Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/9efb72b6-e5a6-3dca-af65-3982a56ca00d.roa
File:                     9efb72b6-e5a6-3dca-af65-3982a56ca00d.roa (raw, json)
Hash identifier:          etMMidtnUXyoh0ISo8uJ6zQhZNL6tprhEoLUWWNjdCw=
Subject key identifier:   23:D1:C6:60:85:5F:3B:CC:99:9E:14:8B:2A:8A:88:F1:FD:32:B8:B4
Certificate issuer:       /CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
Certificate serial:       010D0C9F43285849E7BA8726A98CCD26E44D6940
Authority key identifier: 1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/9efb72b6-e5a6-3dca-af65-3982a56ca00d.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     396416
IP address blocks:        216.211.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:87:26:a9:8c:cd:26:e4:4d:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd711b5-d16f-4549-9e75-bd201f5b7a13
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=861eb4ee-1512-472f-9133-7c0d90e44e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ec:f7:d1:df:b6:ec:55:68:7d:76:08:c4:ea:
                    2d:ea:eb:71:01:64:68:28:55:ca:a2:72:73:a2:1f:
                    9f:9c:29:26:f1:81:1f:72:cc:fa:06:d5:e4:8a:5d:
                    76:9d:52:97:23:85:13:9b:72:0c:98:d2:12:ec:7b:
                    f0:6b:2b:2f:ec:18:3b:48:18:85:f9:b5:b5:07:96:
                    36:21:e6:e0:5e:52:9b:66:e4:0d:b4:f3:86:c6:d7:
                    fd:21:a9:75:c9:42:71:19:46:61:56:bb:f0:57:1e:
                    a7:72:b2:0d:c0:e8:f1:02:ce:c1:26:6e:6d:3a:17:
                    da:73:04:76:40:a2:03:9f:ed:4c:62:e6:91:a9:04:
                    a7:73:e1:f2:64:81:4a:65:99:65:53:23:a1:35:d7:
                    19:1f:ac:13:27:d9:80:cf:df:ee:65:79:1c:6a:88:
                    d7:b4:6b:4c:f0:84:73:f9:dd:a8:fb:08:98:3a:a2:
                    c3:62:4c:c5:e7:0c:20:44:ab:00:ab:dc:9d:28:f2:
                    21:69:32:d2:39:d9:10:3f:9f:5f:64:4d:15:53:c9:
                    00:90:f1:d9:67:da:17:ca:36:96:bd:32:b9:f5:10:
                    e4:7d:dd:63:28:66:46:b7:00:b6:9a:f3:69:13:bb:
                    79:f5:f1:96:20:bb:cb:02:d5:ac:ad:06:4d:1e:65:
                    55:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D1:C6:60:85:5F:3B:CC:99:9E:14:8B:2A:8A:88:F1:FD:32:B8:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/9efb72b6-e5a6-3dca-af65-3982a56ca00d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13/fdd711b5-d16f-4549-9e75-bd201f5b7a13.crl

            X509v3 Authority Key Identifier:
                keyid:1C:72:86:4A:24:9C:83:B3:CC:03:93:D4:9C:B8:8D:82:A8:89:95:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fdd711b5-d16f-4549-9e75-bd201f5b7a13.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.211.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:a7:80:74:f2:bb:49:11:2e:3a:e3:15:46:1a:03:57:a8:d5:
         20:4c:73:06:df:03:7e:4a:01:5d:ac:df:f1:e4:c8:27:47:40:
         57:16:2b:97:b1:74:04:c4:92:35:40:d8:7b:44:dd:56:5f:e4:
         8d:f3:af:b3:12:b7:eb:b8:f3:7c:10:1a:25:2d:9c:cf:48:b2:
         7d:e3:12:ac:37:8a:64:a7:c5:f8:b0:d1:29:22:6a:20:c1:84:
         07:ff:44:02:a6:72:5f:d3:31:10:c0:17:c7:a4:a2:a5:73:e4:
         44:9c:01:61:3c:6d:71:e8:65:65:95:c8:55:c1:f4:66:4c:a8:
         83:45:e2:68:d2:1c:82:83:14:7a:af:51:c4:2c:a7:85:04:98:
         de:74:b1:a4:4a:cf:d2:2a:88:fb:3e:a9:e3:28:72:21:34:89:
         af:a5:a7:d3:16:f6:c4:1c:3e:71:06:a4:a0:c8:a6:cc:92:53:
         29:24:5a:17:65:62:d1:aa:96:57:4d:19:d5:69:1c:44:9b:b3:
         cc:82:94:d7:9b:32:fe:24:5b:37:ce:eb:bf:23:cf:6f:ac:6a:
         16:f7:ee:f5:a3:d1:f7:ec:12:9c:d9:d4:79:44:f8:53:b9:44:
         91:70:7e:fb:8f:37:78:57:67:4e:97:3a:75:7f:38:89:11:ee:
         f5:75:7c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:01:37 2025 by rpki-client