Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/3ffa981a-91a8-3617-9331-ea8500d52ebc.roa
File:                     3ffa981a-91a8-3617-9331-ea8500d52ebc.roa (raw, json)
Hash identifier:          tyjMVKwXGgtbrIMsQcA92EF2C8Hc2LMbeo+vJF8Jp2k=
Subject key identifier:   E7:E4:44:F6:A2:9C:E9:EA:92:E3:FD:0B:96:E2:E8:3E:49:7F:EC:76
Certificate issuer:       /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
Certificate serial:       010D0C9F43285849F9DFC6D6435492F942DBA800
Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/3ffa981a-91a8-3617-9331-ea8500d52ebc.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     23158
IP address blocks:        67.216.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:c6:d6:43:54:92:f9:42:db:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=8478f72b-9b18-490e-8a89-31a184a50604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:14:0f:09:4f:18:6c:5b:83:63:7a:00:69:f0:
                    09:3c:b1:63:7e:40:22:0c:6b:04:d6:e9:37:da:31:
                    fb:b9:97:6c:b7:e1:4f:e2:5a:1d:f2:a6:3c:a1:81:
                    68:78:09:ef:8c:35:0c:b5:b8:d2:73:9d:48:46:1d:
                    ea:4f:7a:ce:e9:44:48:33:5f:db:c8:ae:a6:27:29:
                    d4:e9:bf:d3:4e:1f:e3:81:bd:66:ed:99:a5:2a:e4:
                    b7:42:ce:39:af:e2:e2:49:fa:7f:fc:8b:30:0e:93:
                    ac:37:28:8d:16:7b:9c:87:f5:9e:78:6f:4e:2c:99:
                    6c:c4:60:74:d2:b4:3a:02:0d:38:38:63:b1:5d:e3:
                    fa:23:af:27:3f:6e:1b:77:c3:b6:de:e6:d2:de:c0:
                    93:fc:e5:db:98:ce:07:af:be:fc:e7:87:73:9b:70:
                    b4:1a:5a:ac:87:ad:6a:00:04:2e:14:a3:67:a6:3d:
                    49:95:2c:93:6e:f0:4d:61:3b:ec:44:0a:d1:d0:d1:
                    8b:8d:0d:42:22:94:d0:be:e4:82:16:c4:8a:59:73:
                    29:5d:b3:8f:76:e4:c2:09:b6:57:42:3f:dd:38:8c:
                    6e:51:17:21:77:7e:19:7c:3b:b5:6d:5f:a5:25:8e:
                    a8:f7:18:90:b8:ba:31:38:91:81:d5:ca:e9:c3:d0:
                    a1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E4:44:F6:A2:9C:E9:EA:92:E3:FD:0B:96:E2:E8:3E:49:7F:EC:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/3ffa981a-91a8-3617-9331-ea8500d52ebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl

            X509v3 Authority Key Identifier:
                keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.216.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:bb:22:c1:cb:be:64:e2:7f:2e:08:4a:95:da:e0:27:08:52:
         e1:36:59:73:4c:3d:68:6a:81:73:d2:13:15:75:23:64:3e:4b:
         27:0d:bd:9c:28:6e:9f:62:cc:cd:06:dd:62:97:98:c7:bd:7e:
         ae:f0:56:0b:e0:1c:49:e2:c2:f3:5b:62:42:fd:e0:27:13:3d:
         fc:38:1f:9e:11:d6:2b:1c:67:a2:b4:46:e7:c2:f9:fb:51:45:
         4f:c1:dd:56:79:5b:db:f1:dc:3c:82:75:e4:39:fe:f8:a3:7b:
         ef:b7:d8:30:48:d1:93:8d:c4:4e:2c:01:94:49:1f:5c:52:37:
         08:98:fc:b7:7d:74:6b:50:a0:73:03:5a:fe:54:d6:d0:79:c5:
         c2:80:0f:5f:49:5c:e1:3f:48:07:ce:eb:29:c8:b5:56:42:90:
         31:62:b1:bf:63:ff:e6:02:fe:3d:eb:07:22:3f:08:6a:04:ed:
         f1:97:db:df:0a:3f:69:63:a4:e1:2d:7f:93:e8:b6:5f:7d:e0:
         7a:47:55:dc:50:20:ac:1c:47:29:83:12:be:83:3e:d7:32:df:
         1b:58:37:de:99:41:84:5f:0b:07:07:78:cc:8c:dd:a3:e6:e2:
         2f:5c:05:6e:d7:77:bb:f6:f3:2b:75:2c:b1:5e:4f:cb:cb:e6:
         28:39:cb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:34:41 2025 by rpki-client