:
                    9d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:77:92:1D:F6:82:7F:EB:73:B6:6B:CA:E8:27:EC:6F:17:7F:CB:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/0c109f68-e32d-303c-be34-d9916fbbcd5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:e3:39:75:b7:d8:91:a1:e7:b1:ad:5b:39:70:68:35:69:99:
         ed:86:ab:f7:25:7b:c7:00:e3:6b:9b:54:74:f3:c6:4b:78:0f:
         f2:b1:c4:5b:ed:85:70:d7:4a:e2:89:fc:42:51:5b:eb:b5:9d:
         af:e6:cb:a8:26:f6:28:dc:81:c6:c0:7d:86:4e:93:43:50:7f:
         2a:57:f8:bb:6a:a6:2f:68:59:56:cf:7a:36:57:3f:74:73:b4:
         79:05:e4:a7:d7:a1:44:35:44:ff:b8:53:fa:06:ff:cd:86:14:
         f7:12:62:60:eb:35:d1:70:a7:61:63:4b:0b:1a:8c:2d:e4:02:
         fd:bf:16:82:c3:ae:3e:ab:a3:43:66:58:32:8d:53:a3:82:e2:
         10:1d:62:cb:eb:c1:77:00:92:ab:fe:fc:5f:9a:af:10:7a:05:
         75:25:21:c5:2c:52:1d:fd:2f:06:58:b5:29:c5:04:83:fc:0a:
         61:65:b7:60:32:f6:28:c4:d8:eb:2f:a7:60:d9:a9:a1:78:48:
         39:9c:c2:35:b6:1a:7e:62:c1:5d:29:8d:d4:98:55:c8:a8:3f:
         9e:99:75:dc:81:91:46:6c:57:20:72:2f:0f:0c:e0:60:0f:ad:
         c5:16:75:bb:59:38:96:87:0c:9f:c9:78:7a:e8:7b:7e:df:55:
         0b:fc:69:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 21:05:51 2025 by rpki-client