Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/3a06afc0-5bbb-3d1d-be77-2946a75b55a6.roa
File:                     3a06afc0-5bbb-3d1d-be77-2946a75b55a6.roa (raw, json)
Hash identifier:          UqWWzUMMw6u5dGfy9N3NDX/X9RfIwFFHQzISn21XFqk=
Subject key identifier:   12:B9:F8:34:88:35:0C:1C:52:84:8E:30:96:25:CE:BA:41:F9:E8:5D
Certificate issuer:       /CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
Certificate serial:       010D0C9F4328584A9FFB9AE7A76942D12A60F000
Authority key identifier: 6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/3a06afc0-5bbb-3d1d-be77-2946a75b55a6.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     36167
IP address blocks:        216.59.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:9a:e7:a7:69:42:d1:2a:60:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=775297bc-4af6-4c32-9911-b856c6d905a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:29:a4:26:df:2e:db:b2:69:65:37:70:1c:e9:
                    e4:58:bd:28:36:3c:57:7f:fb:cd:88:f5:dc:e6:17:
                    9a:79:72:ca:fb:df:8f:b3:ac:c8:16:eb:91:fd:41:
                    a0:f1:fa:02:75:17:70:db:72:25:a8:b0:04:2e:ce:
                    c9:d0:d6:29:0c:33:dc:70:0a:b5:fc:1d:2b:97:49:
                    f0:38:77:78:35:86:a1:23:b6:84:9d:8d:ae:ae:b4:
                    5f:4a:e7:da:ba:27:b3:93:28:bb:72:36:9f:b5:04:
                    ce:f0:db:05:b4:1d:de:fb:24:18:78:b9:b7:a7:d0:
                    89:50:d4:05:7d:84:9a:22:c5:22:83:42:60:b6:2f:
                    16:e1:9b:87:95:aa:bc:ba:1c:d7:22:fb:c0:67:a2:
                    61:78:e2:16:c3:77:e0:f6:b0:f8:5d:ff:43:08:d4:
                    f8:4c:84:04:9d:70:7a:2e:c8:07:88:93:17:26:c9:
                    de:7a:42:21:e3:38:f7:ce:7b:fd:16:4d:a3:fc:a9:
                    b9:d0:de:48:1d:6d:e7:bd:58:df:6a:53:da:11:85:
                    a4:09:60:b0:43:81:1b:35:fd:7d:68:a5:a6:30:66:
                    64:70:7d:a2:d9:0e:6c:47:e6:76:38:9b:b3:e8:80:
                    8d:03:9b:4a:13:54:2b:5f:d2:33:11:73:b8:7c:54:
                    cf:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:B9:F8:34:88:35:0C:1C:52:84:8E:30:96:25:CE:BA:41:F9:E8:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/3a06afc0-5bbb-3d1d-be77-2946a75b55a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl

            X509v3 Authority Key Identifier:
                keyid:6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:e8:36:1d:b0:84:89:68:fb:4a:d3:71:7a:a8:62:4b:bc:13:
         13:1e:0b:3b:eb:c9:11:65:fe:56:e5:d7:6b:a9:6e:be:7e:28:
         d1:ce:56:34:c6:04:f6:80:60:91:ea:31:e0:57:0f:88:98:81:
         8e:bc:49:fa:b8:b8:76:1e:cc:ca:41:84:d0:4d:7a:54:7f:e1:
         34:43:4a:2a:df:fc:bb:d5:8b:63:7a:a2:08:2c:44:fd:4b:99:
         31:3b:05:8e:d1:aa:95:31:e8:e8:08:a5:c1:42:82:24:d3:90:
         97:ac:8f:7e:fa:c6:5b:c5:76:39:2c:e3:86:3d:de:3a:91:02:
         30:cb:b5:3f:59:d6:4b:55:a1:96:81:d3:2f:40:4e:4a:10:80:
         1a:d1:bc:a5:10:4f:97:35:28:3e:cf:84:97:10:6b:6f:fe:c3:
         0a:62:73:9c:d8:19:9b:fd:76:4b:1f:6a:f7:97:22:62:3b:8d:
         69:83:52:f6:81:9e:12:85:34:84:6c:2e:96:f8:6d:cd:1c:e3:
         62:12:99:53:65:1c:1a:b8:fe:60:95:18:b9:67:8f:1c:7a:28:
         4f:6c:d2:68:2c:cb:e7:e2:f6:c8:04:4e:b9:2f:ce:98:71:eb:
         26:48:7b:94:70:ff:02:c3:52:d5:fb:37:3d:e9:91:fc:77:5c:
         31:1a:06:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 22:25:38 2025 by rpki-client