Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/53b43a00-ba9d-3fbd-b183-d3bc921fdb09.roa
File:                     53b43a00-ba9d-3fbd-b183-d3bc921fdb09.roa (raw, json)
Hash identifier:          jCVIUp7lGfnJdmFvOxQhYq0M3qNNPB5ouS5XT7P42Pg=
Subject key identifier:   FD:CE:96:45:FB:A6:DE:88:17:C4:DD:C8:4E:A3:43:0A:40:32:BD:69
Certificate issuer:       /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial:       010D0C9F43285849F9DFD4BA71486133F9F78980
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/53b43a00-ba9d-3fbd-b183-d3bc921fdb09.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     394708
IP address blocks:        216.255.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d4:ba:71:48:61:33:f9:f7:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=c5caba7e-df11-4c9b-aae1-7d9e3ce7ce01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:18:a2:2f:80:db:34:cd:b8:ee:25:12:14:e0:
                    5c:54:23:91:d9:19:56:d5:62:30:c9:b7:2f:44:62:
                    ab:7e:79:20:6c:6f:7b:c7:7a:e5:f1:bc:27:f5:7e:
                    ec:6a:ef:79:8c:7b:94:27:e6:08:c6:b7:7e:36:04:
                    87:12:ce:0d:34:f7:15:d4:fa:ca:e5:86:a8:22:d8:
                    9a:a6:7d:73:97:08:3a:6c:75:1a:4d:73:c3:42:56:
                    68:01:4f:48:2a:6c:23:3d:4e:36:6e:3b:49:28:42:
                    bc:19:e0:2e:cf:8c:36:db:b2:65:48:dc:a8:99:ed:
                    95:27:ce:e7:f5:81:1e:68:1e:a2:87:cf:b4:d2:ba:
                    85:7d:2a:ad:4b:d4:32:e2:a1:e0:65:e0:1e:b0:36:
                    58:5f:3c:eb:a7:d3:fd:61:d4:07:68:91:0d:79:11:
                    6a:99:3b:f7:5c:a6:87:4c:b3:06:e7:ed:f6:1b:8c:
                    ef:94:18:5a:27:7a:bc:b6:ac:d3:79:0e:05:69:3f:
                    5f:09:1b:89:2b:8b:a0:e8:12:51:23:36:9f:1a:10:
                    20:78:d9:8b:33:7b:77:c4:24:e4:fe:7e:f2:db:d4:
                    2d:0d:7b:f2:02:76:ca:fc:62:a0:13:fd:42:a1:34:
                    4d:9a:92:7e:00:21:16:63:15:bd:df:2e:bb:c6:a4:
                    c7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:CE:96:45:FB:A6:DE:88:17:C4:DD:C8:4E:A3:43:0A:40:32:BD:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/53b43a00-ba9d-3fbd-b183-d3bc921fdb09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl

            X509v3 Authority Key Identifier:
                keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.255.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:f7:7d:e2:2b:15:be:a4:27:8a:6a:82:95:29:72:41:15:e8:
         ab:c2:ab:65:b1:0d:5e:ee:08:cc:ef:07:12:45:b2:c4:75:78:
         a4:fa:ec:e3:b4:c6:77:08:8d:3d:03:40:e7:89:af:14:ba:d0:
         e9:38:03:f2:71:2a:22:19:f1:77:02:56:b5:b9:63:0a:f2:be:
         d6:06:1e:25:a8:38:7b:6f:4f:9f:bb:29:9f:9e:30:34:66:d8:
         59:18:84:23:01:d3:37:ba:62:9b:13:4b:4e:21:b3:5a:f8:5b:
         dc:92:f6:1a:80:ec:9a:04:6f:ca:96:cf:a5:e5:d9:1c:b0:bd:
         f2:83:4d:a7:7c:0e:53:a7:cf:74:45:ec:f0:96:00:fe:54:b5:
         5b:27:60:62:1c:5d:27:83:f2:89:27:e8:24:ba:d4:9f:a5:eb:
         b8:a9:fc:21:fd:ab:78:d3:b2:8b:7d:91:96:f7:a8:1e:ca:45:
         fe:3f:4e:7d:96:ba:53:7d:87:8e:7f:70:fa:68:d9:20:49:14:
         ae:80:92:b4:7c:a8:e6:a6:fa:02:7a:56:3b:f6:5c:22:0d:57:
         b5:c8:c7:5e:25:be:3e:24:3e:a4:f0:9d:ff:57:8a:9c:cc:17:
         a1:8e:b8:26:bf:a3:de:f4:df:fa:f0:17:a5:65:99:87:de:d2:
         60:68:96:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:29:20 2025 by rpki-client