Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/ed519ae3-6240-3f23-be5f-0f12cf3d773c.roa
File:                     ed519ae3-6240-3f23-be5f-0f12cf3d773c.roa (raw, json)
Hash identifier:          3P1QGOy2xmf236LzX0D/sZ6EKqm4W0foC4SlqZ4daao=
Subject key identifier:   E6:50:39:C3:B6:96:3F:F2:67:D7:1B:53:61:40:C4:87:59:3D:4B:37
Certificate issuer:       /CN=bf862f27-363f-42ce-ab7e-31739b3660a0
Certificate serial:       010D0C9F43285849F715276D2206BA2629FE7F40
Authority key identifier: FC:C9:FE:DA:2C:4E:20:D6:E2:7B:36:27:5C:01:34:62:A4:64:DA:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/ed519ae3-6240-3f23-be5f-0f12cf3d773c.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     40355
IP address blocks:        216.38.228.0/24 maxlen: 24
                          216.38.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:27:6d:22:06:ba:26:29:fe:7f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf862f27-363f-42ce-ab7e-31739b3660a0
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=d299f7f3-1352-4cf6-9243-9776627be9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6c:b6:d9:45:3c:c0:28:12:86:f3:a0:3d:2e:
                    28:e8:d0:61:53:c1:fd:78:4c:bf:bb:c6:01:46:a3:
                    7c:be:8e:d0:b5:57:32:c7:9b:02:29:21:35:b4:0b:
                    f1:d1:41:1d:ec:16:b1:07:22:0a:35:6a:0f:2e:e0:
                    e5:03:78:ab:86:26:06:ba:41:03:d8:e6:fa:41:33:
                    be:86:bf:41:b7:dc:f5:12:25:bf:df:ca:a6:ba:b5:
                    c3:54:a8:77:1b:e4:01:01:a0:0a:03:77:3b:2e:fb:
                    88:bb:cf:be:98:2b:93:bd:42:6c:60:e0:01:ba:80:
                    8f:4d:f3:27:b8:19:4a:71:50:d0:6c:93:7f:c3:86:
                    7b:7d:f5:11:fa:b9:92:f8:c9:f1:c3:dd:ef:ff:6d:
                    fd:ce:68:1e:ca:63:86:52:52:3e:cb:05:35:96:f4:
                    8e:84:79:5c:8b:db:0a:15:94:60:2b:91:67:5d:c8:
                    9a:98:2f:b9:03:35:6d:6e:3f:c3:1f:05:9f:bf:f0:
                    ad:67:86:2d:4d:4e:cb:25:35:37:31:0e:94:47:e8:
                    d3:dc:8f:a1:23:19:56:d1:50:15:81:6f:39:e7:2d:
                    c8:44:fb:e2:46:55:11:5a:bb:9c:77:0c:fb:4f:6d:
                    bd:f4:5f:9d:43:7f:3f:45:f4:70:ee:90:fd:09:1c:
                    2d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:50:39:C3:B6:96:3F:F2:67:D7:1B:53:61:40:C4:87:59:3D:4B:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/ed519ae3-6240-3f23-be5f-0f12cf3d773c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0/bf862f27-363f-42ce-ab7e-31739b3660a0.crl

            X509v3 Authority Key Identifier:
                keyid:FC:C9:FE:DA:2C:4E:20:D6:E2:7B:36:27:5C:01:34:62:A4:64:DA:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf862f27-363f-42ce-ab7e-31739b3660a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.228.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:7c:17:24:0c:fb:e2:95:b3:91:78:5e:04:f0:57:d6:6f:49:
         9c:39:49:ac:93:c2:40:4f:ad:ab:8e:91:17:8f:9b:92:c7:46:
         fe:2d:a5:77:d6:cb:7a:d0:da:03:0e:70:63:66:c4:60:1f:30:
         01:79:95:f5:47:0e:5f:83:82:89:21:60:97:05:98:53:46:ac:
         c0:c9:cd:a5:2b:00:71:12:06:60:b2:e7:5d:31:37:f8:98:cd:
         69:c1:f6:31:59:c1:97:34:4d:09:10:fb:b7:ea:e8:76:c8:8f:
         ac:50:3d:73:53:dc:4f:ee:8b:83:cd:2c:27:cc:03:9b:03:11:
         33:a2:3a:c4:31:e0:74:92:00:e9:ad:d7:ae:39:b5:57:ed:2d:
         dd:cd:49:08:b2:8d:e0:18:9f:2d:97:1c:8c:3e:9c:67:82:9f:
         16:6f:bc:4f:27:28:83:5a:51:7a:66:4a:91:64:7e:b4:05:ca:
         7b:64:93:d9:93:76:2e:8c:d0:c3:85:18:00:8c:40:40:96:e8:
         9e:b5:e4:46:7b:3d:83:3f:11:33:62:24:ca:21:69:a8:1f:a9:
         c2:8b:27:71:9c:a7:c7:8c:81:e6:ee:db:5d:23:e5:ef:0e:e1:
         05:bb:54:9f:c2:8c:a6:e8:2d:b8:47:b6:31:2a:d3:1e:7b:b6:
         e7:40:d4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:26:33 2025 by rpki-client