Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/96bd39ad-279b-3a41-8e9b-207af3af6a5d.roa
File:                     96bd39ad-279b-3a41-8e9b-207af3af6a5d.roa (raw, json)
Hash identifier:          Dmbcs2QaDJa2e7oDhxKhXfVOpcBxyJEJPZT3v+XXGSQ=
Subject key identifier:   E6:75:F4:B8:47:6C:A5:86:4C:B0:35:DF:17:2E:B0:61:40:69:03:57
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F4328584A2ABAD91CC8EF784080BAC5C0
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/96bd39ad-279b-3a41-8e9b-207af3af6a5d.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     35758
IP address blocks:        216.158.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:d9:1c:c8:ef:78:40:80:ba:c5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=655d3ef1-11ac-467b-9067-32365d34671d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ae:7b:8a:b9:1c:48:3b:d2:ab:14:49:df:03:
                    e0:24:aa:cf:83:eb:c8:12:f1:31:3e:f2:0f:9b:bd:
                    4f:fd:1c:ca:fa:26:67:bc:06:62:07:1c:7c:93:3d:
                    64:ad:61:b8:e5:91:80:e6:12:5a:9c:67:8e:cd:08:
                    a2:b5:45:3f:ec:fd:88:1e:3b:1f:44:a2:19:c2:9d:
                    77:1a:06:ac:29:6e:02:73:15:1e:b8:58:7c:ba:64:
                    13:af:2f:aa:89:18:8f:1f:1e:94:42:a7:23:8a:c7:
                    d0:3c:79:fc:30:c9:5a:f9:f7:09:c6:70:49:f7:d8:
                    84:b3:3f:64:0b:ff:ec:36:4b:67:68:82:26:f0:90:
                    3a:20:fa:b6:3b:99:54:5d:1b:97:14:88:03:10:26:
                    68:86:21:ef:b7:a3:93:3e:e2:8c:d8:ac:1b:dc:9e:
                    12:f2:6a:48:77:9f:fc:4c:5b:fe:95:99:8b:42:82:
                    0a:43:f5:6d:d4:1b:f9:d3:17:dc:dd:81:e8:c2:0e:
                    26:64:8f:00:be:45:7b:11:90:ef:42:59:75:cf:9b:
                    12:58:48:fc:a5:4e:c2:c1:8e:42:63:26:13:a4:9e:
                    0c:33:5d:39:28:5b:8b:04:b5:a1:bf:b5:9f:2b:cc:
                    ab:fb:2e:58:d5:ed:4f:0a:3b:71:68:dc:62:05:5f:
                    36:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:75:F4:B8:47:6C:A5:86:4C:B0:35:DF:17:2E:B0:61:40:69:03:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/96bd39ad-279b-3a41-8e9b-207af3af6a5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.158.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:b4:9c:6c:92:c1:f9:a7:3b:66:f2:96:32:b6:13:b4:07:59:
         f6:72:dc:6e:3d:57:64:a5:c7:5c:3c:9f:73:a5:60:22:da:47:
         fd:17:57:ae:60:1e:fd:b9:9f:5a:14:d2:1c:56:c0:e0:46:bb:
         3e:3b:38:19:2f:5b:cf:44:d3:63:33:fd:99:2d:51:91:f9:e1:
         cc:e9:ce:9e:4c:1a:16:df:d1:9e:b1:83:19:9d:15:47:ae:8f:
         74:07:1c:ad:74:f4:b5:01:e9:2f:62:c8:b4:d6:82:09:3b:e4:
         a5:ec:f2:1c:a5:3d:7a:22:70:e2:21:e4:29:d6:ee:7a:e2:94:
         4c:c3:6f:a1:92:e1:c8:8a:f4:01:44:cf:6e:96:9b:58:fc:15:
         f9:98:6c:a9:d5:ac:db:f5:f6:7e:2f:03:4f:ad:bc:f5:64:af:
         3c:80:6e:28:b2:5a:88:9e:e9:73:20:31:5d:bc:07:0c:bf:73:
         3c:cb:fe:aa:df:5c:ef:db:af:60:ab:5a:96:55:00:93:21:3b:
         82:9f:82:97:b8:13:91:de:c7:4b:43:6d:56:e8:c6:25:a9:b8:
         76:ac:62:67:88:2b:42:30:ae:dd:4f:9c:9a:b7:3d:a8:cd:d6:
         84:76:8f:52:03:e9:49:c8:ed:6e:46:f2:b8:29:79:4f:26:41:
         a2:1b:59:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:19:40 2025 by rpki-client