Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/a8472b68-cb56-34fd-b329-455d887033e9.roa
File:                     a8472b68-cb56-34fd-b329-455d887033e9.roa (raw, json)
Hash identifier:          mALe/ttQHS7dpkdS0BN8Ml+wRgnlPD1KAt1y8X5IBkM=
Subject key identifier:   93:26:EC:2D:23:5C:79:2D:70:17:F5:2E:72:6C:0D:33:30:B7:60:1C
Certificate issuer:       /CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882
Certificate serial:       010D0C9F432858499DBF3346FCCF71CD24047080
Authority key identifier: 21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/a8472b68-cb56-34fd-b329-455d887033e9.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     1100
IP address blocks:        185.216.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:33:46:fc:cf:71:cd:24:04:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6efa8829-56f5-4ac1-98c6-e4bf119bd882
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=f85c67b5-0155-4116-9072-85cedcfb98e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e0:ff:19:21:e3:c7:eb:df:ae:bc:26:1f:12:
                    14:4c:81:ec:fe:e6:3c:5b:30:93:f4:50:a2:20:9c:
                    38:1a:60:1f:6f:f7:6c:49:67:21:47:68:d4:37:be:
                    58:15:2b:62:2a:81:5d:59:b0:3a:ba:e1:c0:d8:30:
                    ff:1b:35:33:5d:48:cf:a3:70:29:aa:36:ee:81:02:
                    09:33:c6:76:2a:89:ff:24:27:ef:ab:f2:ef:02:0a:
                    2c:af:ea:9e:d6:23:e5:cd:bf:e9:22:73:28:d6:6c:
                    e1:8d:48:e9:dc:a0:b4:64:55:c5:2b:cf:5f:5b:80:
                    c0:74:00:85:4a:e2:5c:c6:d9:68:2d:c2:1d:fe:3b:
                    31:b3:2f:55:89:de:8c:8a:49:a4:87:22:07:84:56:
                    31:7f:f2:01:fc:db:83:ae:78:82:29:8f:cc:50:f9:
                    21:41:ad:3a:6d:7a:51:39:fa:fa:98:7c:e4:28:27:
                    19:dd:02:fc:15:7d:c1:8c:05:c5:58:d0:a9:70:b0:
                    4f:f2:a8:79:6e:6d:09:8d:61:2b:ae:3c:67:a4:ac:
                    aa:f1:4f:9f:48:b0:20:07:65:eb:b3:12:63:e2:43:
                    66:01:4b:59:19:26:2a:3a:bd:ba:39:c8:9d:3b:b5:
                    61:d3:b7:21:1b:21:75:84:62:dc:e6:e2:70:45:a8:
                    ae:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:26:EC:2D:23:5C:79:2D:70:17:F5:2E:72:6C:0D:33:30:B7:60:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/a8472b68-cb56-34fd-b329-455d887033e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882/6efa8829-56f5-4ac1-98c6-e4bf119bd882.crl

            X509v3 Authority Key Identifier:
                keyid:21:07:50:8A:64:0D:BD:AF:AB:C5:7F:D7:60:19:6C:50:81:62:51:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6efa8829-56f5-4ac1-98c6-e4bf119bd882.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:68:a9:73:a8:46:6c:1a:e7:14:d3:52:c3:2b:c2:a5:7c:25:
         f2:c2:c6:5a:82:df:e3:f2:10:75:19:9a:43:1c:da:47:7d:a2:
         56:22:ad:e6:a1:53:8c:04:bf:f4:00:e3:64:1b:d6:37:72:89:
         94:cc:3c:51:6e:7f:45:30:16:72:f8:91:4e:48:78:21:37:f2:
         1d:f2:4a:e4:21:2b:fe:44:fc:3d:d6:6b:21:c9:b9:91:2f:43:
         21:00:d7:94:db:ca:27:f4:f1:59:24:a9:c3:f7:e1:95:12:01:
         2e:b0:c3:a3:1e:7e:64:66:4d:a9:53:ae:e5:99:ba:f2:8a:24:
         49:fa:a8:6d:44:ff:c7:0b:30:a4:14:5c:d9:2e:62:2a:7d:00:
         1f:81:a6:4b:64:8b:01:c9:d5:4c:c4:02:6e:fc:37:98:6d:e3:
         8e:7e:56:68:89:b4:ce:40:30:d0:38:fb:cc:ad:1b:79:85:dc:
         24:53:4d:47:3e:54:68:ee:a7:e7:df:78:d1:0f:c5:89:a8:a1:
         3e:b1:8a:b0:e1:91:f4:2f:18:5f:e2:75:85:63:1e:b2:86:24:
         68:c3:af:77:e5:f4:ba:93:b6:6a:41:15:28:be:0d:ba:be:98:
         79:7e:75:51:4f:69:43:05:fe:04:6c:c6:bc:39:35:33:bf:f3:
         e1:ae:6c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:57:14 2025 by rpki-client