Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/b7e61ddd-dc6e-3ce2-8c5b-32cb2729ab67.roa
File:                     b7e61ddd-dc6e-3ce2-8c5b-32cb2729ab67.roa (raw, json)
Hash identifier:          bH9zY23J7IBCjmjZ+PNc9ykFMyJHMeRn0KHOL98QiZc=
Subject key identifier:   0A:90:0C:0C:FF:C7:4E:4F:74:93:A6:6A:81:DF:74:F2:27:E9:08:A5
Certificate issuer:       /CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
Certificate serial:       010D0C9F4328584A9FFB9AF7E6A55DAF3F968C00
Authority key identifier: 6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/b7e61ddd-dc6e-3ce2-8c5b-32cb2729ab67.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     53334
IP address blocks:        216.59.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:9a:f7:e6:a5:5d:af:3f:96:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=30778374-dec8-424a-a869-e8f1b0dc4053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c1:da:51:3d:2d:be:07:2d:de:06:ac:db:34:
                    e3:1a:8d:20:e4:7f:a8:67:7f:18:8a:93:43:05:82:
                    56:ce:48:e9:15:fb:13:ba:19:25:6c:3c:05:f9:a3:
                    80:6f:90:dc:33:af:66:a9:7d:ab:af:51:ac:73:b3:
                    a9:bb:cf:de:94:95:f0:51:71:ef:c1:52:33:d7:5a:
                    ac:59:bd:57:d8:e6:85:32:eb:f2:fc:a4:23:08:d1:
                    17:f1:45:f8:ee:d3:21:34:a8:a8:51:e0:41:9f:ac:
                    c3:23:f7:7d:57:6d:c6:e3:d3:f0:23:b2:9b:d7:b7:
                    e7:82:15:1b:f6:fc:02:73:ed:f8:77:e4:60:96:bb:
                    e6:c8:7c:8b:40:9a:e4:d0:c0:ba:2c:aa:6a:bb:bc:
                    d7:62:0d:99:0b:34:2f:e7:e0:61:7b:0c:35:c2:34:
                    91:36:15:ee:95:06:4a:64:11:cf:c3:52:ca:58:8f:
                    13:e0:c2:25:6f:48:f3:f4:ed:9c:0e:5a:36:2a:a3:
                    13:60:0f:6a:28:6e:52:0e:61:86:5a:f9:d4:c0:a6:
                    3e:20:04:2f:dc:27:90:36:f8:54:fd:7e:4a:07:bf:
                    1a:dc:d5:81:83:b2:eb:ad:cb:9c:63:19:a5:d2:66:
                    9c:5e:3d:68:9a:65:cf:01:de:51:fa:79:00:b6:b3:
                    73:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:90:0C:0C:FF:C7:4E:4F:74:93:A6:6A:81:DF:74:F2:27:E9:08:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/b7e61ddd-dc6e-3ce2-8c5b-32cb2729ab67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl

            X509v3 Authority Key Identifier:
                keyid:6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:e1:48:fe:7a:c4:d9:c5:c7:56:45:b4:58:71:e6:93:8e:9f:
         b0:23:0a:ad:80:9d:84:90:6e:8d:dc:1e:f1:3f:95:41:81:4e:
         ec:df:66:c8:70:8c:eb:75:78:d3:0d:64:1b:b8:89:7d:d2:98:
         62:65:71:d3:a3:5e:4f:89:d7:e0:da:37:1c:8f:6f:b2:96:26:
         17:45:ca:ba:8a:f2:a1:83:d5:c9:56:d8:2b:b1:3e:90:ad:13:
         11:15:53:4f:00:8a:27:1f:80:ea:04:cd:86:c2:ca:cc:17:d3:
         8f:d2:5b:6e:6d:58:b0:c2:8f:23:72:dc:1b:9e:e2:99:62:f6:
         ec:6c:ee:e7:20:4a:33:12:e4:54:31:22:c9:4e:69:95:11:b0:
         4b:23:58:e4:0c:ba:c7:2c:4c:31:2c:84:a7:35:86:a1:55:cd:
         59:6b:9b:00:a5:04:48:ac:fe:8e:90:3d:78:2e:06:60:36:9c:
         a4:82:7b:66:c6:db:2b:82:74:2f:8e:49:4a:39:6b:04:70:98:
         9a:73:0c:87:7f:f0:1f:76:e2:69:70:23:ad:d1:f9:a1:5a:71:
         da:9a:cf:c1:4f:0c:07:f0:8d:e2:61:1e:1e:6e:32:96:60:0c:
         47:c3:fe:e3:be:7a:02:c6:99:a0:e8:fe:ef:9c:e9:b3:7a:44:
         79:88:e0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 06:00:13 2025 by rpki-client