Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/6f3608bf-3d7e-3946-adc4-5ab836814644.roa
File:                     6f3608bf-3d7e-3946-adc4-5ab836814644.roa (raw, json)
Hash identifier:          9u/Sw5kLgqff0F6+cSqU6SDR1Oroap16YPBIcRJ4OCw=
Subject key identifier:   2E:DE:B1:CC:00:E3:A2:3D:B4:17:67:14:F8:F2:DD:75:33:E6:59:B8
Certificate issuer:       /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial:       010D0C9F4328584A1E2AA8DEF685B618F4A85180
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/6f3608bf-3d7e-3946-adc4-5ab836814644.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     8635
IP address blocks:        16.1.38.0/24 maxlen: 24
                          16.240.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:a8:de:f6:85:b6:18:f4:a8:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=537da651-ade1-4ff1-9a6d-72e1ac5b86b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:62:6e:75:aa:35:cb:d3:4a:97:ab:e1:c3:4f:
                    1e:d5:33:19:fe:ed:f1:f2:a1:6f:a7:54:99:ef:83:
                    26:ce:70:6d:27:3d:86:04:f6:07:be:a5:75:2e:55:
                    04:fa:c2:00:bd:35:aa:75:36:7a:b6:6f:a2:cb:b1:
                    23:f9:9b:e2:f3:07:5e:a4:91:ab:b7:aa:63:b7:44:
                    b0:d5:5f:d8:c6:71:91:36:b9:74:a1:64:88:cc:6b:
                    63:70:40:89:56:86:5b:45:47:f0:38:31:cd:70:db:
                    55:b6:5e:20:f4:b4:66:b3:0e:e0:af:d7:49:cb:5d:
                    2e:14:f5:28:5c:cf:58:81:b8:fe:a8:3a:47:f8:62:
                    d6:ae:5a:c3:d7:92:73:7b:e7:32:81:e9:7e:74:5b:
                    54:23:90:de:8d:c3:33:29:37:60:3c:1f:89:62:f3:
                    c7:d6:60:c7:7c:e2:d3:66:ff:37:01:97:c4:e1:14:
                    cb:56:e0:1d:c3:fe:77:7a:3a:23:24:4d:05:65:91:
                    1f:2e:d3:ff:46:19:30:cf:15:eb:d0:e5:ff:4d:cf:
                    80:f2:0b:49:68:a5:11:56:59:95:68:ae:7d:12:6e:
                    26:5f:bf:d5:a4:ed:9b:b7:0f:2c:90:c6:90:84:59:
                    60:04:57:b0:10:8c:f7:e3:6b:ec:5b:30:d5:0f:26:
                    dc:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DE:B1:CC:00:E3:A2:3D:B4:17:67:14:F8:F2:DD:75:33:E6:59:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/6f3608bf-3d7e-3946-adc4-5ab836814644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl

            X509v3 Authority Key Identifier:
                keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  16.1.38.0/24
                  16.240.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:57:cc:9d:fa:bf:c1:b8:e9:55:ba:70:39:27:82:44:3f:ba:
         42:22:ba:9e:46:cf:db:35:03:8f:d1:fb:0c:83:a8:6e:99:52:
         1a:45:ad:78:d4:16:ed:02:00:9e:6c:12:17:3c:50:f6:59:6e:
         53:3d:c6:c7:dd:7f:96:a1:0c:32:59:f2:94:90:bc:6c:c6:ce:
         fe:c5:03:60:fc:a6:83:c6:d3:ff:66:47:43:27:21:7f:20:10:
         16:8b:0a:65:7b:af:85:a2:8b:4d:67:64:57:a1:32:bc:a7:70:
         90:6b:7d:58:f3:a9:af:e8:37:e0:f7:9a:15:d5:c2:eb:0b:ef:
         3a:bc:1d:b7:cf:a2:4c:50:7f:6e:fb:7c:39:f1:88:46:4c:08:
         ec:e5:3a:44:97:96:e2:5a:75:75:5f:54:18:01:87:3a:e1:92:
         98:a7:5a:8a:c3:37:88:bf:80:ba:9a:69:9b:0d:f7:52:e2:c4:
         df:da:d2:bf:bb:83:c3:e9:c0:61:e8:f2:ba:4a:95:db:07:79:
         da:50:eb:fd:b8:34:75:c3:89:2f:51:f0:e9:f9:f6:4e:56:c2:
         28:00:f3:ae:4f:c7:72:cb:29:4a:23:2d:ee:c8:7e:fc:b1:4a:
         d0:24:a4:cc:ab:2f:a0:94:dc:98:ee:9a:a2:17:b4:bc:01:b9:
         d4:d4:95:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:10:19 2025 by rpki-client