Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e5028175-5311-307b-b633-50ccd9ee601e.roa
File:                     e5028175-5311-307b-b633-50ccd9ee601e.roa (raw, json)
Hash identifier:          OA5cGcwgxn7Knwci/QO6ziub0Szuh0h+hebH2PZoDEc=
Subject key identifier:   BB:B2:1D:E1:A6:34:90:16:54:04:A7:0C:15:4F:06:1D:00:82:43:53
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F43285849E225333C0CAE045CE6303C50
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e5028175-5311-307b-b633-50ccd9ee601e.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     16696
IP address blocks:        199.249.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:33:3c:0c:ae:04:5c:e6:30:3c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=8bf35263-c194-460d-bff6-3a2bf5c7f3f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:36:1b:e3:b9:91:db:30:0c:c1:01:f4:40:3f:
                    07:d9:68:fe:af:1e:78:b9:c5:6a:ea:b7:d9:1d:57:
                    c4:17:47:e1:f9:83:2d:ef:3b:ab:c0:39:f1:07:b2:
                    9a:9c:b0:38:6e:d7:50:89:4f:e7:e6:44:b5:27:db:
                    f7:91:41:ca:b9:b3:02:23:1c:d3:27:dd:29:f0:bd:
                    5a:51:c5:4b:66:1c:09:d2:b4:dd:a1:12:ea:12:71:
                    a4:e3:f5:e0:86:d2:ab:41:b5:5e:8d:90:d8:10:e0:
                    ff:f5:e6:e5:5c:ba:2f:b0:1b:99:ca:fd:75:8f:6f:
                    1b:6e:75:87:6e:22:ca:c8:db:94:29:d0:ec:fc:41:
                    a9:87:42:e6:f9:5f:57:25:bc:dc:48:b6:f6:c6:61:
                    ed:89:38:45:dd:cf:70:4e:a9:12:6d:e5:f1:cf:46:
                    16:d3:ed:8e:7c:03:3f:49:1b:07:1e:d1:c1:98:24:
                    90:2f:6f:ab:4d:d5:2d:20:91:3d:98:95:13:18:4a:
                    56:4b:4f:74:60:41:2f:d4:db:d8:c9:a2:16:39:01:
                    5d:20:c0:66:e6:24:e3:29:5d:b6:c3:26:a0:70:8f:
                    d8:f7:2f:06:88:78:03:e8:34:ba:82:9b:d9:90:d9:
                    00:19:f3:ae:f7:f0:9f:f6:e4:c2:b3:b7:9f:3c:08:
                    e3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B2:1D:E1:A6:34:90:16:54:04:A7:0C:15:4F:06:1D:00:82:43:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e5028175-5311-307b-b633-50ccd9ee601e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:52:89:6c:42:c7:51:1a:f8:a2:ac:8f:39:7e:e0:ca:fd:e1:
         6d:81:20:b8:ed:db:19:51:d0:33:c5:3a:b7:08:ad:de:cb:c1:
         e8:93:b3:8e:11:bd:f3:20:d2:b6:01:26:e4:ed:ac:a7:14:31:
         ca:55:4f:04:6a:e0:95:ee:50:78:d3:24:ed:e1:96:9b:cc:53:
         cb:f1:eb:3b:69:a8:f0:f5:c0:73:6b:c1:97:d7:39:62:bd:64:
         1e:00:f6:54:89:71:6f:c6:7d:5d:d9:1b:73:58:68:c0:2f:10:
         47:83:92:14:85:fd:2e:f7:64:33:a3:b9:97:79:3f:f6:f6:ab:
         04:f3:9b:0e:42:31:cf:6a:53:13:71:1e:71:ac:e6:ee:ea:d6:
         fe:d9:9c:45:54:73:d3:81:f7:22:d4:cc:05:c8:60:fa:29:d2:
         39:20:5d:21:00:f1:d9:e9:3b:fb:fe:06:7b:ef:05:82:68:f5:
         63:11:b6:c4:96:f2:24:7c:2c:9b:bd:bc:45:e4:16:73:17:b8:
         4e:44:0b:e4:2e:2a:87:14:46:08:95:e8:d1:78:ce:86:7b:53:
         8b:98:c8:16:eb:e3:c4:1d:d4:f0:d6:6a:b0:31:33:d5:58:ec:
         3d:77:1b:42:d5:5f:45:8f:6b:4f:22:8c:1c:5d:41:bf:59:95:
         9c:1e:fe:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:59:46 2025 by rpki-client