Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/16b704f1-00d2-3275-b255-32b4eae3f37c.roa
File:                     16b704f1-00d2-3275-b255-32b4eae3f37c.roa (raw, json)
Hash identifier:          H/aeaGUOUAFtCydFruNBjY5VSHtWq7UltcpPfn2TM1Y=
Subject key identifier:   38:39:85:31:DF:A7:97:95:0A:8A:CE:9D:3E:8C:A5:27:E8:E8:2D:76
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F4328584A2C20148734179DFDAC318980
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/16b704f1-00d2-3275-b255-32b4eae3f37c.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     1239
IP address blocks:        204.119.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:14:87:34:17:9d:fd:ac:31:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=c5b4b213-d64d-4773-8335-f48afed90a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ee:c3:36:6f:9a:26:f3:37:ab:5d:8f:c1:c8:
                    32:ea:07:bd:4f:88:0f:27:e0:25:01:19:20:0a:1d:
                    b9:3a:3f:46:84:d2:fb:94:d2:4b:26:14:9d:d6:96:
                    a5:98:62:df:6c:10:63:65:d0:3d:66:7f:80:6b:69:
                    a6:e7:9c:57:89:61:07:1b:61:a8:9e:a4:90:44:c3:
                    5e:4a:7e:5c:2e:65:28:3f:f7:25:2b:73:78:93:42:
                    77:3d:32:9f:ac:f6:98:c5:a7:8a:6b:d7:31:0b:09:
                    cb:8f:32:60:97:a3:36:68:48:b6:fc:b2:b3:a7:af:
                    62:9d:13:d2:27:c8:c7:ca:8f:16:ed:48:33:89:2b:
                    2b:32:c9:18:b2:af:be:69:d1:31:df:33:e5:0d:b6:
                    12:6b:a1:87:c2:ca:5b:d1:56:c3:46:65:5b:25:0d:
                    2e:02:b7:0a:cc:40:36:d6:cc:5f:ae:5a:e6:41:e5:
                    63:5c:df:55:8e:8f:c9:26:55:0f:9d:2a:c1:77:06:
                    d4:90:2c:d5:ae:d2:eb:a4:89:13:24:9f:fa:9a:ca:
                    7e:b6:7d:00:f4:cc:2a:0e:6f:0c:a1:93:e8:a2:b0:
                    e9:db:8f:9a:82:53:40:b9:d9:cb:f0:70:e8:c6:f4:
                    41:47:87:b5:f8:fc:7a:36:b0:71:c4:e2:e3:47:f9:
                    2e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:39:85:31:DF:A7:97:95:0A:8A:CE:9D:3E:8C:A5:27:E8:E8:2D:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/16b704f1-00d2-3275-b255-32b4eae3f37c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.119.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:17:67:14:30:bd:6a:17:b3:3a:5b:11:5e:e7:18:e6:fc:5b:
         15:4a:34:9f:5d:df:9a:a9:23:5d:44:4a:a5:e7:bc:3f:4e:1b:
         c3:0f:25:d1:80:fe:8f:fc:c7:24:5b:b7:24:23:34:0d:2b:1b:
         ce:44:8a:37:08:f7:99:a7:e6:59:9a:5f:eb:b8:e0:1f:4f:98:
         6b:59:f5:17:ed:f2:5f:74:08:e9:4e:39:29:7a:de:64:98:76:
         c8:ed:01:39:ad:fe:fd:b5:1b:cf:af:45:22:8a:dd:58:91:1f:
         c4:da:4c:37:3f:a2:e0:0f:ad:b1:5e:33:d5:da:e7:64:50:70:
         7d:2f:75:6f:08:63:3f:b7:ec:99:91:68:73:59:2a:45:93:07:
         39:d1:f3:09:a7:ea:d8:44:e2:1f:b2:c7:b4:5a:5a:b0:2e:e9:
         07:25:e7:ab:9c:02:c0:0f:fd:cf:c4:e5:fb:5b:cc:ae:83:a9:
         07:ab:19:f5:14:7d:83:b1:b0:70:3b:a7:31:f4:83:4f:09:09:
         f8:c1:a4:d2:21:04:89:da:71:87:d7:0c:15:4d:2e:49:2f:c3:
         a0:be:47:cb:a7:ed:3d:80:dd:83:ca:e6:43:86:e4:47:d4:74:
         d9:7e:ff:82:06:8d:81:bf:2b:3e:a8:01:b9:33:07:3b:94:58:
         df:ea:66:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:22:46 2025 by rpki-client